What’s My Twitter Rank…Whut, My Password? Sure
In the wide world of silly things I am never one to think I’ve seen it all. Today there was a buzz on Twitter about a website called Twitterank that would calculate the individual users overall ranking.
Well, see the problem with that is that the site in question asked for your Twitter username AND password.
Who knows (at this point) he might be legit (doubtful). In all honesty where is that little voice that screams at people that “this is not a good idea“?
And when one has a peek at the source code for the site we see this comment;
I am about to ask you for your Twitter user ID and password. You should be afraid. This is where you ask yourself, “Do I really want to find out my twitterank badly enough to give some random dude on teh interweb my account info?” And if that’s not what you’re asking yourself, shame on you.
Um, yeah.
Posted by Dave Lewis
on November 12, 2008. Filed under Data Security,Web Security.
You can follow any responses to this entry through the RSS 2.0.
You can skip to the end and leave a response. Pinging is currently not allowed.
3 Responses to What’s My Twitter Rank…Whut, My Password? Sure
Leave a Reply
Follow Liquidmatrix
The Intern
November 12, 2008 at 9:32 pm
Woops. Guess I shouldnta did that.
mubix
November 12, 2008 at 11:36 pm
It is simply awesome that he has that in the source code of the site. And I am going to stand by my change your password twice policy. Any of those sites, I simply change my password to something stupid like ‘dog’ and then I change it back to my real password ‘cat’. The site does it’s thing, I get my ego boost, and no security problem.
Dave Lewis
November 13, 2008 at 7:54 am
@mubix
HA! Nice. But, to be honest with ourselves. How many people actually took that extra effort to change their password back? I’m not betting on the high side.