# I would be careful on Twitter today...

**URL:** <https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603>\
**Category:** NYSpeed Off Topic\
**Created:** [September 21, 2010, 4:47am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603 "2010-09-21T04:47:13Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [September 21, 2010, 4:47am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/1 "2010-09-21T04:47:13Z")

</div>

Looks like a new cross site scripting vuln just came out…

If you mouse over a certain message it will execute javascript.

Those of you how are following me on twitter there is a non malicious example on my page

For those of you with Firefox I would install NoScript and block all scripts from Twitter.

---

<div class="post-metadata">

**Author:** ![Fry](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/fry/32/7284_2.png) [@Fry](https://forums.speedlife.net/u/Fry)\
**Post date:** [September 21, 2010, 5:03am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/2 "2010-09-21T05:03:39Z")

</div>

Is this on [twitter.com](http://twitter.com)? I assume it doesn’t work on cell phone apps, tweetdeck, etc?

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [September 21, 2010, 5:09am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/3 "2010-09-21T05:09:18Z")

</div>

This only effects the the website version…

3rd party twitter clients tweetdeck etc are fine…

---

<div class="post-metadata">

**Author:** ![ProgRocker](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/progrocker/32/5434_2.png) [@ProgRocker](https://forums.speedlife.net/u/ProgRocker)\
**Post date:** [September 21, 2010, 5:11am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/4 "2010-09-21T05:11:30Z")

</div>

Wow…very interesting…apparently your retweets dont show up on TweetDeck.

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [September 21, 2010, 5:33am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/5 "2010-09-21T05:33:15Z")

</div>

lol this bug is going to fuck a lot of people on twitter up today

---

<div class="post-metadata">

**Author:** ![ProgRocker](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/progrocker/32/5434_2.png) [@ProgRocker](https://forums.speedlife.net/u/ProgRocker)\
**Post date:** [September 21, 2010, 6:06am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/6 "2010-09-21T06:06:33Z")

</div>

Now running no script on twitter…thanks for the heads up.

\<EDIT\>

And Gizmodo now has the word:

> **[There Was a New Twitter Exploit and It Was Spreading Like Wildfire](https://gizmodo.com/5643732/the-twitter-website-is-under-attack)**
>
> Twitter is seriously screwed up at the moment, thanks to a new Javascript exploit that's currently slamming the service. Visitors of Twitter's website are inadvertently retweeting spam and porn to their followers, just by hovering over...

---

<div class="post-metadata">

**Author:** ![boardjnky4](https://avatars.discourse-cdn.com/v4/letter/b/96bed5/32.png) [@boardjnky4](https://forums.speedlife.net/u/boardjnky4)\
**Post date:** [September 21, 2010, 6:13am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/7 "2010-09-21T06:13:47Z")

</div>

good looks on this

---

<div class="post-metadata">

**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\
**Post date:** [September 21, 2010, 6:35am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/8 "2010-09-21T06:35:06Z")

</div>

I am gonna mouseover every link I find 🙂

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [September 21, 2010, 6:47am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/9 "2010-09-21T06:47:08Z")

</div>

11k infections a minute :lol:

---------- Post added at 09:47 AM ---------- Previous post was at 09:43 AM ----------

> [@boxxa](#):
>
> I am gonna mouseover every link I find 🙂

Someone changed it to make the whole page a mouse over so your pretty much fucked 🙂

---

<div class="post-metadata">

**Author:** ![sherlock](https://avatars.discourse-cdn.com/v4/letter/s/0ea827/32.png) [@sherlock](https://forums.speedlife.net/u/sherlock)\
**Post date:** [September 21, 2010, 6:59am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/10 "2010-09-21T06:59:32Z")

</div>

good thing i thought twitter was retarded and never went on it, im safe.

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [September 21, 2010, 7:02am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/11 "2010-09-21T07:02:17Z")

</div>

> [@sherlock](#):
>
> good thing i thought twitter was retarded and never went on it, im safe.

Good for you

---

<div class="post-metadata">

**Author:** ![boardjnky4](https://avatars.discourse-cdn.com/v4/letter/b/96bed5/32.png) [@boardjnky4](https://forums.speedlife.net/u/boardjnky4)\
**Post date:** [September 21, 2010, 7:08am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/12 "2010-09-21T07:08:05Z")

</div>

great work sherlock!

---

<div class="post-metadata">

**Author:** ![sherlock](https://avatars.discourse-cdn.com/v4/letter/s/0ea827/32.png) [@sherlock](https://forums.speedlife.net/u/sherlock)\
**Post date:** [September 21, 2010, 7:12am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/13 "2010-09-21T07:12:32Z")

</div>

its only time till it hits facebook though, then im fucked.

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [September 21, 2010, 7:14am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/14 "2010-09-21T07:14:13Z")

</div>

It has nothing to do with facebook…

thanks for the useful input however.

---

<div class="post-metadata">

**Author:** ![boardjnky4](https://avatars.discourse-cdn.com/v4/letter/b/96bed5/32.png) [@boardjnky4](https://forums.speedlife.net/u/boardjnky4)\
**Post date:** [September 21, 2010, 7:18am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/15 "2010-09-21T07:18:59Z")

</div>

no worries, we are confident that sherlock can crack this case!!

---

<div class="post-metadata">

**Author:** ![sherlock](https://avatars.discourse-cdn.com/v4/letter/s/0ea827/32.png) [@sherlock](https://forums.speedlife.net/u/sherlock)\
**Post date:** [September 21, 2010, 7:27am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/16 "2010-09-21T07:27:53Z")

</div>

i very much doubt the case, seeming as i got that name for something so very stupid that i said a long time ago

---

<div class="post-metadata">

**Author:** ![bing](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/bing/32/7211_2.png) [@bing](https://forums.speedlife.net/u/bing)\
**Post date:** [September 21, 2010, 7:29am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/17 "2010-09-21T07:29:48Z")

</div>

LZ, why would someone do this? Do they make money off the spam-advertising or is it just the thrill of the hack?

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [September 21, 2010, 7:32am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/18 "2010-09-21T07:32:43Z")

</div>

> [@bing](#):
>
> LZ, why would someone do this? Do they make money off the spam-advertising or is it just the thrill of the hack?

Most of what is going on is harmless…Its just changing the status and spreading.

However it has been used to spam products…you could technically use it to hijack/backdoor PCs.

---

<div class="post-metadata">

**Author:** ![sherlock](https://avatars.discourse-cdn.com/v4/letter/s/0ea827/32.png) [@sherlock](https://forums.speedlife.net/u/sherlock)\
**Post date:** [September 21, 2010, 7:35am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/19 "2010-09-21T07:35:27Z")

</div>

to what? steal peoples info on their computers?

---

<div class="post-metadata">

**Author:** ![Fry](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/fry/32/7284_2.png) [@Fry](https://forums.speedlife.net/u/Fry)\
**Post date:** [September 21, 2010, 7:43am UTC](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603/20 "2010-09-21T07:43:18Z")

</div>

Bahaha the whitehouse twitter got it.

[Next page](https://forums.speedlife.net/t/i-would-be-careful-on-twitter-today/160603.md?page=2)
