Skip to content
Hallway
0:00 / 0:00

#xss#twitter#tweetdeck

How The Self-Retweeting Tweet Worked: Cross-Site Scripting (XSS) and Twitter

Tom Scott

6.7M subscribers • 34 videos on Hallway

YouTube
  • Recommended by 2 people: 2 in engineering communities.
  • Presented by Tom Scott
  • May be out of date. Uploaded 12 years ago, in an area where tools change fast.

Beginner. No background in the topic needed.

2.3M views12 years ago2 recommendations

SecurityWeb developmentWeb and application securityExploits and vulnerabilitiesHTTP, REST and GraphQL

Tom Scott explains how a cross-site scripting vulnerability in Tweetdeck allowed a self-propagating tweet to spread across Twitter.

tomscott.com - twitter.com/tomscott - It should never have happened. Defending against cross-site scripting (XSS) attacks is Web Security 101. And yet, today, there was a self-retweeting tweet that hit a heck of a lot of people - anyone using Tweetdeck, Twitter's "professional" client. How did it work? Time to break down the code. (Remember the old Myspace worms? They worked the same way.) THE SELF-RETWEETING TWEET: twitter.com/derGeruhn/status/476764918763749376

Why it's here

2 people recommend this

What people say. Recommended as an exceptionally clear and engaging explanation of cross-site scripting in action.

u/Mentioned_Videosin r/programming • Recommends

On “Yesterday, I used glitches to inject the source code for Flappy Bird into Super Mario World on SNES. Here’s how.”

Other videos in this thread: Watch Playlist ▶ VIDEO|COMMENT -|- You're a Nerd - Hot Tub Time Machine 2 (HD)|1 - THIS How The Self-Retweeting Tweet Worked: Cross-Site Scripting (XSS) and Twitter|1 - I really need to learn Assembly. I'd love to understand this stuff because it's right up my alley, I love seeing things used in ways that are totally unexpected. This video is done nicely: and I like the way he explains it. I wish I had the backgr... I'm a bot working hard to help Redditors find related videos to watch. *** Info | Chrome Extension
2View on Reddit

u/Mteigersin r/Frontend • Recommends

On “My All-Time Favorite Demonstration of a Cross-Site Scripting Attack”

Alternatively link to this video love his enthusiasm.
1View on Reddit