How to keep the XSS TweetDeck bug from posting on your behalf

June 12, 2014

Twitter went into crisis mode today to fix an XSS flaw in the popular TweetDeck client that has users retweeting the virus-like vulnerability against their will. Despite swift action, the exploit spread like wildfire, gaining tens of thousands of retweets in minutes, and the number is still growing. The current fix in place requires user intervention to apply, with a logout required before the hole is closed. Moreover, some users were still reporting the problem post-logout.To read this article in full or to leave a comment, please click here

Link: http://www.pcworld.com/article/2362028/how-to-keep-the-xss-tweetdeck-bug-from-posting-on-your-behalf.html#tk.rss_howto