GroupTweet to blame for Twitter security 'compromise'

By Tim Conneally | Published April 23, 2008, 6:40 PM

Twitter, the moment-by-moment status update ("What are you doing now?") site that's the buzz among social networking circles, was shaken by a potentially embarrassing foul-up.

Especially popular among Silicon Valley's big names and linkable to many other sites, most notably Facebook, Twitter allows users to create a pseudo-RSS feed of the often inane and meticulous details of their day. Some users, however, found their not-so-inane private messages had been broadcast to all their friends through no fault of their own.

Outraged and embarrassed, one user, whose private message was broadcast to all of her 650 friends, had to delete her Twitter account altogether just to remove it.

At the heart of the "compromise" were third-party Twitter application GroupTweet, coupled with good old fashioned human error. GroupTweet utilizes Twitter's API to access a user's friends list, and sends direct messages to a select group. It sounds simple enough, but apparently the instructions were a little less than straightforward.

Today on GroupTweet's main page, this explanation was posted: "The reason that a particular GroupTweet users' direct messages were exposed is because she registered her personal Twitter account at GroupTweet. The site was doing exactly what it was supposed to: taking direct messages sent to the group account and re-publishing them as tweets. When the personal account was registered here, direct messages sent to the account were republished. Unfortunately, these were not meant to be republished."

The user in question followed on Techcrunch by saying, "The original message is found here [screenshot of the registration box on GroupTweet's site]. It does not specify if I must enter the group account or enter using my personal account, so I may then select which of my groups I would like to register."

All GroupTweet accounts have been disabled to prevent any future mistakes of this nature. Aaron Forgue, developer of GroupTweet, says, "I am 100% at fault for this fiasco because I did a poor job of explaining the steps one needs to take to use GroupTweet. I sincerely apologize."

Comments

View comments by with a score of at least

Score: 0

|

Twitter is very cool.

Posting your personal private embarrassing information on the Internet and expecting it to stay private is just lame.

Score: 0

|

Serves her right. Kids these days spend their time twittering their 650 friends (six hundred fifty! you don't even have enough time in a day to stay on top of that) feel entiteld to it while bagging in excessive wages. Makes me feel so much better wasting my time on BN :)

Score: 0

|

lol i agree.

Score: 0

|

Totally agree. I mean, this personal message I bet sounded smth like: "I'm sitting on the toiler feeling lonely". I mean, hell, it's minute-by-minute, right? ;)

Web2.0 sucks and all people who see a ton of future in it are imbecile.

Score: 0

|

You are a narrow minded idiot.

http://en.wikipedia.org/wiki/Web_2

Score: 0

|

How can this make a news at all ?
Who in his sound mind would publish a minute-by-minute journal of its own activities on the web ?
This web 2.0 thing is turning worst minute-by-minute.

Score: 0

|

Who is this user...?

Score: 0

|

Google Chrome 4: Yes, it's fast, but is it usable?

As Betanews readers have responded to our stories about Chrome's JavaScript superiority...Does that mean we'd actually use this browser? Well...

Video: Netflix on PlayStation 3

Netflix has come to the PlayStation 3 via Blu-ray and BD-Live.

Verizon Wireless launches new Android, Chocolate, and ruggedized phones

The lower-priced Eris joins the Droid, while the Chocolate gets a touchscreen and more music playback.

Early sales figures for Windows 7 nicely high, but do we know why?

Fans of triple-digit surges in figures quoted by Betanews will love this one, as it appears Microsoft rediscovered how to pull off a software launch.

Myka announces its latest Linux-based 'net top box'

Myka's ION brings Boxee, XMBC, and much more to HDTVs.

What hath Mac wrought? A remembrance after a quarter-century

The reason there's a Macintosh today is not because of some brilliant flash of engineering genius, but because Apple had the audacity to learn from its mistakes.

Early build of Moblin 2.1 improves connectivity, but not device support

The Linux Foundation's Atom-centric OS yesterday received a major overhaul with the project release of Moblin 2.1 for netbooks and nettops.

The iPhone's China syndrome: Sales of 5,000 and climbing

There's actually a country where Apple's device is not a godsend, where sales can be measured in the dozens.

New European counterpart to FCC will ensure 'a more neutral net'

Late Thursday night, the ruling telecom administrators of the EU's member nations signed away their final authority to a new entity overseen by the EC.

Sophos study suggests Windows 7 UAC's default setting is self-defeating

Without any anti-virus installed, a Sophos test showed, User Account Control was only capable of thwarting just one malware package out of ten samples chosen.

Indiscreet tweet trips awareness of Web SSL vulnerability

A group of high-level security engineers had been making progress on thwarting a low-level threat to the Web, until somebody blurted it all out on Twitter.