Skip to main content

Despite Best Intentions, 'CrypTweet' Criticized for Poor Security

posted onFebruary 21, 2012
by l33tdawg

A prominent Australia-based technologist is cautioning people not to put full confidence in an application he developed that intends to provide security for sending private messages on Twitter.

The application, called CrypTweet, was released on Monday, but at least two security and privacy experts have concluded it has major security holes.

Mark Pesce, CrypTweet's author, wrote on the application's web site he was aware "a number" of people had examined its code and found security problems. "I am waiting for an analysis of these flaws -- hopefully they can be remediated -- but until then CrypTweet should be considered an attempt toward security that may not be secure." Pesce posted the caveat after a mild admonishment on Twitter from security expert Moxie Marlinspike: "Whoa, just looked at the CrypTweet source. This is not a secure protocol, you should be careful about claiming it is."

Source

Tags

Security Twitter Software-Programming

You May Also Like

Recent News

Thursday, January 18th

Monday, January 15th

Friday, January 12th

Thursday, January 11th

Wednesday, January 10th