Today we have been made aware that Twitbin, the twitter client for firefox (we wrote about twitbin here ), fails the most basic password security tests. The problem is that it stores your username and password in plain text in a browser cookie. This is very bad practice.
Thanks to YABFOG's post for making us aware of this.
It is recommended that you uninstall Twitbin until such time that they provide proper security for your credentials.
- Twittown Editors's blog





- -35 points

Comments
Beat me to it
Brian, you beat me to it. All fixed in Twitbin. http://www.yabfog.com/wp/2007/10/26/twitbin-fixes-security-flaw
Security risk fixed
Hey Twittown,
We've released a patch to this issue, it has already been uplaoded, and is live on the servers. All one has to do to get the update is clear their cache and their cookies.
Thanks for your patience,
Brian
Post new comment