Web 2.0: Major security flaw on Twitter allows you to force anyone to follow [Update]

Major Flaw

A major flaw on Twitter was revealed today, which resulted in letting you force anyone to follow you, now corrected.

Who would have thought that tweeting would in turn cause a code to run through Twitters system, something as simple as saying “accept USERNAME”. In a matter of minutes after Gizmodo, Mashable and various other sites released this information, Twitter users began to abuse this system and quickly force numerous celebrities to force them to follow.

Oh look, Biz Stone and Conan O Brien all follow me now.

Yes, even the creator of Twitter was easily abused by this mishap, which quickly resulted in maintenance on Twitter, which reset everyones followers and following lists to 0.

Lists do show up normally however, but the followers count will more than likely remain at 0 until they can revert the database to a previous number, before the security flaw was so widely released.

Massive fail. You would think they have someone on staff constantly keeping an eye on tech sites.

In our attempt to alert some large techie players like Kevin Pereira of G4TV, we used the exploit for good. Sorry in advance for forcing the follow @kpereira and @biz.

We did force @annoyingorange to follow us to annoy him though, take that sucka!

[Update] 2 pm: Twitter has already resolved the issue, but the forced followers still remain, you know, until they block you. TechCrunch was the first site to find this flaw, with Gizmodo and Mashable following behind shortly after.

About the Author