17-year-old responsible for having made known XSS vulnerability in Twitter
A middle school student says he was the first surfer to discover and exploit Twitter XSS vulnerability affecting users when passing the mouse over the tweet altered.
Delphin Pearce, an Australian of 17 years known on Twitter as @ zzapha, said he discovered that he could insert JavaScript code in the tweets and began to publish codes of curiosity to see if we could exploit this vulnerability.
"I just did to see if they could do (...) if they really could execute JavaScript with a tweet," said Delphin.
Hackers exploit the vulnerability by showing pop-ups, offering spreading pornographic videos and tweets altered, which maddened the network for five hours until he managed to control the situation.
In theory, the vulnerability could be used to steal passwords from Twitter, but the javscript code had a maximum of 140 characters, as any tweet, so this did not happen and no major damage was caused.
Delphin said he had no malicious intent and did not know it would cause a big problem. "When I posted the tweet I had no idea he would expand so much. Had not even imagined, "said the young.
"I found a vulnerability, did not create any worm to replicate automatically. I have understood that it is not illegal, "said Delphin," I hope I get in trouble! ".
Rumor vulnerability had been discovered more than a month, but Twitter still had not patched. Moreover, some people doubt that Delphin was the first person to discover and exploit it.
Sources: Revealed: The 'hacker' who started the 'mouseover worm' That Took down Twitter - to 17-year-old Australian schoolboy Daily Mail
Australian 17-year-old Takes blame for chaos Twitter AFP
Twitter worm unleashed by 17-year-old Australian
Guardian Unlimited
0 comments:
Post a Comment