TweetDeck is finally back online after being taken offline for several hours following the detection of a security exploit in the app by a user.
Geoff Evason - an Australia based app developer discovered the problem on Friday afternoon.
According to Evason, he was able to access hundreds of Twitter account without permission. He also tried posting some test posts in order to prove his exploration.
"Hey @Tweetdeck A bug in your software has given me access to hundreds of accounts. #YouShouldLookIntoThat /cc @Twitter" Geoff Evason tweeted.
Right after the bug detection, TweetDeck went offline and was restored after Twitter fixed the problem.
Twitter released an update to TweetDeck on March 22, which brought some new features to the app. Possibly, this problem was because of a software bug delivered by the update.
"As soon as we learned about the issue today, we took TweetDeck down to diagnose the situation. We discovered a bug that caused a very small number of TweetDeck users to have access to other TweetDeck users' accounts. (The accounts that could be accessed were random; it was not possible to select specific accounts and access them)," Twitter in a statement. "No one's password was compromised, and we aren't aware of any instances where this access was used maliciously. As a precaution, we removed account credentials associated with affected TweetDeck users; they will need to log in to authorize the TweetDeck application to access their accounts."
The bug was indeed very serious and could have affected a lot of users, had Evason not reported the problem.
Twitter has not revealed any further information about the bug or how many users were affected by it. However, one thing is certain - Evason was not the only victim. "I'd be surprised if I was the only one exposed to the bug though", he said.
But no need to worry about it now as the problem has been solved.
(reported by Johnny Wills, edited by Surojit Chatterjee)
© Copyright 2024 Mobile & Apps, All rights reserved. Do not reproduce without permission.