Buffer social Media app admits security breach, facebook and twitter access tokens stolen Asylum rwxr-xr-x 0 2:55 PM

Filename	Buffer social Media app admits security breach, facebook and twitter access tokens stolen
Permission	rw-r--r--
Author	Asylum
Date and Time	2:55 PM
Label
Action

Buffer, an app that allows users to schedule their social media posts, has recently acknowledged that hackers breached their website.



The hackers managed to steal the facebook, twitter access tokens of users stored in their server that allowed the hackers to post Spam on behalf of Buffer's users.



However, CTO Sunil noted in their blog that hackers were not able to get access to any passwords, billing information or any other sensitive information.



The company immediately took a step and invalidate all twitter access tokens and added encryption for all of them. He also noted they are using an extra security parameter for facebook API calls to make it more secure.



The company managed to identify the source of the security breach and closed the vulnerability.

via E Hacking News [ EHN ] - Latest IT Security News | Hacker News Buffer social Media app admits security breach, facebook and twitter access tokens stolen http://www.ehackingnews.com/2013/10/buffer-app-hacked-spam-post.html