Over the Easter weekend, Twitter fell victim to yet another attack against the micro-blogging service. This time the attacker was 17 year old Mikeyy Mooney, who claims full responsibility for the attack, saying "I am aware of the attack and yes I am behind this attack".The attack was harmless in a sense that no passwords or users data was compromised or stolen, only leaving messages on peoples Twitter page such as "Dude, www.StalkDaily.com is awesome. What's the fuss?". The worm infected other Twitter users when someone visited another person's page, making the worm spread rapidly. The messages linked users to Mikeyy Mooneys own web site which offers similar features and style as Twitter does.
Mikeyy Mooney described how he carried out the attack, "I am the person who coded the XSS which then acted as a worm when it auto updated a users profile and status, which then infected other users who viewed their profile. I did this out of boredom, to be honest. I usually like to find vulnerabilities within websites and try not to cause too much damage, but start a worm or something to give the developers an insight on the problem and while doing so, promoting myself or my website."
Twitter responded by saying it has since closed the hole that allowed the worm to spread and is working to removing the unwanted updates on peoples accounts.
At least his last name is not "Mouse".
Anyway, the security of Facebook is seriously lacking if just any bored kid can write a worm for it.
"Just one Y? Are you insane? One more will do it, it will serve him in good stead for years of correcting himself on the phone or people automatically correcting it thinking its a typo".
Anyway, the security of Facebook is seriously lacking if just any bored kid can write a worm for it.
You mean Twitter.
just a thought.
happy bunny day
*sigh* Don't you watch scary movies? "I'm right behind you!" over and over and over :p
Link to article about xanga worm, notice the shoutouts lol.
There's no excuse. It quite simply breaks the law.
I'm not a Twitter user thank god, but if he found a flaw, its better to report it rather than use it to your advantage and hinder other people's use of the website. Being 'bored' isn't an excuse.
You'll also find that just reporting security holes rarely motivates the developers to close them, which is why many security holes found also have the hole published publicly shortly after by the finders. What he did was motivate the hole to be closed before it was used for worse reasons by others who found it.
What law? I'm not challenging your asserting, I'm actually curious. Is a law actually being broken here?
Smart people shouldn't be put in jail for being smart, unless they cause real damage. He helped Twitter find an exploit in exchange for free publicity, there wasn't any harm done.
LOL. Yeah, I'm sure he wouldn't be so keen on that.
Found a few bugs.
Just registered with 'login' and 'register' as accounts. Broke things - he's working to fix them though. For a while at least, people couldn't login or register due to my account creations
9.You must not transmit any worms or viruses or any code of a destructive nature.
9.You must not transmit any worms or viruses or any code of a destructive nature.
He didn't plan or actually destroy anything.
9.You must not transmit any worms or viruses or any code of a destructive nature.
He didn't plan or actually destroy anything.
Maybe you didn't see he used the word "or".
"worms"
or
"viruses"
or
"code of a destructive nature"
His code is a "worm", so meets the OR conditions, doesn't it?
9.You must not transmit any worms or viruses or any code of a destructive nature.
He didn't plan or actually destroy anything.
Maybe you didn't see he used the word "or".
"worms"
or
"viruses"
or
"code of a destructive nature"
His code is a "worm", so meets the OR conditions, doesn't it?
It amazes me!!
Yet he found a hole which could render all usernames/passwords open to anyone.
Why not hire him?
Well, maybe one could pick up a book on the English language and brush up on things like capitalization and punctuation.
[quote=Doli said,]Look at his TOS #9:
9.You must not transmit any worms or viruses or any code of a destructive nature.[/quote]
1st off if you use Twitter as your only means of communication you have no life.
2nd - and please wake up ...TOS means "Terms of service" it has no legal or judicial function.
2nd - I am awake, I was just pointing out Mikeyy's TOS for his site.
Are you Mikeyy?
Last edited by Doli on 14 Apr 2009 - 16:46
The first rule of a (real) hacker is the anonymity, in opposite a script kiddie enjoy to be popular and usually they give away their name, address and even they put photos of their national-id.
So yes, script kiddies are weird like all net rats.
"tweat" tommorow the postie is going to bring me a real life"end tweat"
We've got Tweets on our Twitters. Now we've got Tworms on there too!
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.