Fergie's Tech Blog

Twitter Clickjacking Hack Released

Kelly Jackson Higgins writes on Dark Reading:

A Web developer has released a proof-of-concept clickjacking attack targeting Twitter that demonstrates how an attacker could take over a member's "update" function on the microblogging site.

In a nutshell, all it takes is for the victim to click on a seemingly innocent link on a Webpage while logged into Twitter, and then his or her "What are you doing?" status is under the attacker's control. "It means anyone can update your Twitter status without you knowing," says James Padolsey, the independent Web developer who wrote the PoC and published it on his Website.

posted by Fergie @ 2/03/2009 09:23:00 PM