Twitter Security Hypocrisy

If Twitter were really serious about the dangers of sharing access to Gmail accounts, and thus their personal documents on Google Apps, they wouldn’t continue to encourage people to hand over their email passwords just to tell their friends about Twitter or find existing friends on the service.

Allow Twitter to Scrape Your Personal Information In Gmail

Allow Twitter to Scrape Your Personal Information In Gmail

I have written extensively about the problems associated with Viral Tell-A-Friend systems. People are becoming careless with personal and business security, and soon adding an email and password to a box will be as common as handing over an email address… but with dire consequences.

My opinion, Techcrunch shouldn’t publish what they found in Twitter’s undie drawer… but only with the provision that they remove the hypocritical viral tell-a-friend, and encourage other startups to do the same… until they learn to use APIs correctly.

Dopplr manage  to use APIs for TAF without the massive funding, and Gigya seem to have some API support.

Let something good come of this, and get all major social sites to stop scraping 3rd party accounts as well.

Related posts

This entry was posted in marketing, web 2.0 and tagged , , , , , , , . Bookmark the permalink. Both comments and trackbacks are currently closed.

39 Comments

  1. timacheson
    Posted July 16, 2009 at 4:10 pm | Permalink

    Now Twitter's own internal systems have been hacked, along with the accounts of Twitter users including celebrities:

    http://www.timacheson.com/Blog/2009/jul/twitter...

    The initial point of entry wasn't a gap in Twitter's security. The hacker(s) gained access through a Google Apps account. The worry with a Google account is, it's web-based and therefore only as secure as the rest of the Internet. If yuor Google account is compromised and you use Google Docs in a serious commercial setting, your Twitter account will be the least of your worries.

  2. AndyBeard (150 comments.)
    Posted July 16, 2009 at 7:27 pm | Permalink

    I think you have your facts wrong on what data was actually seen

    They didn't get access to celebrity accounts on this, but personal details such as direct email addresses possibly to agents etc.

  3. AndyBeard (150 comments.)
    Posted July 16, 2009 at 7:33 pm | Permalink

    I doubt that very much – Twitter doesn't need Techcrunch for anything now

  4. lisalyne
    Posted July 16, 2009 at 8:30 pm | Permalink

    I know that before, i'd rather not give away my passwords on the web.

  5. aabaaasimpleoverload (1 comments.)
    Posted July 17, 2009 at 2:12 am | Permalink

    I love the blog layout design, cool graphic and unique

  6. tampapestcontrol
    Posted July 17, 2009 at 12:23 pm | Permalink

    Lately I've also been thinking about all of the various apps requesting access to your Twitter account in order to function. Sure they use the api, but what's stopping some of these sites from being malicious with the user/pass information? Not much, far as I can tell.

    Good point regarding the Viral TAF systems as well. A compromised Email addy is bad news.

  7. timacheson
    Posted July 17, 2009 at 3:07 pm | Permalink

    Yes, the hacker had access to Twitter user accounts and took a screenshot of at least one of them. Twitter's blog claimed that only that one user account was compromised.

  8. AndyBeard (150 comments.)
    Posted July 17, 2009 at 5:42 pm | Permalink

    That is just a snippet from the PC World article which specifically doesn't mention any Twitter accounts being accessed, other than Twitter employees who had their Gmail compromised.

    http://www.pcworld.com/article/168462/twitter_h...

    The only place you will find claims to people outside twitter being compromised (this time around) are are sensationalist headlines which are scraped together from other sources.
    Thing might appear in searches just due to keyword use, not because it actually happened.

  9. rotem (2 comments.)
    Posted July 18, 2009 at 7:49 am | Permalink

    The big issue here is that hackers get access through a google apps account.

  10. techfreakstuff
    Posted July 19, 2009 at 5:18 pm | Permalink

    Recently heard that most of the Twitter private documents were hacked by Hackers by using Google and brought to notice of Common man! Is this what we call Security? Twitter needs to grow up…But anyways, I love twitter!

  11. waltersmith
    Posted July 20, 2009 at 6:46 am | Permalink

    In this case its no longer secured!!!
    If your company needs to be in touch with new prospects and new potential customers on a regular basis, then you need email list email lists email marketing
    email marketing software from a qualified email list vendor.

  12. nich
    Posted July 26, 2009 at 11:31 am | Permalink

    You are right. I would also not give my passwords to any site for meetings friends. My privacy means more to me.

  13. mktgpro (1 comments.)
    Posted July 26, 2009 at 8:09 pm | Permalink

    Of course Twitter needs to be more cautious than before. Even otherwise, I am quite wary of entering my passwords to Viral Tell A Friend kind of applications.

  14. steveopti
    Posted July 27, 2009 at 12:41 pm | Permalink

    Some other sites such as Blogspot also ask for Gmail login, does that mean it can be misused? Security level should be raised so as to provide better business services to consumers.

  15. ganhardinheiro (2 comments.)
    Posted July 27, 2009 at 10:23 pm | Permalink

    I think you have your facts wrong on what data was actually seen

    They didn't get access to celebrity accounts on this, but personal details such as direct email addresses possibly to agents etc.

  16. microsoftnetdevelopment
    Posted July 28, 2009 at 7:16 am | Permalink

    Nice Post! Really very useful information is given. Thanks.

  17. outsourcing_europe
    Posted July 29, 2009 at 10:57 am | Permalink

    Never enter your passwords in any kind of third party applications !!!

  18. sportwetten
    Posted July 31, 2009 at 9:27 pm | Permalink

    Yeah! I prefer Twitter than Facebook!
    It's more professional!!

  19. increasewebsitetraffic1
    Posted August 4, 2009 at 4:47 pm | Permalink

    Interesting!

    In the past, offline media was one of the major mediums to promote one’s business and brand awareness. However, with the increasing popularity of the online media and its positive results, more people are turning to online marketing techniques to build a strong business presence across the globe. The Internet provides great opportunities for entrepreneurs and small businesses, but doing business online presents unique challenges and requires new skills. Per my experience search engine optimization would be the best practice to improve your online business.

  20. lt_rudi
    Posted August 5, 2009 at 6:32 pm | Permalink

    I personally don't like the idea of giving my email password. It just doesn't make sense to me.

  21. InsideSpurdy (1 comments.)
    Posted August 5, 2009 at 10:10 pm | Permalink

    I never use the “invite your friends” features. I can just as easily send a mass email myself without worrying about anyone else swipping my passwords.

  22. jcgarner
    Posted August 7, 2009 at 12:55 pm | Permalink

    I'm glad someone is sounding the alarm on this.

  23. enchskinnyasap
    Posted August 9, 2009 at 5:55 am | Permalink

    I think your right about that “InsideSpurdy”. That is the best way!

    Web Design
    Download Wallpapers

  24. spanishinspain
    Posted August 11, 2009 at 9:14 am | Permalink

    Now a days twitter plays a major role.

  25. frankcrccd
    Posted August 12, 2009 at 10:49 pm | Permalink

    I still can't understand all the hype about twitter

  26. webriq
    Posted August 14, 2009 at 9:07 am | Permalink

    Hi everyone! I recently gone through a new site for creating free websites and I hope my suggestion could be useful for everyone who wish to have and create a website with their name as a domain. I created my website through webriq.com without any confusion and I am comfortable using it without any programming knowledge .Webriq is a tool that is easily editable and is using advanced drag and drop technology.

    The site is: http://webriq.com/home

  27. celebtwitr (1 comments.)
    Posted August 17, 2009 at 8:54 pm | Permalink

    @ frankcrccd If you have a website and your on twitter it does get you more traffic but you have to work at it etc. @ spanishinspain Twitter is there it just depends how you use it, I wouldn't say it played a major role. I would certainly avoid viral on twitter. For anyone on Twitter don't twit me MLM grrr

  28. cheapcoinsorterlei
    Posted August 18, 2009 at 8:09 am | Permalink

    2 of my twitter accounts, i can not logged in, says wrong password. i think mine was already hacked!

  29. esguitar (11 comments.)
    Posted August 18, 2009 at 12:36 pm | Permalink

    i like twitter

  30. acaijj
    Posted August 19, 2009 at 5:16 am | Permalink

    I never give password not only to twitter but also to other sites also. It is a bad one I think. So these sites should avoid to ask the password from the users.

  31. pan2588
    Posted August 20, 2009 at 8:01 am | Permalink

    What cen we do about it. All we can do is not to hand over our passwords to them.

  32. chizroberts
    Posted August 22, 2009 at 8:43 am | Permalink
  33. Acai Berry (1 comments.)
    Posted August 22, 2009 at 7:08 pm | Permalink

    It is slightly worrying the number of sites that you can feed into twitter using your twitter account details. If one of those was to experience a problem, then all your data could be at risk very quickly!

  34. markshane1980
    Posted August 24, 2009 at 11:48 am | Permalink
  35. joomlaexpert (2 comments.)
    Posted August 25, 2009 at 8:27 am | Permalink

    This can affect the popularity of the twitters.

  36. Hicham Maged (4 comments.)
    Posted August 29, 2009 at 8:12 am | Permalink

    I am always suspicous about revealing my 'contact list' to any third party. As for twitter, it's important to take more precautions till we figgure out what is happening with the security holes discovered recently.

  37. andryusha
    Posted August 31, 2009 at 7:45 pm | Permalink

    To my mind Twitter needs to be more cautious than before!!!!

  38. rajsingla79
    Posted September 1, 2009 at 12:22 pm | Permalink

    Good Posting

  39. firewallconfiguration
    Posted September 5, 2009 at 2:40 pm | Permalink

    Hi! Its innovative one and the information on the which is given its very useful.Keep post cont.Sstay tune with us.Thank