Is your Twitter password secure?

#1

Post by untog » Tue, Apr 23, 2013, 9:21 PM UTC

Is your Twitter password secure?
ismytwitterpasswordsecure.com

Re: Is your Twitter password secure?

#2

Post by pixeloution » Tue, Apr 23, 2013, 9:28 PM UTC

So you want us to submit our password and username to an unknown entity? At that point, no, its not secure, even if its FKoieoSF()$902358#f9J#90JP[V, which, incidentally, is my password.

Re: Is your Twitter password secure?

#3

Post by untog » Tue, Apr 23, 2013, 9:30 PM UTC

pixeloution wrote: post #2

So you want us to submit our password and username to an unknown entity? At that point, no, its not secure, even if its FKoieoSF()$902358#f9J#90JP[V, which, incidentally, is my password.

Try typing on it. (the HN crowd is not really the target for this experiment)

Re: Is your Twitter password secure?

#4

Post by vectorbunny » Tue, Apr 23, 2013, 9:31 PM UTC

First impulse = view source.

   
        
            No no no no noNo no no You idiot.
             
                Do you see "twitter.com" in the address bar? No, you don't. Don't ever type your
                    login and password to Twitter on a site that isn't twitter.com. Same with Facebook.
                    And LinkedIn. I guess what I'm trying to say here is, you're an idiot. Don't be an
                    idiot.
                

            
            Repeat after me:I will not be an idiot.-->

Re: Is your Twitter password secure?

#5

Post by MechaJDI » Tue, Apr 23, 2013, 9:45 PM UTC

It did immediately send up red flags with the "hey, lemme check your password safety by you GIVING me your password!" As I thought about it for a second though however, I tried to envision from memory what's the difference between these particular login forms versus legit twitter logins? (I'm at work so no twitter access) It looks pretty similar from what I can remember besides the submission button I suppose..

Re: Is your Twitter password secure?

#6

Post by Zikes » Tue, Apr 23, 2013, 9:48 PM UTC

This is why two-factor authentication is important. In one of my favorite examples of how effective it can be, Gabe Newell demonstrated his confidence in Steam Guard by giving out his Steam username and password.

Re: Is your Twitter password secure?

#7

Post by ConceitedCode » Tue, Apr 23, 2013, 9:48 PM UTC

vectorbunny wrote: post #4

First impulse = view source. No no no no no No no no You idiot . Do you see "twitter.com" in the address bar? No, you don't. Don't ever type your login and password to Twitter on a site that isn't twitter.com. Same with Facebook. And LinkedIn. I guess what I'm trying to say here is, you're an idiot. Don't be an idiot. Repeat after me: I will not be an idiot. -->

I find this kind of stuff awesome. Makes the developers seem more relatable, I guess.

Re: Is your Twitter password secure?

#8

Post by buzzedword » Tue, Apr 23, 2013, 10:23 PM UTC

You should search twitter for your site right now. It's blowing up haha

https://twitter.com/search?q=ismytwitterpasswordsecure.com&#...

Re: Is your Twitter password secure?

#9

Post by untog » Tue, Apr 23, 2013, 10:31 PM UTC

buzzedword wrote: post #8

You should search twitter for your site right now. It's blowing up haha https://twitter.com/search?q=ismytwitterpasswordsecure.com&#...

Tell me about it. Never been more glad to have used S3 to host some files. Instant scaling...

Re: Is your Twitter password secure?

#10

Post by roryoldershaw » Tue, Apr 23, 2013, 10:57 PM UTC

First thing I thought, is someone really trying to pull one on HN? Very well done, I hope that someone tries it not realising what it is and becomes more aware.