Feeds

Twitter bans security maven for sharing naughty link

"We scan evrythng"

Choosing a cloud hosting partner with confidence

A well known security researcher was banished from Twitter for more than two days for including the address of a malicious website in a two-month-old dispatch.

On Tuesday, Mikko Hypponen, chief research officer for anti-virus provider F-Secure, found his Twitter account suspended with no explanation. Every one of his tweets had been erased, and those trying to visit his page found a message that said: "Sorry, the account you were headed to has been suspended due to strange activity. Mosey along now, nothing to see here."

Hypponen said his messages to Twitter officials went unanswered, as, indeed those from The Register did as well.

On Friday, his account was reinstated, and around the same time, he received an explanation of sorts. It read:

I've unsuspended your acct.
You were suspended for using the malware URL rnyspeceDOTcom in DMs.
Be careful!
We scan evrythng for malware.

This link shows Hypponen making a reference to a MySpace phishing site on August 3 that read: "I guess somebody will fall for it... a desperate Myspace phishing site at www. rnyspece. com. (don't go there)."

No, it wasn't a direct message, and no, there was no malware involved with the site. And yes, the URL contained spaces to prevent the security challenged from accidentally visiting the site. Ironically, Hypponen happened to be among the first to discover Twitter's malware filter.

The incident highlights the fine line Twitter has to walk in policing its site. As The Reg and plenty of others have pointed out, the site has become a hot bed for come ons that try to trick people into visiting sites that steal their personal information or install malware. Twitter, with its millions of dollars in financing, has an obligation to filter out at least some of the garbage.

But if it hopes to be taken seriously, it can't indiscriminately banish users who legitimately include a suspicious looking phrase or link in a message, especially one that's two months old. Just ask Hypponen, who writes on his newly reinstated account: "This sucks."

Beginner's guide to SSL certificates

More from The Register

next story
NASTY SSL 3.0 vuln to be revealed soon – sources (Update: It's POODLE)
So nasty no one's even whispering until patch is out
Russian hackers exploit 'Sandworm' bug 'to spy on NATO, EU PCs'
Fix imminent from Microsoft for Vista, Server 2008, other stuff
US government fines Intel's Wind River over crypto exports
New emphasis on encryption as a weapon?
To Russia With Love: Snowden's pole-dancer girlfriend is living with him in Moscow
While the NSA is tapping your PC, he's tapping ... nevermind
Forget passwords, let's use SELFIES, says Obama's cyber tsar
Michael Daniel wants to kill passwords dead
Slap for SnapChat web app in SNAP mishap: '200,000' snaps sapped
This is what happens if you hand your username and password to a 3rd-party
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.