Twitter quietly checks tweeted URLs - draws criticism

As reported previously, Twitter has been criticised for allowing users to enter any and all web addresses into its messaging system, even where the destination web pages are infected with malware.

Now the Twitter microblogging service is reported to be verifying URLs entered using Google's safe browsing application programming interface.

Unfortunately, it seems the URL checking seystem cannot cope with shortened URL services such as Tinyurl and Bit.ly

According to Robert Macmillan of the IDG newswire service, whilst the new Twitter security feature blocks a URL that leads to a known phishing site, it still allows the site route when a URL shortening service is used.

The irony of this situation, Infosecurity notes, is that Twitter's posts are limited to 140 characters and the service encourages the use of URL shortening services to trim the length of Twitter messages.

All is not lost, however, as Infosecurity understands that the URL shortening services are themselves working on a number of security technologies, although this still would not stop a hacker from using an intermediary - and legitimate - web page to eventually route to an infected site.

 

What’s hot on Infosecurity Magazine?