Despite Best Intentions, 'CrypTweet' Criticized for Poor Security
A prominent Australia-based technologist is cautioning people not to put full confidence in an application he developed that intends to provide security for sending private messages on Twitter.
The application, called CrypTweet, was released on Monday, but at least two security and privacy experts have concluded it has major security holes.
Mark Pesce, CrypTweet's author, wrote on the application's web site he was aware "a number" of people had examined its code and found security problems. "I am waiting for an analysis of these flaws -- hopefully they can be remediated -- but until then CrypTweet should be considered an attempt toward security that may not be secure." Pesce posted the caveat after a mild admonishment on Twitter from security expert Moxie Marlinspike: "Whoa, just looked at the CrypTweet source. This is not a secure protocol, you should be careful about claiming it is."
