Twitter cuts feature on site over security flaw
BOSTON (Reuters) - Twitter has temporarily disabled one of the features on its website after a security researcher warned of a programming flaw that left the login credentials of its users vulnerable to hackers.
Twitter co-founder Biz Stone said in an email that the company had temporarily cut off access to a feature that lets users display Twitter updates on their websites by using Flash technology.
"Our team has disabled the Flash widget while we look into the problem," Stone said.
Mike Bailey, a senior security analyst with Foreground Security of Orlando, Florida, said that the problem exploits a widely known vulnerability in Adobe Systems Inc's Flash programming language.
Adobe has told programmers how to address the vulnerability, which was first discovered in 2006, Bailey added, but noted the operators of many websites have failed to respond to those warnings.
The microblogging site's huge popularity has made it a prime target for hackers looking to spread malicious software to Twitter's millions of users.
"As simple as the attack is, I've been finding them all over the place," Bailey said.
Officials with Adobe declined to comment.
A hacker last month briefly hijacked the Twitter site and redirected it to one that claimed to represent a group calling itself the Iranian Cyber Army. That high-profile attack -- by a perpetrator who stole credentials to the account that Twitter uses to route its traffic -- did not compromise credentials of any Twitter users.
Bailey said his analysis of the Twitter site showed that it could have been vulnerable to attacks for more than a year, but that it was impossible to know whether hackers had actually exploited the Adobe flaw.
He is scheduled to discuss his research on the Twitter flaw at the Black Hat DC security research conference in Washington, which begins on Feb. 2.
(Reporting by Jim Finkle; Editing by Derek Caney and Matthew Lewis)
- Tweet this
- Share this
- Digg this
- U.S. strikes have slowed Iraq militants but not weakened them - Pentagon
- INSIGHT - As Islamic State fighters begin to blend in, defeating them no easy matter
- RBI rule handicaps India's infrastructure hopes
- Japan aims to double India investment in 5 years - Nikkei
- Family of seriously ill Joan Rivers 'keeping fingers crossed' -daughter
Tech for health
Swiss engineers, famous for making the world's finest watches, are turning their hands to cardiology with a prototype battery-less pacemaker based on a self-winding wristwatch. Full Article
China's Tencent shuts messaging accounts after censorship rules - state media. Full Article
Data scientists are increasingly becoming important to the world's tech companies. Video