“Merry Christmas – it’s another Twitter XSS bug!”

Merry Christmas – it’s another Twitter XSS bug!

Festive fodder for Cybersecuritypseuds

Recently Twitter bought TweetDeck, a provider of custom twitter-browsing clients which were popular amongst many Twitterati for dealing with bulk tweet-management.

Twitter subsequently axed the main TweetDeck client, replacing it with a centralised web service and a series of per-platform shims (Mac, Windows) that present the web service as an “app” – and for those with just a browser, the same backend is available as web.tweetdeck.com.

…read more, or comment at Unscrewing Security