How StalkDaily Opened a Gaping Hole in Twitter

Today one of our favorite sites, Twitter (Twitter reviews), was hit with a particularly nasty exploit: one that could infect users simply by visiting a friend’s profile on Twitter.com.

The nature of the attack was far more serious than previous exploits, since there was no need to click a link to get infected. We’re hopeful, however, that Twitter will move quickly to prevent this form of cross site scripting (XSS) attack. In the meantime, we’ve looked into how the attack was executed, and how you can avoid it.
Continue reading here....