News - Twitter victim of ‘onmouseover’ hole

[HEXUS]

Problem patched and extra features for new look Twitter revealed.

Read more.

[ploo]

It's worrying that a site like Twitter can have such security flaws.

[scaryjim]

Not really - any site whose business model is based almost entirely on user input is going to end up having some loophole exploited. Without knowing the vector of attack in detail you can't say whether this is a blatant flaw that should've been obvious during development, or whether it's a cunning hack that would be dififcult to foresee.

Social networking sites live and die on the freedom they give their users - lock down too tight and you risk losing the functionality that makes the site popular in the first place. The key is how quickly they respond to fix security holes when they are exposed: in this instance it sounds like they've moved fairly quickly, so fair play to them...