$3k Bug Bounty - Twitter's OAuth Mistakes


A Twitter login screen. Highlighted is the information that it cannot access your DMs.

Imagine the scenario. You're trying out some cool new Twitter app. It asks you to sign in via OAuth as per usual. You look through the permissions - phew - it doesn't want to access your Direct Messages. You authorise it - whereupon it promptly leaks to the world all your sexts, inappropriate jokes, and […]

Continue reading →

PodCast review: This Week - The Musical


Logo for This Week The Musical.

Take a listen It is a delightful twist on the usual podcast fare. Genuinely joyous, and giggle-inducing. Definitely worth adding to your ever-growing roster of digital downloads.

Continue reading →

Open Glasgow's Moral Maze


The Glasgow Open Government Licence. Highlighted is a passage saying the data cannot be used for illegal or immoral purposes.

Glasgow City Council has released a treasure-trove of open data. Nearly one-hundred datasets ranging from Live Traffic Information - to historic climate data. A fantastic boon for researches and open government enthusiasts. But there's a sting in the tail. The majority of the datasets are under the Open Government Licence (OGL). That's basically Creative Commons […]

Continue reading →

Using the WordPress mShots Screenshot API


The Logo for WordPress.

A few years ago, I wrote about Google's secret screenshot API - a slightly cumbersome way to take website screenshots for free. There's another service which you may find simpler to use - mShots from WordPress. Here's how it works: Take any website link: https://twitter.com/JennyVass/status/1067855777040338944 URL Encode it: https%3A%2F%2Ftwitter.com%2FJennyVass%2Fstatus%2F1067855777040338944 Add it to the end of […]

Continue reading →