Twitter warns direct messages were exposed

Oops! It took Twitter 2 weeks to tell users of bug that exposes messages to unauthorized developers

A bug in Twitter's platform for third-party app developers exposed some Direct Messages (DMs) from almost 3 million users to outsiders, the micro-blogging platform has admitted.

Twitter said it discovered the bug on September 10, and fixed it the same day.

Some Twitter users got messages like this about a bug that may have sent their DMs to the wrong recipient. The bug affected less than 1 percent of users, the company said.

The bug was found in Twitter's Account Activity API (AAAPI), which is used by companies to improve their communications with customers on the platform.

Twitter has told an undisclosed number of users their private messages may have been leaked to third-parties for more than a year.

Diablo Animated Series May Be Coming to Netflix
We reached out to Blizzard about the project and were told the company has "nothing to announce at this time". Netflix is at work on an animated series based on Blizzard Entertainment's Diablo .

Republican Paul Gosar's own siblings star in Democrat campaign ad
To maximise its impact, the ad doesn't name the six speakers until the end - they're just presented as normal Arizona folks. In July 2018, Gosar appeared at a rally in the United Kingdom in support of far-right political activist Tommy Robinson.

Chelsea boss Sarri: Players adjusted quicker here than Napoli
Chelsea FC turned to Maurizio Sarri after Antonio Conte led the Blues to a disappointing fifth-placed finish in the Premier League last term.

Earlier today, Twitter began showing popup messages to affected users accessing the Twitter website or mobile app.

A bug affecting one of our APIsOn Monday, September 10, we identified a bug that may have sent one or more of your Direct Messages or protected Tweets (if your account was protected at the time) to Twitter developers who were not authorized to receive them. The company said it patched the flaw "within hours of discovering it". "The bug may have caused some of these interactions to be unintentionally sent to another registered developer", Twitter said in a blog post on Saturday. For this to occur, two or more registered developers had to share API subscriptions tied to the same public IP, URL paths had to match exactly across those IPs, and the information sent to developers had to originate from the same server in Twitter's datacenter.

While Twitter states that they have no reason to believe the private information was misused, they are investigating the matter further.

According to Twitter, the coding blunder in its webhook system required a very specific set of circumstances to trigger.

The tech giant said it has been working with its partners to make sure that they will "delete information they should not have".

Related News:

  • Brett Kavanaugh: Judge accuser agrees to testify next week

    Christine Blasey Ford's accusations and the standoff over the terms of her appearance have left Kavanaugh's confirmation in limbo. They intimated to the news network that her dislike of small spaces and planes is due to trauma she has experienced.
    Klopp: Salah is in form

    Klopp: Salah is in form

    He's a proper professional, so his body gives him the opportunity". But it's completely normal that everyone expects this. We want him to score as often as possible.
    Billionaire Yusaku Maezawa Will Be the First Moon Tourist

    Billionaire Yusaku Maezawa Will Be the First Moon Tourist

    He will invite six to eight artists - from film, architecture, painting, sculpture and photography - to travel with him for free. Yusaku Maezawa announced his plans to make history as the first tourist to ride around the moon on a space-x commercial flight.
  • Japan spacecraft sends rovers to asteroid

    The two robots will capture images of the asteroid and measure temperatures before a larger rover is released in early October. JAXA did lose contact due to asteroid Ryugu's rotation before they could confirm any images from the landing itself.
    Sugar content of most supermarket yogurts well above recommended threshold

    Sugar content of most supermarket yogurts well above recommended threshold

    One finding of the study that might come as a surprise to consumers is that organic yogurts were some of the sweetest of all. In these categories, average sugars ranged from 10.8g per 100g in children's products to 13.1g per 100g in organic products.
    US seeking to negotiate a treaty with Iran: special envoy

    US seeking to negotiate a treaty with Iran: special envoy

    Today, Zarif posted a tweet, saying "US calls JCPOA a personal agreement between two governments, claiming it "seeks a treaty". It has said Trump's offer to negotiate contradicts his actions and accused Washington of trying to foment regime change.
  • Fortnite Season 6's Launch Has Been Delayed Until September 27th

    Fortnite Season 6's Launch Has Been Delayed Until September 27th

    Epic Games has recently announced the starting date of season 6, and players will also get a chance to earn more XP this season. However, players have to unlock these skins first in order to earn additional styles for them.
    Bidding war for Sky on course for auction - Takeover Panel

    Bidding war for Sky on course for auction - Takeover Panel

    In the opening round, the would-be buyer with the lower offer now on the table - meaning Fox at this point - makes the first bid. Britain's top pay-TV company has been in play since December 2016, when Fox offered to buy out Sky's other shareholders.
    First Image Released From Child's Play Remake

    First Image Released From Child's Play Remake

    Should MGM and Orion Pictures be rebooting this film? They also have plans for a Chucky TV series. Production is now underway in Vancouver.
  • The Aftermath of Hurricane Florence

    The Aftermath of Hurricane Florence

    At another gas station, a long line of vehicles followed a tanker truck that pulled in with 8,800 gallons (33,000 liters) of fuel. And with that increased flooding - many rivers are not expected to crest until Monday or later - the death count will rise.

    China, Russia warn US of consequences over sanctions against them

    China has told the Trump administration to remove punitive sanctions against its military, or "bear the consequences". He warned that the United States would face "consequences" if it did not immediately revoke the sanctions.
    Landslide buries dozens as Philippines grapples with typhoon's aftermath

    Landslide buries dozens as Philippines grapples with typhoon's aftermath

    Earlier this week, a mining town in Benguet province was also hit by landslides which led to the death of at least 32 people. The President also assured that those living in close proximity to ground zero will be relocated to safer areas.


Most liked

OnePlus 6 users in India get Android 9.0 Pie update
Once the Android Pie-based OxygenOS 9.0 rollout for OnePlus 6 is complete, OnePlus will move to other phones in its portfolio. It also brings Android Pie based gesture navigation, DND mode with adjustable settings and the new August Security Patch.

America's Got Talent finalist Michael Ketterer arrested on domestic violence charges
When the police arrived on the scene, Ketterer's wife had a "visible red mark" on her body, according to law enforcement sources. Ketterer was booked and charged with a felony because of the injury to his wife, and he was released after posting $50K bail.

Ecstasy Makes Octopuses More Social And Touchy
A new study has found that when octopuses are intoxicated with MDMA , they act like humans who are high on the same drug. She added that the study of psychedelics and other recreational drugs is no longer deemed to be a "risque topic".

Last orders for Chas, dead at 74
Chas Hodges, best known for his partnership with Dave Peacock in the pop rock band Chas & Dave, has died at the age of 74. Mr Hodges had suffered number of health issues and his recent cancer treatment was addressed in song Sling Your Hook.

Cargill Ground Beef Recalled For Possible E. Coli Contamination
Cargill Meat Solutions has recalled more than 132,000 pounds of ground beef because of E. coli contamination . Consumers may have frozen some of the recalled ground beef, and they are urged to throw it away or return it.

What do shoppers think of the new Jack's brand launched by Tesco?
The first Jack's store opened in Chatteris, Cambridgeshire yesterday while another will open in Immingham, Lincolnshire today. Tesco attempted to go down the discount route in the 1980s, with its Victor Value brand, but later ditched the concept.

2 dead after van is swept away in S. Carolina
Bishop and Flood have been placed on administrative leave while three separate investigations are conducted into the deaths. Authorities confirm two detainees drowned when a van was swept away in rising flood waters in SC .

Survivor pulled from capsized Tanzanian ferry as death toll hits 207
Almost 200 people died in 2011 when the MV Spice Islander I sank off Tanzania's Indian Ocean coast near Zanzibar. Dozens of relatives stood crying by the shoreline as they waited for information on their loved ones.

Dassault aviation clarifies; Says Indian govt had no hand in choosing partners
Dassault Aviation, the makers of Rafale, had chosen Reliance Defence as its partner to fulfil offset obligations of the deal. "It was the Indian government that proposed this service group ( Reliance ), and Dassault who negotiated with Ambani".

Caron Butler Says Lakers Should Go After Jimmy Butler
Taylor has overseen high-profile Minnesota stars getting traded in the past, including Kevin Garnett and Kevin Love . Taylor reportedly told those attending the recent NBA Board of Governors meeting that Butler is, in fact, available.

Telltale Games officially shutting down, only a skeleton crew remains
Kotaku's source has also said the layoffs are widespread, but did not confirm how many people were still left. Little is known as to why the studio is shutting down, but the story is developing.

Pixel 3 XL's Ugly Looking Notch Sports Dual Front Cameras & Secondary Speaker
The industry's trusted tipster Evan Blass also jumped onto the scene with plain old press renders of the Pixel 3 and Pixel 3 XL. Since none of this is confirmed at the moment, it is advisable to take it with a grain of salt unless its official launch.

Audi Launches Electric e-tron SUV
Energy efficient recuperating brakes can claim back as much as 30 per cent of the e-tron's range, according to Audi. The tires fitted to the Audi e-tron meet the German manufacturer's mileage requirements, Goodyear says.

Cristiano Ronaldo "finding he doesn't have Madrid protection"
When Valencia defender Jeison Murillo tried to block CR7, Ronaldo gave him a slight push due to which Murillo fell down.

Israel to upgrade nuclear defenses in response to Iran, Syria threats
Snir also pleaded for strong actions against Iran, "The IAEA must conduct a robust verification of Iran's clandestine activities". Iran's reinforcement of Damascus during Syria's civil war is seen by Israel as a further deployment on their borders.