Share

Related Stories

  • Searching for Security
    With more than 30 000 web pages being compromised every day, search engine results could increasingly lead to malware infection. Kari Larsen asks what the search engines are doing to mitigate security threats, and how users can protect themselves
  • Search for security
    With more than 30 000 web pages being infected every day, search engine results could increasingly lead to malware infection. Kari Larsen asks what the search engines are doing to mitigate security threats, and how users can protect themselves.
  • Senator Schumer: current internet security “welcome mat for would-be hackers”
    Chuck Schumer has sent a letter to some of America’s largest internet companies – among them Twitter, Yahoo, and Amazon – asking them to help beef up wireless and internet security by switching their sites to the HTTPS protocol by default.
  • Anti-virus: a technology update
    Anti-virus software might be the archetypal security product, but with so many high-profile malware attacks – including Stuxnet and Zeus – is it doing its job? Kevin Townsend investigates whether anti-virus software is still relevant
  • From the Eye of the Storm: 2011 Information Security Predictions
    Last January, Infosecurity magazine published prognostications by the (ISC)² Advisory Board of the Americas (ABA) regarding the information security field in 2010. Unlike many who have attempted to envision the future, the ABA has gone back and reviewed the accuracy of its predictions and provided a letter grade for each. The ABA will then offer new predictions for 2011.

Top 5 Stories

News

Automated Twitter postings pose a severe security risk

25 June 2009

Twitter has again hit the IT security headlines, this time over the increasing widespread practice of automated retweets - automated repostings - by users of the social networking site/service.

The problem, apparently highlighted by a retweet from former Apple Mac evangelist Guy Kawasaki - now a venture capitalist - in one of his automated postings, is that, if the original tweet includes malicious information, the data is automatically rebroadcast.

And if the recipient of the retweet trusts the sender of the message, the chances of them clicking on an allied URL is quite high.

Finjan, the business Internet security vendor, has come up with a solution to the issue with an enhancement to its SecureBrowsing plug-in for Internet Explorer and Mozilla Firefox.

The SecureTwitter enhanced plug-in reportedly checks each URL as it is called to the browser for its overall safety levels and acts as a free safety net for Twitter users.

The problem of automated retweets is being made worse, Infosecurity notes, by applications such as Seesmic and Tweetdeck, both of which have an automated keyword search function that operates in a similar manner to an RSS feed.

When enabled, these features automatically scan for tweets with a given keyword, again potentially exposing users to unvetted postings.

Finjan's SecureBrowsing - along with other URL checking utilities from the likes of McAfee and Symantec's paid-for IT security offerings - give users a degree of security from rogue messages with embedded URLs.

The problem, however, of having insecure Twitter buddies is a potentially major one, Infosecurity notes.

 

This article is featured in:
Application Security • Internet and Network Security • Malware and Hardware Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.