I won’t beat a dead horse…we all know that Twitter had a few *security issues* this week. The good news is that usually once something like this happens to a company (especially one that gets so much media attention) things start to change and security gets taken a bit more seriously. Lets remember that Twitter […]
Summary of the Twitter Security Incidents Read More »
Welcome to 2009! As many have said…it was just a matter of time before Twitter had a somewhat significant attack…well, here it is! I just had a post up last week about how many of us that use social media just blatantly trust every site that asks us for Twitter credentials. Well if you don’t
First Twitter Phishing Attack of 2009 Read More »
There was a good post over at ThreatChaos the other day about a new Firefox extension which will automatically show you the real URL’s of shortened URL’s. What is URL shortening? For example…this long URL: http://www.google.com/maps?f=q&hl=en&geocode=&q=washington+dc&sll=37.0625,-95.677068&sspn=33.764224,56.25&ie=UTF8&ll=38.905996,-77.023773&spn=0.25915,0.439453&z=11&g=washington+dc&iwloc=addr becomes… http://tinyurl.com/9lum95 By using a service like Tinyurl or one of the many other sites available you can easily
What’s behind that short URL? Read More »
It’s always interesting to me when I check out a new Twitter application, it always seems to ask you to “verify” your account or ask you to pass your Twitter user name/password to their application. This of course is done without any protections or any way of knowing what happens to your account information on
Who are you giving your Twitter account to? Read More »
I just posted an article for Blogsecurify about a new Facebook phish that I stumbled upon. Thanks again to Greg and Tyler for helping out with some of the detailed analysis! You guys rock!
Analysis of a new Facebook phish Read More »
Today at the Ohio Information Security Summit I released my Facebook Security & Privacy Guide. This guide gives you suggested “baseline” security settings that you can use when configuring your Facebook account. Obviously, you can adjust these settings based on your own level of risk but it should give you a good starting point. How
Facebook Privacy & Security Guide Released Read More »
Over the weekend I posted my first article on Social Network/Media security over at Blogsecurify. You can check out the post here. My next article will talk about the security of third-party applications and widgets for social media applications.
Exploiting trust in social networks Read More »
I am excited to announce that I am now part of the GNUCITIZEN Blogsecurify social media “tiger team”. I am officially a blogger for Blogsecurify and will be posting about security issues/vulnerabilities in social media applications. As you may already know, I have been doing a lot of research recently into Facebook privacy and security.
Tom joins the Blogsecurify team! Read More »
I have been doing lots of research over the last few months on online social networking sites to prepare for an upcoming talk that I am going to be giving on the latest threats to social networks…in particular MySpace, Facebook and LinkedIn. Tonight I received new friend request from someone named “Elysabeth” in my email.
Dangerous MySpace Spam Read More »
Saw this on Liquidmatrix today…. Some programmers in the UK created a Facebook application that could be downloaded by a Facebook user which would allow the programmers to view personal information even with the privacy settings changed. From the UK article: “Details such as the date of birth, address and contact numbers of the user,
New Facebook “Loophole” Found Read More »
