Disclosure: We are a professional review site that receives compensation from the companies whose products we review. We test each product thoroughly and give high marks to only the very best. We are independently owned and the opinions expressed here are our own.
Earlier this week I reported a security flaw with "onMouseOver" links on the website only caused third party websites to popup whenever a user mousedover certain links.
A few minutes ago, I was checking on Twitter’s blog to see what the status was on the security flaw and see if they made a statement as to what truly was going on. I found that Twitter has already fixed this issue but their blog post about the issue was posted later in the day.
I checked several times through out the week on this issue and no other sites where reported this issue to be resolved. I checked back with Twitter the next morning and had not seen a article about the issue. But looking at the timestamp, they posted a status about this issue late morning on September 21, 2010. I am not sure how missed this. Sorry about that guys…
Below is a quote directly from Twitter about this issue. For the long version check out the article over at Twitters blog.
This morning at 2:54 am PDT Twitter was notified of a security exploit that surfaced about a half hour before that, and we immediately went to work on fixing it. By 7:00 am PDT, the primary issue was solved. And, by 9:15 am PDT, a more minor but related issue tied to hovercards was also fixed.
Image Source: Iconfinder.com – Twitter Bird Surfing
That was a major issue – made it to the local papers here. Glad it got resolved.