Slashdot Mirror


Do Twitter Phishing Scams Herald the End of Microblogs?

An anonymous reader writes "Twitter's been hit by a big phishing scam. Culture Crash blogger Dan Tynan says this is the end of Twitter's innocence. Will tweets become like email, with two out of every three just worthless spam?"

31 of 301 comments (clear)

  1. Innocence? by TurboNed · · Score: 5, Funny

    this is the end Twitter's innocence.

    Isn't this the internet? What's innocent?

    1. Re:Innocence? by larry+bagina · · Score: 4, Funny

      I'm not sure if you're referring to twitter or the twitter phishing site :/

      --
      Do you even lift?

      These aren't the 'roids you're looking for.

    2. Re:Innocence? by Xtense · · Score: 4, Funny

      Then i have just one tip for you:

      Run. Don't turn back, run! RUN!

      --
      "We are the music makers, and we are the dreamers of dreams [...]."
    3. Re:Innocence? by jbezorg · · Score: 5, Insightful

      The most merciful thing in the internet, I think, is the inability of the human mind to correlate all its contents. We surf in a placid island of ignorance in the midst of black seas of lol cats, and it was not meant that we should voyage far. The networks, each straining in its own direction, have hitherto harmed us little; but some day the piecing together of dissociated bytes will open up such terrifying vistas of content, and of the frightful capsuns therein, that we shall either go mad from the revelation or flee from the deadly lulz into the peace and safety of a new gym pass.

      --
      I've lost all my marbles except one & It's fun to test angular & centripetal acceleration in my skull
  2. No, end of services by Rinisari · · Score: 4, Insightful

    If Twitter is smart, it will end its auth api or modify it so that folks have to go to twitter to authorize an application. This is the way that Facebook, Yahoo, and OpenID do it, as well.

    1. Re:No, end of services by Rinisari · · Score: 4, Interesting

      Domain phishing like the access-urls thing in the article picture could be best fixed by ssl logins...

    2. Re:No, end of services by Zenaku · · Score: 4, Funny

      If my toilet cant twitter then I'll stop using it.

      Um. . . do you mean Twitter or the toilet?

      --
      If fate makes you a motorcycle, you become a motorcycle.
    3. Re:No, end of services by AnyoneEB · · Score: 4, Insightful

      How? If the user is willing to give their password to http://twitter.access-logins.com/login/, why wouldn't they give their password to https://twitter.access-logins.com/login/?

      SSL logins are a good idea, but I do not see how they address phishing. I guess an EV might have some effect because users might be trained to expect to see "Twitter, Inc." in the URL bar... but if they are not even looking to see if they are on twitter.com when entering their password, I doubt it.

      The real problem is sending passwords in plaintext (or encrypted plaintext like SSL, which doesn't help if you have an encrypted connection straight to the phishers) as opposed to some form of challenge response, but that is a hard one to fix since they are so prevalent and the framework to replace them does not really exist.

      --
      Centralization breaks the internet.
    4. Re:No, end of services by Anonymous Coward · · Score: 5, Funny

      If my toilet cant twitter then I'll stop using it.

      Um. . . do you mean Twitter or the toilet?

      Whichever. They're both full of shit.

  3. Let's hope so by Gothmolly · · Score: 5, Insightful

    terms like "twitterverse" and "microblog" are heralding the end of the sane Internet, so lets hope they get consumed by the vermin of the Internet.

    --
    I want to delete my account but Slashdot doesn't allow it.
    1. Re:Let's hope so by Xtense · · Score: 4, Funny

      Somehow my mind refuses to acknowledge that "w" in "Twitterverse".

      And thus my imagination brewed a beautiful image...

      --
      "We are the music makers, and we are the dreamers of dreams [...]."
    2. Re:Let's hope so by _ivy_ivy_ · · Score: 5, Insightful

      The sane internet died a decade ago. We're in the death throws of the internet-of-the-corporate-hack. Likely our next stop will be the reincarnation of an AOL like atmosphere where a central application or website insulates you from the internet, and provides you with a limited array of things to do.

      Ironically, it was the connection of AOL to the internet that marked the end of sanity in my book.

    3. Re:Let's hope so by Nethead · · Score: 4, Funny

      Me too! (c)AOL, 1996

      --
      -- I have a private email server in my basement.
    4. Re:Let's hope so by DrVomact · · Score: 5, Interesting

      The sane internet died a decade ago. We're in the death throws of the internet-of-the-corporate-hack. Likely our next stop will be the reincarnation of an AOL like atmosphere where a central application or website insulates you from the internet, and provides you with a limited array of things to do.

      Holy cow, you've hit on the solution! This is exactly what's needed! Needed not by us, of course, but by normals. Consider the possibilities. As you well know, over 90% of the people who own computers are not qualified to use anything more complex than a simple calculator. Computers are very complex tools. What are normals using these tools for? Well, to write email, maybe do their online banking, post stupid pictures of their kids on some website and...what else do normals use computers for? Not counting apps like Free Cell that don't require an internet connection, I mean. The rest of the CPU cycles of these computers are used to transmit spam and various malware—they are the soldiers of the botnets.

      Then there's the maintenance & support headaches. Who here doesn't have a gaggle of clueless relatives and friends who bombard them with stupid questions and pleas for help with their malware-clogged, zombified computers? And then blame you the next time something goes wrong?

      Well, the solution is now within our reach: put everyone of these people on dumb terminals connected to a service like AOL that gives them very limited options so they're not confused. They just plug it in, turn it on, and the user menu—complete with cute tail-wagging puppy—comes up. Give them access to word processing or spreadsheet apps on a pay-as-you go basis. (No installation hassles!) Sure, their data is now 0wnz0red by some corporate empire, but normals don't care about this kind of stuff.

      Better yet, all maintenance problems now become the service provider's problem. You can honestly say "Gee, I can't help you with that, but if you call MyIntarnet's tech support, I'm sure they'll fix it". Best of all, without an on-board hard drive, there's no problem with virus/trojan/worm propagation. Spam will finally die...well diminish, anyhow.

      Of course that's for them; people who know better would still use real computers. It would be even better if they could have their own internet sorta like AOL was in the early days...but that's probably not practical.

      --
      Great men are almost always bad men--Lord Acton's Corollary
  4. That would imply that non spam tweets were useful by Sycraft-fu · · Score: 5, Insightful

    Thus far Twitter seems like a totally useless idea to me. No, you are not so important that everyone cares what you are doing when you are going shopping.

  5. Not news. by Ethanol-fueled · · Score: 4, Insightful

    The exact same crap has been going on with MySpace and other viral sites for years. This ain't news. The funny thing is that the idiots who eat that shit up like to say that their profile was "hacked" when they were really just too lazy to look at the damn address bar.

  6. Please say yes by Hoplite3 · · Score: 4, Funny

    "Do Twitter Phishing Scams Herald the End of Microblogs?"

    *Crosses fingers*

    A man can dream...

    --
    Use the Firehose to mod down Second Life stories!
  7. Re:That would imply that non spam tweets were usef by solios · · Score: 5, Insightful

    Agreed. Much like the "blogosphere," twitter is the kind of thing that is OMFG WORLD CHANGING.... but only to its users.

    It's great that the service is there and all, but like facebook, myspace, et al, I really wish people would stop blithering about how INSANELY GREAT it is.

    A web gui for the equivalent of an IRC or AIM /away message is about as world-changing as a gui for a MUD. Sure, at least one is successful... but I don't do MUDs or MMOs, so how has it changed my life, aside from a few of my friends disappearing for months whenever a new expansion is released?

    That said, a pointless-to-me-anyway service that people I otherwise respect can't shut up about is being crapflooded? Awesome!

  8. Re:That would imply that non spam tweets were usef by larry+bagina · · Score: 5, Funny

    2008-1-5 11:53AM - just took a dump.

    --
    Do you even lift?

    These aren't the 'roids you're looking for.

  9. Large User Base and an Open Pipe by Ohio+Calvinist · · Score: 4, Interesting

    I think we'll see spammers start to attack social networks as vastly improving spam filters make e-mail less and less viable. If a social networking site sends all "messages" on the site as e-mail or texts to the user and the user whitelists *.myspace.com or *.twitter.com (or whatever domain it sends as) all they need is to get an open pipe on that service and they've blasted both their screen, inbox and mobile.

    Networks are huge blocks of users often with similar, or easily deturmined interests making the marketing more effective and development to exploit their native openness or a security flaw more profitable than spamming huge blocks of @yahoo.com addresses via e-mail only as many have good spam filters, are spam-only accounts or have gone fallow when XX69sExYbUnNiE69XXHOLLA realizes that might not be the best addy for her college admission papers or her resume.

    IANAL but it would be interesting to see if using a social network as a proxy would give one any sheilding from CAN-SPAM or other state statutes since their is no protection on social networking sites, and users did opt-in to reiceve emails from the social network site.

    --
    Forgive my spelling from time to time. I'm often posting during short breaks.
  10. Re:That would imply that non spam tweets were usef by gEvil+(beta) · · Score: 5, Funny

    Celebrating the one year anniversary?

    --
    This guy's the limit!
  11. Re:That would imply that non spam tweets were usef by Hatta · · Score: 4, Insightful

    I suppose if you don't have any friends that like to keep up with what's going on in your life and vice versa.

    That's what conversations are for. You know, real physical human interaction. Remember that?

    --
    Give me Classic Slashdot or give me death!
  12. Re:That would imply that non spam tweets were usef by zappepcs · · Score: 5, Insightful

    I'm kind of with you on this one. I remember back in the day, if you spent more than an hour on the phone people thought there was something wrong with you. Back then I thought they were right. If some galactic disaster wiped out electronics on Earth, there would be a lot of people who suddenly lose it because they have nobody to blab to. Twitter gives them this outlet even when they are surrounded by people that really don't want to hear their crap. It's really no different than thinking outloud or talking to walls; an umbilical cord to keep them from having to be alone. They talk about how great it is because they are addicted and cannot function without someone listening to them blabber on about nothing all day. As long as they are talking, they feel somehow important. - Yes, I get the irony

  13. Re:Let me rephrase that question... by xstonedogx · · Score: 4, Funny

    You are implying one in three has value. I beg to differ.

    xstonedogx is reading slashdot.
    xstonedogx is scratching his crotch.
    xstonedogx alsj;dfl;kj;
    xstonedogx Sorry everybody, that was my cat.
    xstonedogx is reading slashdot.
    xstonedogx got up to get a Mountain Dew and some Cheetos.
    xstonedogx is reading slashdot.
    xstonedogx discovered the Higgs Boson.
    xstonedogx False alarm.
    xstonedogx HANNAH MONTANA RULES.
    xstonedogx is punching his sister.
    xstonedogx is cleverer than you.
    xstonedogx is cleverer a word? is it more clever?

  14. the nature of communication by girlintraining · · Score: 4, Insightful

    Every method of human communication brings with it the reasons we communicate. Spam, reduced to its essential quality, is broadcasting greed. And that emotion has been around since the dawn of civilization. Every "new" communications medium will have it, and in western civilization with its emphasis on individuality, materialism, and consumerism, it will be all the more prominent. So is it really news that another medium (in this case, twitter) has started to reflect this? Not really.

    Concurrently, we've been evolving ways of blocking out this trash -- ad filtering, blocking software, downloading our TV episodes online, etc. There is a real grassroots effort underway to fight back against advertising and an emphasis on "real" communication -- that is, honest opinions by people we trust. In this disconnected world, networks of trust have become more important than ever as a way of not drowning in the sea of greed, self-indulgence, and attention-grabbing behavior. I know people that use gmail for one reason alone: The spam filtering is just that damn good. I have seen people breathe a sigh of relief and leap to hug me after setting up firefox with ad blocking software -- they are geniunely happy.

    The real story here isn't twitter turning to a sea of suck, it's that our culture is changing on a fundamental level. And it is doing this without any real organization, without any center. It doesn't seem necessary for a person to be part of a certain subculture or have exposure to a certain trigger to start it; It's a stand alone complex. That is, for those who haven't seen Ghost in the Shell, a phenomenon where unrelated, yet very similar actions of individuals create a seemingly concerted effort.

    We're going to see more of this in the years to come.

    --
    #fuckbeta #iamslashdot #dicemustdie
  15. no by daveb · · Score: 4, Funny

    unfortunately

  16. Re:Let me rephrase that question... by thrillseeker · · Score: 5, Funny

    your thoughts are intriguing ... can I follow you?

  17. Twitter spam easy to stop by Jason+Levine · · Score: 5, Informative

    Many people who are replying don't seem to use Twitter or even understand really what is going on with the phishing. Since I use Twitter, I'll explain:

    With Twitter, you set up lists of people that you follow. When you follow someone, you can then see their Twitter messages on your main screen (or in your client application if you use one). Everyone else following that person can see the person's messages. People you follow can also send you Direct Messages. These messages aren't seen by anyone but the sender and recipient. In this respect, it is sort of like e-mail only it requires a "trusted relationship" to have been formed first i.e. No spamming from joe_random@somesite.com to everyone_else@somewhere-else.org.

    What the Phishers are doing are sending DMs from compromised accounts telling the recipients about some blog post that they should check out. The recipients (assuming they fall for the phish), see a page that looks like the Twitter login page (but is really on access-logins.com). They enter their username and password and now the Phishers have another account to send DMs from. Rinse and repeat. I strongly suspect that there's a Phase Two in there that involves more than just collecting Twitter account information but so far they are just collecting accounts.

    Stopping it is easy. If you change your password, they no longer have access. People have been outing people who "sent" them DMs (and thus were compromised). If a person doesn't fix their situation, you could unfollow them. This would mean they could no longer send you Direct Messages. As people stop following compromised people, they will either fix the problem or will dwindle to zero followers. Spam stopped. (If only e-mail spam were so easy to stop.)

    And to address the "Twitter is useless" commentary, yes there are a lot of people on Twitter who post inane things. Then again, there are some good posters. (For example, I follow Greg Grunberg from Heroes and love reading his tweets.) I think you'll find that in any online medium. Blogs are like this, web sites are like this, even comments on Slashdot are like this. Choose a random Slashdot article and browse at -1. You're sure to find many worthless comments for every worthwhile comment. As for Twitter, I tend not to follow the inane Twitter posters, so I don't see those posts in my Twitter-feed. Like any online tool, Twitter is only what you make of it.

    --
    My sci-fi novel, Ghost Thief, is now available from Amazon.com.
  18. I don't understand the premise... by argent · · Score: 4, Insightful

    You can no longer innocently follow a link because some quasi-stranger tweeted it to you without being wary

    Let me fix that for you:

    You can't innocently follow a link because some quasi-stranger tweeted it to you without being wary

    Why would you, or anyone, have ever assumed otherwise?

  19. Re:That would imply that non spam tweets were usef by HertzaHaeon · · Score: 5, Funny

    Conversations? Bah, back in my day, we used to grunt and throw rocks at each other to communicate. Then som smart whipper-snapper like you came along with his fancy language, destroying our fine old traditions.

  20. Re:That would imply that non spam tweets were usef by CraftyJack · · Score: 4, Funny

    Throw rocks? You and your fancy tools. It's club-wielding whippersnappers like you that chased us away from the watering hole years back.