Twitter Gets Slammed By the StalkDaily XSS Worm

CurtMonash writes "Twitter was hit Saturday by a worm that caused victims' accounts to tweet favorably about the StalkDaily website. Infection occurred when one went to the profile page of a compromised account, and was largely spread by the kind of follower spam more commonly used by multi-level marketers. Apparently the worm was an XSS attack, exploiting a vulnerability created in a recent Twitter update that introduced support for OAuth, and it was created by the 17-year-old owner of the StalkDaily website. More information can be found in the comment thread to a Network World post I put up detailing the attack, or in the post itself. By evening, Twitter claimed to have closed the security hole."

Comments

Great Plan

[basementman]

So this kid is apparently trying to launch his own version of Twitter at StalkDaily. To do this he launches a worm infecting Twitter users to drive traffic to his site, and then admits to it. Great way to build good will with your users.

Just so everyone knows, most teenage nerds are this stupid/unethical.