Twitbin Password Security Risk

Today we have been made aware that Twitbin, the twitter client for firefox (we wrote about twitbin here ), fails the most basic password security tests. The problem is that it stores your username and password in plain text in a browser cookie. This is very bad practice.

Thanks to YABFOG's post for making us aware of this.

It is recommended that you uninstall Twitbin until such time that they provide proper security for your credentials.

Comments

Beat me to it

Brian, you beat me to it. All fixed in Twitbin. http://www.yabfog.com/wp/2007/10/26/twitbin-fixes-security-flaw

Security risk fixed

Hey Twittown,
We've released a patch to this issue, it has already been uplaoded, and is live on the servers. All one has to do to get the update is clear their cache and their cookies.
Thanks for your patience,
Brian

Post new comment

The content of this field is kept private and will not be shown publicly.
 

Back to top