Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitter for Android Security Vulnerability

privacy.twitter.com

Post reply on HN
Print view View original

1–10 of 28 posts

Re: Twitter for Android Security Vulnerability

#2

Post by EE84M3i »

Strangely, I got a notification for this on twitter.com on Win 10 Chrome and it said "you are no longer using a vulnerable version of Anrdoid on this device".[1] I do use Twitter for Android on my phone, so maybe they sent the notifications to anyone using it but they forgot it could be displayed in the web interface too.

I find the "Our understanding" language strange. Presumably this number comes from some kind of metrics, but it seems like a bit of CYA language?

Still, appreciate the heads up for something they AFAIK didn't have any obligation to give a notification for.

[1] https://i.imgur.com/8dJ9Eq3.png

Re: Twitter for Android Security Vulnerability

#3

Post by cjbprime »

EE84M3i wrote: post #2

Strangely, I got a notification for this on twitter.com on Win 10 Chrome and it said "you are no longer using a vulnerable version of Anrdoid on this device".[1] I do use Twitter for Android on my phone, so maybe they sent the notifications to anyone using it but they forgot it could be displayed in the web interface too. I find the "Our understanding" language strange. Presumably this number comes from some kind of…

I got it on my Mac laptop. I have an Android phone, but it's running Android 10, which isn't vulnerable.

I wonder what the actual vulnerability was. The article links to an entire bulletin of fixes.

Re: Twitter for Android Security Vulnerability

#6

Post by JoshTriplett »

Better yet: don't install the Twitter app, and instead use m.twitter.com, which works perfectly and stays entirely within the browser's sandbox as it should.

You can have a separate icon for that as though it were an app, and if you really want to, you can enable push notifications just as you could with an app.

Re: Twitter for Android Security Vulnerability

#7

Post by dijit »

EE84M3i wrote: post #2

Strangely, I got a notification for this on twitter.com on Win 10 Chrome and it said "you are no longer using a vulnerable version of Anrdoid on this device".[1] I do use Twitter for Android on my phone, so maybe they sent the notifications to anyone using it but they forgot it could be displayed in the web interface too. I find the "Our understanding" language strange. Presumably this number comes from some kind of…

I got this notification on my iOS device, I have never used twitter on Android. I think they just sent it out to everyone.

Re: Twitter for Android Security Vulnerability

#8

Post by agency »

JoshTriplett wrote: post #6

Better yet: don't install the Twitter app, and instead use m.twitter.com, which works perfectly and stays entirely within the browser's sandbox as it should. You can have a separate icon for that as though it were an app, and if you really want to, you can enable push notifications just as you could with an app.

My experience is that the web app does not work perfectly. In fact I get an endless spinner >50% of the time and lord help me if I try to open a comment thread.

Re: Twitter for Android Security Vulnerability

#9

Post by JoshTriplett »

agency wrote: post #8
JoshTriplett wrote: post #6

Better yet: don't install the Twitter app, and instead use m.twitter.com, which works perfectly and stays entirely within the browser's sandbox as it should. You can have a separate icon for that as though it were an app, and if you really want to, you can enable push notifications just as you could with an app.

My experience is that the web app does not work perfectly. In fact I get an endless spinner >50% of the time and lord help me if I try to open a comment thread.

I've never seen that, even on very large threads. (Using it in Firefox for Android here.)
Post reply on HN