Warning from Twitter: Account Tokens May Have Been Revealed

social media giant Twitter, in an email to developers today. developers warned about an important issue. The company issued a notice to its developers due to an error that occurred on the platform. private application keys and account tokens He said it might have appeared.

In the e-mail that quickly hit the Internet, the social media giant shared a little information about the error. According to the information shared by Twitter, the error that caused the important information of the developers to be revealed was the loss of private application keys and account tokens. in the internet browser's cache It was not stored properly.

Notice to developers using public or shared computers:

In the text sent by the company to the developers, “If you used a public or shared computer to store your developer app keys and tokens on developer.twitter.com before the bug was fixed, they were stored in the browser cache on that computer. temporarily may have been stored.” the statement was included.

In the rest of the text “If someone who uses the same computer after you knows how to access the browser's cache and what they are looking for during this temporary period, that person will have access to the keys and tokens you have viewed. probability of reaching is available.” sentence was included. The company also said that developers own Twitter accounts. account tokens He stated that it might have occurred.

Private keys and tokens issued by Twitter are treated as 'secrets' in the same way as passwords. Because this information is collected using the developer's account. interacting with Twitter can pave the way. Especially when login tokens are seized, attackers can do anything without needing a password Can access Twitter.

Although Twitter announced that they have not detected anything suspicious regarding the use of these keys so far, their developers about paying attention he warned. The company said that developers who viewed their tokens and keys from the mentioned computers needs to generate new application keys and tokens he said.