<http://schema.org/articleBody>
"Remember that nasty Twitter security bug we wrote about yesterday? Twitter reported they promptly fixed it, and we believed them...for a second.\nAccording to David Naylor, who found the exploit, the security issue still hasn't been fixed, meaning that it still presents a danger to all Twitter users. Today, David has provided more technical info about the exploit:\n\"With a few minutes work, someone with a bit of technical expertise could make a Twitter \u2018application\u2019 and start sending tweets with it. Using the simple instructions below, it can be arranged so that if another Twitter user so much as sees one of these tweets - and they are logged in to Twitter - their account could be taken over.\"\nHe also goes on to explain how poorly Twitter has attempted to fix the issue:\n\"I say Twitter have missed the point because they apparently \u201Cfixed\u201D the problem last night. Their idea of fixing it is to stop you putting spaces in the address box. Spaces. Other than that, everything else is fair game.\"\nIf David is right, this is (still) a huge security issue. He gives some advice on what you can do to protect yourself until the issue is properly addressed:\n* If you\u2019re not logged in to Twitter, there\u2019s no opportunity to steal your details or impersonate you, however malicious code could still send you to other websites or otherwise annoy you, so it doesn\u2019t completely fix the problem.* Unfollow anyone you don\u2019t know or don\u2019t trust that could be exploiting this. Who\u2019s to say they\u2019re not already stealing your details? If you don\u2019t see their tweets they can\u2019t harm you.* If you use something other than the Twitter website to view your tweets, perhaps one of the applications mentioned below, you should be fairly safe, though without looking at each one individually it\u2019s hard to be sure. Still, you\u2019re likely to be pretty safe this way.\nSo, in short: unfollow people you don't trust, or use a 3rd party application, such as TweetDeck, for your Twitter needs, at least for now."^^<http://www.w3.org/2001/XMLSchema#string>
<http://mashable.com/2009/08/26/twitter-exploit-fix/>