Serious security Flaw in True

By: sajalkayan on 28 October 2010 - 02:39 Tags:
Forums: 
English Forum

http://www.sajalkayan.com/twitter-logged-me-as-someone-else-privacy-fail.html

Today when i opened twitter web, i was logged into the account of someone else from Bangkok. Wondering... its mess-up by True or by Twitter?

Anyone else have similar experience?

Get latest news from Blognone
By: lew
FounderJusci's WriterMEconomicsAndroid
on 30 October 2010 - 00:27 #226895
lew's picture

I think it's some kind of session-id-reuse bug. Unlikely to be True's false for I always use HTTPS.

lewcpe.com, @wasonliw

By: sajalkayan on 31 October 2010 - 15:16 #227350 Reply to:226895

Well... if it were problems from twitters side... then how come i got the session of someone else in Bangkok ... of all the people in the world...

Even few months ago a friend told me that while browsing Google Groups... somehow he got logged on as me... i didn't take that too seriously then...

By: anu
Contributor
on 30 October 2010 - 16:52 #227080

Happened to Facebook too, I think caused by True Transparent Proxy.