facebook rss twitter

Twitter victim of ‘onmouseover’ hole

by Sarah Griffiths on 21 September 2010, 16:58

Tags: Twitter

Quick Link: HEXUS.net/qaz5x

Add to My Vault: x

Shiny new features

A worm was not a sought-after addition, but Twitter has added two desirable new features, according to Tech Crunch.

Twitter's new look site will reportedly include a reply-to-all function plus auto-complete of usernames, (which are usually available on third party Twitter sites already.)

However Twitter developer Dustin Diaz warned reply-to-all may irk some users as there is no separate option to reply only to the author of the tweet.

Referring to he auto-complete of user names, he also reportedly said: "Now, when you wish to tweet someone, you can simply start with the ‘@' sign and type the first letters of his or her name, after which a drop-down menu with relevant usernames will appear."

The micro blogging site also told The Daily Telegraph it is working on a graph to show users' interests to help advertisers send more targeted tweets via the service's advertising format.

"Moving forward, [with promoted products] we are looking at introducing a targeting mechanism [which is based on an interest graph] ... We can build out a person's interests based on who they are following," product manager Shiva Rajaraman told the newspaper.

Apparently who people follow gives a strong indication of their interests, especially as one in five tweeple follow a commercial entity.

"We are experimenting how we can assemble those pieces of information together and show people's interests," he reportedly said.



HEXUS Forums :: 2 Comments

Login with Forum Account

Don't have an account? Register today!
It's worrying that a site like Twitter can have such security flaws.
Not really - any site whose business model is based almost entirely on user input is going to end up having some loophole exploited. Without knowing the vector of attack in detail you can't say whether this is a blatant flaw that should've been obvious during development, or whether it's a cunning hack that would be dififcult to foresee.

Social networking sites live and die on the freedom they give their users - lock down too tight and you risk losing the functionality that makes the site popular in the first place. The key is how quickly they respond to fix security holes when they are exposed: in this instance it sounds like they've moved fairly quickly, so fair play to them…