Security & Hacking: Twitter discovers live attack, possible 250k users impacted

Source http://blog.twitter.com/2013/02/keeping-our-users-secure.html:

"We discovered one live attack and were able to shut it down in process moments later. However, our investigation has thus far indicated that the attackers may have had access to limited user information – usernames, email addresses, session tokens and encrypted/salted versions of passwords – for approximately 250,000 users."

Twitter has revoked tokens & forced password resets for impacted accounts, they also suggest disabling Java in browsers, and using at least a 10 character password.

All very good security advice.

I am actually impressed with information they provided in that post.  Well done message for general audience.

Security & Hacking: "SMS Vulnerability in Twitter, Facebook and Venmo"

http://titanous.com/posts/twitter-facebook-venmo-sms-spoofing

Jonathan Rudenberg found SMS Texting vulnerabilities in Twitter, Facebook, and Venmo, he notified all of them of their respective problems.

Unfortunately Twitter has yet to patch this vulnerabilty, though Facebook and Venmo have reportedly dealt with it.

I suggest you make sure you have Twitter Text messaging turned off, should be under settings, then Mobile.

Nerd News: "Congress members ask FBI to shut down Hamas Twitter account"

http://www.theverge.com/2012/11/24/3685616/congress-members-fbi-hamas-twitter-shut-down-idf

Can't say I have clear thoughts on this whole mess.

But it does remind me, a bit, of a movie called Wag the Dog.

PSA: Twitter Blackhole Malware Alert

See Sophos Naked Security Blog post for details.

Current versions are using tweet about is it you in photo, with link, but link installs malware.

TLO's Twitter, since correct one is little hard to find on Google

I found out today that Teamliquid TLO actually tweets a lot about when he is going to stream Starcraft 2 & etc.

I didn't know that cause the Twitter the Google shows for TLO is either one he never used or a fake one, under Dario (his real name).

Once I looked on TL it was easy to find TLO's real Twitter https://twitter.com/#!/LiquidTLO

or @LiquidTLO


If you don't want a Twitter account you can RSS Twitter accounts, I posted instructions for that on Cliff's How To Corner, http://howtocorner-cliff.blogspot.com/search/label/twitter

Nerd News: Programming with Tweet length code

I saw this story today on I Programmer, about coding Tetris using only 140 characters.

There is a whole site, called 140byt.es dedicated to Tweet sized Java script.

This strikes me as elegant, with challenges and personal rewards similar to Haiku.

PSA: Twitter "Find Friends" on cell phones, copies email addresses and phone numbers to their servers!

Full story here at LA Times, also picked up by Naked Security Blog here, and though those stories are focusing on the iPhone, the LA Times article states "mobile users" not just iPhones.

The Register's article, specifically mentions "iOS and Android clients."


The LA Times story originally said that Twitter was storing names from address book as well as email and phone numbers, which is what Twitter told them originally, but they have an update/correction at the end of their story, stating that Twitter now says that it is just email and phone numbers.


Makes me feel a bit more strongly that we should have a Digital Bill of Rights, here in the USA.

Starcraft 2 News: SC2trans! Korean tweets translated!

https://twitter.com/#!/SC2trans

Big thank you to SC2trans!

Every SC2 nerd should follow them!

I've added Twitter for anyone that wants to follow me on Twitter

[Updated 11/1/2011 fixed bad links, Sorry Changed Twitter like first week, got rid of "_ " in my Twitter account and forgot to update this.  My bad.]

I doubt I will tweet much, but it allows me to follow SC2 news a little easier.

Will mainly post about big events, and interesting specific games.  Plus the occasional retweet of something interesting or amusing.

I will try to Tweet every time I change the listing in the "Event Corner" at top right.

Twitter Link: https://twitter.com/#!/CliffsEsport

Or follow:  @CliffsEsport

Or real simple [have this at top left of blog also]Follow @CliffsEsport


RSS is enabled for the blog, I am used to using Firefox so I subsrcibe to things from the URL bar, but if that doesn't work for your browser, you can scroll to the bottom of the blog.  Left side has RSS feeds, and the right side has email feed.

MLG Raleigh on Twitter

If you want to follow MLG Twitter.