Mouseover Security Flaw Plagues Twitter

Site says it's got a patch in place
By John Johnson,  Newser Staff
Posted Sep 21, 2010 9:36 AM CDT

Twitter says it's patched a widespread security flaw today that redirected users to third-party sites (sometimes porn) or hit them with pop-up ads. This one was especially heinous, notes Mashable, because it took effect when users simply rolled over an offending link instead of clicking on it. It used a JavaScript function called onMouseOver. Graham Cluley has more at his blog at Sophos.com. See his video in the gallery. (Even Robert Gibbs got bitten by the bug, notes the Hill.)

Get the news faster.
Tap to install our app.
X
Install the Newser News app
in two easy steps:
1. Tap in your navigation bar.
2. Tap to Add to Home Screen.

X