Entrepreneurship, Linux, and Ruby
Posts tagged oauth
Twitter account hacked
Jun 15th
First off, an apology to those who were annoyed all day today by Twitter spam: I'm sorry, I was asleep (I write better code at night) and didn't know what was going on until I woke up this evening. Not my favourite thing to wake up to!
I do a lot of freelance work with the Twitter API, and someone asked me for a quote on a clone of a Ponzi-style follower train site. Not the kind of apps I build, but it looked slightly more legit than usual and I was foolish to log in to have a look around – that's where the trouble started. The site in question used the pre-oAuth login (as unfortunately most sites still do) which requires giving up your Twitter screen name and password.
As soon as they had it I was locked out of my account due to "too many incorrect password attempts", and didn't recover the account until tonight. The password has been changed and the spam in question deleted. I've learned my lesson, and will only use oAuth credentials in the future – you won't receive any more spam from this account.

