Until February 28 of this year, anyone could have tweeted from anybody else’s Twitter account exploiting a bug in the social network’s ad service.A security researcher found that a flaw in Twitter Ad Studio, a service that allows advertisers to upload media, allowed a hacker to post tweets as any other user.”By sharing media with a victim user and then modifying the post request with the victim’s account ID the media in question would be posted from the victim’s account,” Twitter wrote in its summary of the bug. In plain English, this means that the attacker simply needed to fiddle with the code that gets sent to Twitter when posting something to trick the social network into posting the tweet as somebody elseall without having to hack anyone’s account.
Källa: Twitter Bug Allowed Hackers To Tweet From Any Account – Motherboard
0 kommentarer