{"id":1512,"date":"2010-09-21T07:31:14","date_gmt":"2010-09-21T13:31:14","guid":{"rendered":"http:\/\/www.evolutionarydesigns.net\/blog\/2010\/09\/21\/caution-twitter-mousover-security-flaw\/"},"modified":"2010-09-21T07:47:29","modified_gmt":"2010-09-21T13:47:29","slug":"caution-twitter-mousover-security-flaw","status":"publish","type":"post","link":"http:\/\/www.evolutionarydesigns.net\/blog\/2010\/09\/21\/caution-twitter-mousover-security-flaw\/","title":{"rendered":"Caution: Twitter Mousover Security Flaw"},"content":{"rendered":"

\"poolbird\"<\/a> Earlier today  Sophos website released<\/a> a warning about Twitter<\/a> mouseover and how some users are exploiting a new security flaw using mouseovers. This exploit causes popups and thirdparty websites to popup in your browser by just moving your mouse over the link. Right now most users are using the exploit to create a rainbow effect in their tweets. Because of this "loophole" some users may use it to hide the true content. Below is an example what some are doing with the flaw. <\/p>\n

\"Twitter<\/a> <\/p>\n

Potential Threats<\/h1>\n

As a tech support professional this is a big deal to me. Before getting into web design, I use to be technical support research analyist and before that I did a lot of PC repairs that including repair PCs that were infected with all sorts of junk. To me, this danger and should not be taken lightly. There are a lot of people out their that just want to hurt others. This exploit could easily go bad for Twitter and their users. There all sorts of things you could do with exploit that could cause havoc to a Twitter user’s machine. So be careful when using Twitter’s website to read Tweet stuff. If weird things happens close the popups and get off Twitter’s page right away. If those popups ask you something such as "click here" or asks you to download something, DO NOT DO THAT! <\/strong>Just close the popup by using the x button that you normally would use to close a window. <\/p>\n

From the research I found, Twitter isn’t talking about it and several sites have asked for feedback from Twitter. But they haven’t gotten back to these requests, and Twitter’s blog hasn’t even made mention of this as of 8:13 AM central time on September 21, 2010. I will keep looking into this and if I find anymore or I find out this has been fixed I will let everyone know. <\/p>\n

So in the mean time, I would stay way from using Twitter’s website and use third party apps such as Hootsuite<\/a> or TweetDeck<\/a>, since they do not seem to be affected by this security flaw. <\/p>\n

For more details about the security flaw please check out Twitter ‘onmouseover’ security flaw widely exploited<\/a> <\/p>\n

News Source: Sophos<\/a><\/p>\n

Image Credit Sophos Screen Shot<\/a>, bird in the pool<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Earlier today  Sophos website released a warning about Twitter mouseover and how some users are exploiting a new security flaw using mouseovers. This exploit causes popups and thirdparty websites to popup in your browser by just moving your mouse over the link. Right now most users are using the exploit to create a rainbow effect […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[108],"tags":[605,604,1493],"class_list":["post-1512","post","type-post","status-publish","format-standard","hentry","category-twitter","tag-mouseover-security-flaw","tag-security-flaws","tag-twitter","entry","has-post-thumbnail"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pJPdG-oo","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"http:\/\/www.evolutionarydesigns.net\/blog\/wp-json\/wp\/v2\/posts\/1512","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.evolutionarydesigns.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.evolutionarydesigns.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.evolutionarydesigns.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.evolutionarydesigns.net\/blog\/wp-json\/wp\/v2\/comments?post=1512"}],"version-history":[{"count":0,"href":"http:\/\/www.evolutionarydesigns.net\/blog\/wp-json\/wp\/v2\/posts\/1512\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.evolutionarydesigns.net\/blog\/wp-json\/wp\/v2\/media?parent=1512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.evolutionarydesigns.net\/blog\/wp-json\/wp\/v2\/categories?post=1512"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.evolutionarydesigns.net\/blog\/wp-json\/wp\/v2\/tags?post=1512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}