HOME news security 227500393 Twitter.com Shuts Down 'onMouseOver' Attack Security Twitter.com Shuts Down 'onMouseOver' Attack By Stefanie Hoffman September 21, 2010, 08:58 PM EDT ...

Turn off JavaScript for Twitter! Update 2 (14:13 CEST): It is possible to load secondary JavaScript from an external URL with no user interaction, which makes this definitely wormable and dangerous.

The attack took advantage of the main Twitter’s web interface, which fails to disallow the ‘onMouseOver’ Javascript command.

Hopefully Twitter will shut down this loophole as soon as possible – disallowing users to post the onMouseOver JavaScript code, and protecting users whose browsing may be at risk. Some users are also ...

Nyheder, analyser, viden, blogs og debat om it. Computerworld er dit medie om det digitale Danmark. Computerworld skriver om nye teknologier, hardware, software ...

The flaw is activated by inserting a line of JavaScript into the tweet, containing the command “onmouseover.” It seems that most people are using this exploit for playful trickery, generating ...