Collected research
I know what your friends did last summer
Twitter's publicly available JSON feeds leaked who a visitor is and who their friends are to any site they browsed. Including the feed with a script tag and defining a setter on Object.prototype for the 'user' key captures the data in every browser tested except IE, which the author notes enables targeted spam and social engineering.
Record
- Researcher
- Gareth Heyes
- Published by
- thespanner.co.uk
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Gareth Heyes, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .