It's Not Safe to Click Links on X
I think the kindest thing you can say about X (the social network formerly known as Twitter) in 2024 is that it's impressive the site is actually still up and running. Sure, spam bots take over popular threads, hate speech is on the rise (X is suing the company tracking it, by the way), and advertising is way down, but despite it all, twitter.com still manages to load. But the reasons to bother lo
Verified Twitter Vulnerability Exposes Data from 5.4 Million Accounts
Verified Twitter Vulnerability Exposes Data from 5.4 Million Accounts A verified Twitter vulnerability from January has been exploited by a threat actor to gain account data allegedly from 5.4 million users. While Twitter has since patched the vulnerability, the database acquired from this exploit is now being sold on a popular hacking forum, posted earlier today. Back in January, a report was mad
CSP to the Rescue: Leveraging the Browser for Security
Programming is difficult — and difficult things generally don’t have a perfect solution. As an example, cross-site scripting (XSS) is still very much unsolved. It’s very easy to think you’re doing the right thing at the right time, but there are two opportunities to fail here: the fix might not be correct, and it might not be applied correctly. Escaping content (while still the most effective way
Twitter / セキュリティ
Security at Twitter At Twitter, we value your online security as much as you do. Our team works constantly to protect the security of your account, and takes steps every day to provide a secure Twitter experience for our users. Maintaining top notch security online is always a community effort, and we're lucky to have a vibrant group of independent security researchers who volunteer their time to
Kazuho@Cybozu Labs: (Twitter の XSS 脆弱性に関連して) 構造化テキストの正しいエスケープ手法について
昨日の Twitter の XSS 騒ぎは、まだ皆さんの記憶に新しいことと思います。いい機会なので、ツイートのような構造化テキストのエスケープ手法について触れておきたいと思います。 Twitter のメッセージは、単なる平文（プレインテキスト）ではなく、「@英数字」のような他のユーザーへの言及と「http://〜」のような URL を自動的にハイパーリンク化する構造化テキストです。 このような複数のルールをもつ構造化テキストを HTML 化する際には、どのようなコードを書けばいいのでしょう？ まず「@〜」をリンク化してから、URL をリンク化すればいいのでしょうか？ それだと、@〜 のをリンク化した A HREF タグの中の URL がさらにリンク化されていまいますね。 では、URL をリンク化してから @〜 をリンク化すればいいのでしょうか？ それだと、@ を含む URL があった場合に
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
https://twitter.com/npm_malware
Twitter reveals surprisingly low two-factor auth (2FA) adoption rate
Project Zero Bugs (@projectzerobugs) | Twitter
http://twitter.com/safety
