Twitter's OAuth security system

[Sasha]

Twitter's OAuth security system
Ars Technica
September 2, 2010 - Twitter officially disabled Basic authentication this week, the final step in the company's transition to mandatory OAuth authentication. Sadly, Twitter's extremely poor implementation of the OAuth standard offers a textbook example of how to do it wrong. This article will explore some of the problems with Twitter's OAuth implementation and some potential pitfalls inherent to the standard. I will also show you how I managed to compromise the secret OAuth key in Twitter's very own official client application for Android. OAuth is an emerging authentication standard that is being adopted by a growing number of social networking services. It defines a key exchange mechanism that allows users to grant a third-party application access to their account without having to provide that application with their credentials. It also allows users to selectively revoke an application's access to their account.

I do not use Twitter or Facebook. This info is for those of you who do.

Ushahidi and Usenet are very useful.

[Sasha]

How to Avoid Getting Your Twitter Account Hacked
Threat Post
August 18, 2010 - How to avoid getting your Twitter account hacked.

<< Mozilla Updates Thunderbird

<< Security a Concern as HTML5 Gains Traction

<< Mozilla puts brakes on auto Firefox updates

[Sasha]

'Onmouseover' Bug Affecting Twitter

[atm]

Just do not tweet. If you do, you must be a twitt

er...

atm

[Sasha]

Track Twitter
Science Daily
September 28, 2010 - A group of Indiana University information and computer scientists have unleashed Truthy.indiana.edu, a sophisticated new Twitter-based research tool that combines data mining, social network analysis and crowdsourcing to spy.