tag:blogger.com,1999:blog-1463151524639428108.post8859840820930434678..comments2009-07-02T12:38:57.537-05:00coltpixyhttp://www.blogger.com/profile/08718763851184482836noreply@blogger.comBlogger7125tag:blogger.com,1999:blog-1463151524639428108.post-71195502657031471252009-07-02T12:38:57.537-05:002009-07-02T12:38:57.537-05:00Thank you J.D. <br />This whole situation is horrible. I wish it didn&#39;t happen to my twitter buddy and I wish this was not happening to you. <br />I never thought that the programmer of twiping was doing the hacking but someone else taking advantage of its vulnerabilities.coltpixyhttp://www.blogger.com/profile/08718763851184482836noreply@blogger.comtag:blogger.com,1999:blog-1463151524639428108.post-45324616020547500842009-07-02T12:14:39.347-05:002009-07-02T12:14:39.347-05:00Since twiPing runs locally on your desktop and encrypts and saves your credentials there, your desktop computer would have to be compromised in order to get the credentials you entered into twiPing. If your PC was compromised in this way, I would guess the attacker would be interested in things much more valuable than your Twitter password. Maybe not.<br /><br />Either way, I&#39;m investigating using the new OAuth functionality from the Twitter API so users no longer have to provide their true Twitter credentials to twiPing.J.D. Mullinhttp://www.blogger.com/profile/07358042130535416073noreply@blogger.comtag:blogger.com,1999:blog-1463151524639428108.post-2625067181244779462009-07-02T11:22:03.331-05:002009-07-02T11:22:03.331-05:00it is still always a good idea to research 3rd party apps like this, to make sure.<br /><br />I&#39;ve found that the more users that have the app, the more likely it is to be &quot;safer&quot;. Nothing is 100% safe on the internet anymore, and like you said, CP, &quot;Be very, very careful what you download.&quot;<br /><br />JD, it is entirely possible that once downloaded, the source was cracked and used to hack accounts of people you are following or who are following you. (I have seen it with 3rd party Yahoo apps, and we all know how many holes Yahoo has anyway). So it may not have been the intent of your software, it could have been a crack exploit. <br /><br />I am not slamming any product here, for I&#39;ve not tried &quot;twiping&quot; but as a general rule, only access twitter directly for my updates.UBKhttp://www.blogger.com/profile/17768264144300509325noreply@blogger.comtag:blogger.com,1999:blog-1463151524639428108.post-309925092752636672009-07-02T10:36:48.882-05:002009-07-02T10:36:48.882-05:00J.D. it happened not long after he ran the program and that is what he said he, &quot;traced it back to&quot;. <br /><br />I totally agree that a weak password will get you hacked. It is best to use a combination of characters and never use words found in a dictionary. <br />It is also a good idea to never use the same password in multiple places.coltpixyhttp://www.blogger.com/profile/08718763851184482836noreply@blogger.comtag:blogger.com,1999:blog-1463151524639428108.post-43305964574054840362009-07-02T08:29:50.888-05:002009-07-02T08:29:50.888-05:00I&#39;m guessing it was just a weak twitter account password, not twiPing that caused this.J.D. Mullinhttp://www.blogger.com/profile/07358042130535416073noreply@blogger.comtag:blogger.com,1999:blog-1463151524639428108.post-63834938687679029162009-07-02T08:29:14.083-05:002009-07-02T08:29:14.083-05:00I&#39;m the author of twiPing, and it is not spyware and would not cause an account to be hacked. I&#39;m curious if you guys have any concrete details linking twiPing to this hack, so I could prevent any problems in the future.J.D. Mullinhttp://www.blogger.com/profile/07358042130535416073noreply@blogger.comtag:blogger.com,1999:blog-1463151524639428108.post-11970063943301772832009-07-02T05:44:44.924-05:002009-07-02T05:44:44.924-05:00Thanks for that Coltpixy! Can never be too careful.HaffinaCreationshttp://www.blogger.com/profile/09775257094378210366noreply@blogger.com