Mouseover Security Flaw Plagues Twitter
Site says it's got a patch in place
By John Johnson,  Newser Staff
Posted Sep 21, 2010 9:36 AM CDT

(Newser) Twitter says it's patched a widespread security flaw today that redirected users to third-party sites (sometimes porn) or hit them with pop-up ads. This one was especially heinous, notes Mashable, because it took effect when users simply rolled over an offending link instead of clicking on it. It used a JavaScript function called onMouseOver. Graham Cluley has more at his blog at Sophos.com. See his video in the gallery. (Even Robert Gibbs got bitten by the bug, notes the Hill.)

 

My Take on This Story
Show results without voting  |  
11%
72%
11%
0%
0%
6%