Comments on: Curiosity killed the twit, Twitter clickjacking

By: zzaz3

zzaz3 — Sun, 08 Mar 2009 18:46:08 +0000

lol, I learned that lesson the hard way. On time there was a button in someone’s sig that said “Don’t Click” and I clicked it. It took me to a gay porn site that had my speakers blaring “I’m looking at gay porn”.

Now I’m a lot more cautious when it comes to hyperlinks.

By: FIRESTORM_v1

FIRESTORM_v1 — Sun, 15 Feb 2009 23:00:55 +0000

I use a twitter account for server notifications as part of a basic network monitor that I threw together after many nights of fighting a windows box that refused to stay online.

I don’t have the original link, but google “PHP twitter curl” and one of the top links should give you a link to the guy that figured out how to do it using a PHP library curl to parse the XML sent to twitter and received from it on posting. (success, failure, etc)

Twitter does have its uses, it is a quick way to get txt messages to many people quickly at one time without having to kill youself trying to mass-forward or retyping the txt.

By: louis ii

louis ii — Fri, 13 Feb 2009 21:11:32 +0000

As a previous user mentioned, zindex will still allow this type of tomfoolery to persist.
Example:
Determine the zindex (usually 0) of the target site image/area, set the zindex of a new image, message, etc.. to higher that the one on the site (1 should be usual to work) and place it on the same space using CSS. The new link/image/etc is on top, visible or not, which could be an exact duplicate of whatever is hiding under it, but re-directing some place else.

Also, I don’t know if it has been updated, but the method of using a transparent gif (note: not transparent by browser opacity, but transparent by it’s actual ‘color’ scheme) as an overlay was quite popular on social networking site spam a few years a go.

Originally I was thinking to use the zindex method to jokingly “deface” friends social networking sites by putting up an edit in place of their image which was animated to do other things besides look pretty and static, but once spammers started hitting the sites with it, I thought better to not.

Anyway… even with simple HTML being used, there will still be people who are so caught up in their desperate, yet quiet, self worth issues and will click on things “just in case” or “out of boredom”… I think early high school was the hardest computer repair time I have seen because those kids DESTROY computers and laugh it off, all with purposeful internet spam clicking.

Peace!

By: tweet_in_hell_fags

tweet_in_hell_fags — Fri, 13 Feb 2009 20:46:22 +0000

I hope more people continue to do this as much as possible until that horrid pile of bullshit doesn’t exist and I can stop hearing about it.

By: DarkFader

DarkFader — Fri, 13 Feb 2009 19:00:14 +0000

I installed NoScript, and probably doesn’t break out the iframe. Fixing things with javascript isn’t the way I guess.
Anyway, security for Web 2.0 sites is crucial. I once made an IMVU userpage XSS script that copied itself upon viewing. They were quick disabling and fixing it though.

By: Robyn

Robyn — Fri, 13 Feb 2009 17:32:28 +0000

To successfully use twitter:

1) be popular.
2) be interesting.
3) tweet.

I use it with a small group of friends and we generally tweet neat things we found in the day or for information. (eg “Does anyone know where to find good coffee in the skyway?” or “I baked cookies and they are delicious” to “OMG I’m pregnant !!) These can prove later conversations starters for later “Did you ever find coffee in the skyway?” “You’re pregnant! Pop the champagne!”

By: Andrew Pollack

Andrew Pollack — Fri, 13 Feb 2009 14:43:27 +0000

@Realvision – you’re not getting it. IM is replacing EMAIL for transient conversation, where email will become the tool used primarily for more important transactions that need to stay around.

Twitter is useful if you’re part of — or are building — a large extended community of interest that requires little specific attention. It can be a bit like being at a trade show. You never know quite who you’ll run into that may be of interest, but there’s a lot of depth around you to be picked up.

By: andBeans

andBeans — Fri, 13 Feb 2009 13:25:50 +0000

@dan

Twitter is for attention whores.
That’s all you need to know.

By: Korben

Korben — Fri, 13 Feb 2009 11:08:12 +0000

Hello Eliot,

For your information, Facebook also is striked by this click jacking method :

http://www.allofmanga.net/ok.php?page=facebook

clic anywhere on the page (multiple times if it didn’t work) and then go to this group…http://www.facebook.com/group.php?gid=48226044199

You were automatically added… ;-)

Best Regards,

Korben

By: RealVision

RealVision — Fri, 13 Feb 2009 10:43:12 +0000

+1 to “I don’t know why would anyone want to twitter”

The twitter hacks are good from a technical POV, but that’s it. Just like electrets and those things that blink and synchronise with each other

IMHO, there is not even any use for IM anymore.. It was necessary in the past because regular email was slow and not very good for following conversations, but that’s the past. Now mail is just as good of a solution, no need for “fancy” stuff that only distracts you from the actual work.

Of course, I am a minimalist, if you can’t tell yet :-P.. Linux with xmonad for me

By: mig

mig — Fri, 13 Feb 2009 09:33:28 +0000

I third that. I have an account but I have no clue why anyone gives a flying f*ck about what i may be doing at any one time except a few select people related to that activity, in which case i would contact them by another means.

Can anyone confirm whether twitter offers any more than “i am doing/thinking this if anyone cares”?

By: M4CGYV3R

M4CGYV3R — Fri, 13 Feb 2009 09:25:11 +0000

“does anyone here use twitter? are there any particularly cool things you can do with it that you can recommend? i get the impression that there is this whole cool twitter thing going on, but i just don’t ‘get’ it…”

Completely agree. Micro Myspaceis not what’s for breakfast.

By: Patrick

Patrick — Fri, 13 Feb 2009 06:09:35 +0000

Just another reason to hate iFrames

By: roshamboe

roshamboe — Fri, 13 Feb 2009 02:38:30 +0000

and that is how our entertainment has come to be, posting something and hoping someone will be bored enough to comment about it

By: Andrew Pollack

Andrew Pollack — Fri, 13 Feb 2009 01:40:37 +0000

Dan — twitter is like IM, only inside out.

Where you talk “to” someone with IM, with twitter you just shout out what you’re doing or what’s on your mind, and anyone who’s “Following” you and happens to be online at that moment sees what you’ve said.

“Hey, I’m thinking or doing THIS, if anyone cares”

that’s essentially twitter.