Skip to main content

Twitter clickjacking worm

CEO, Co-Founder
Feb 10, 2009

Today I saw the following message in my Twitter timeline:

truc du jour
First you think, nah won't look at it, but then that final 'a voir absolument'... So when you follow the tinyurl you come onto a very empty page with 1 button and a hyperlink. When I clicked any of this, I got a clickjacking warning message from NoScript:
Clickjacking
I searched Twitter for the TinyURL and I found about 150 people that have already been clickjacked. It all started 6 days ago, the first person to Tweet it was ameliehannover, a novice user. I guess it could have been far more viral if the message would be in English. That was the first time I was saved by NoScript. So all those wasted seconds whitelisting JS were worth it in the end? If you got the message in your updates: you can remove it by clicking the garbage icon next to the update on your Twitter account page (e.g. http://twitter.com/kvantomme)

Kristof Van Tomme is an open source strategist and architect. He is the CEO and co-founder of Pronovix. He’s got a degree in bioengineering and is a regular speaker at conferences in the API, developer relations, and technical writing communities. He is the host of the Developer Success & the Business of APIs and the API Resilience podcasts.

Pronovix Field Notes

Observations from the Pronovix team on developer portals, technical documentation, architecture, UX, APIs, and the surrounding questions: AI-native workflows, business capabilities, buyable solutions, and operational reality.
 

 

Subscribe