A security researcher was able to use a bug in the Twitter Android app to identify millions of Twitter users, connecting their phone numbers to their Twitter IDs.
The exploit could expose failures in the company's two-factor authentication system and give other security developers pause.
According to a TechCrunch report, the researcher, Ibrahim Balic, created randomized lists of phone numbers and sent them to Twitter.
The user data allowed Balic to find phone numbers for many major Twitter "Celebrities" including the private number of a "Senior Israeli politician."
"Upon learning of this bug, we suspended the accounts used to inappropriately access people's personal information. Protecting the privacy and safety of the people who use Twitter is our number one priority and we remain focused on rapidly stopping spam and abuse originating from use of Twitter's APIs," a Twitter spokesperson said.
The bug exposed user accounts when Balic uploaded millions of phone numbers and asked Twitter to match them with users.
Typically this interface is used only when new users install the app on their phone but, using a set of API calls, Balic was able to spoof this behavior.
The resulting breach of privacy - essentially connecting real numbers to real Twitter handles - could reduce the efficacy of two-factor authentication schemes popular on financial applications and wallets.
The leader in blockchain news, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies.
CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups.
Twitter Bug Exposed Millions of User Phone Numbers
gepubliceerd op Dec 26, 2019
by Coindesk | gepubliceerd op Coinage
Coinage
Recent nieuws
Alles zien
Blockchain Bites: Bitcoin's Run, Uniswap's Hemorrhaging Value, Anchorage's Banking Bid
Bitcoin is nearing all-time highs in price and market cap last set three years ago.
Japan's megabanks to lead experiment with digital yen
We have, in order, Cheese Bank with a $3.3 million theft, Akropolis with its $2 million loss, Value DeFi with a whopping $6 million exploit and finally Origin Protocol's loss of $7 million.
Number of new Bitcoin addresses spikes amid growing FOMO
Japan's three largest banks, as part of a group of 30 private sector actors, are set to collaborate on an experiment with a digital yen.
Not just Wall Street: Quant trader explains why Bitcoin price is going up
Sam Trabucco, a quantitative trader at Alameda Research, believes four general factors are pushing up the price of Bitcoin.