Twitter says Android security bug gave access to direct messages

guest · Aug 5, 2020

Twitter says Android security bug gave access to direct messages
August 6, 2020
https://techcrunch.com/2020/08/05/twitter-android-bug-direct-messages/

Twitter says a security bug may have exposed the private direct messages of its Android app users, but said that there was no evidence that the vulnerability was ever exploited.

The bug could have allowed a malicious Android app running on the same device to siphon off a user’s direct messages stored in the Twitter app by bypassing Android’s built-in data permissions. But, Twitter said that the bug, patched in October 2018, only worked on Android 8 (Oreo) and Android 9 (Pie), and has since been fixed.

A Twitter spokesperson told TechCrunch that the bug was reported by a security researcher “a few weeks ago” through HackerOne, which Twitter uses for its bug bounty program.

“Since then, we have been working to keep accounts secure,” said the spokesperson.
Click to expand...

Twitter said the vast majority of users had updated their Twitter for Android app and were no longer vulnerable. But the company said about 4% of users are still running an old and vulnerable version of its app, and users will be notified to update the app as soon as possible.

Many users began noticing in-app pop-ups notifying them of the issue.
Click to expand...

Twitter: Twitter For Android Security Vulnerability

We recently discovered and fixed a vulnerability in Twitter for Android related to an underlying Android OS security issue affecting OS versions 8 and 9.
Click to expand...

Log in or Sign up

Twitter says Android security bug gave access to direct messages

guest Guest

Log in or Sign up

Twitter says Android security bug gave access to direct messages

guest Guest

Useful Searches