{"id":341451,"date":"2017-05-20T02:37:34","date_gmt":"2017-05-19T18:37:34","guid":{"rendered":"http:\/\/techcrunch.com\/?p=1493499"},"modified":"2017-05-20T02:37:34","modified_gmt":"2017-05-19T18:37:34","slug":"twitter-says-vine-users-emails-and-phone-numbers-were-exposed-for-a-day-but-werent-misused","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/twitter-says-vine-users-emails-and-phone-numbers-were-exposed-for-a-day-but-werent-misused\/","title":{"rendered":"Twitter says Vine users\u2019 emails and phone numbers were exposed for a day, but weren\u2019t misused"},"content":{"rendered":"

<\/p>\n

Twitter is alerting<\/a> Vine users of a bug that exposed their email addresses and, in some cases,\u00a0phone numbers to third parties. It\u2019s also advising affected users\u00a0to be cautious about any emails from unknown senders as a result. The company says the bug was only active for 24 hours before being patched, and doesn\u2019t believe that the data was misused in any way, at this time.<\/p>\n

To be clear, Twitter was not hacked nor is this considered a data breach \u2013 instead, the email address or phone number the company had on file for some Vine users was only available under certain circumstances, the company says.<\/p>\n

The company declined to officially comment on the specifics of how the bug was discovered or how it may\u00a0have been seen by third parties, but we understand that this data\u00a0was not published on the Vine archive website where anyone on the public internet could have seen it. Instead, if anyone was to have seen the data at the time of exposure, they would have had to do so through a more technical means \u2013 such as using an API to pull the information.<\/p>\n

Twitter is only alerting users out of a desire to be transparent\u00a0in disclosing the vulnerability, not because they believe that anyone actually captured the user data or misused it in any way, we\u2019re told.<\/p>\n

\"\"<\/p>\n

In addition, Twitter says that the exposed emails or phone numbers would not have allowed a third party to access someone\u2019s Vine account because passwords were not exposed as a part of this incident.<\/p>\n

Emails are now going out to affected users, and will be personalized in terms of whether the user had only their email, only their phone number, or both exposed during the time the vulnerability was live.<\/p>\n

Twitter declined to how many users or what percentage of the Vine user base was impacted.<\/p>\n

We understand that this issue would not<\/em> have affected Twitter users who didn\u2019t also have Vine accounts, though.<\/p>\n

\"\"<\/p>\n

Once a fairly popular social app, Vine was effectively shut down<\/a> at the beginning of the year, but the company continues to maintain an online archive of Vine videos<\/a> and a basic utility for those users who want to still make short, looping video clips.<\/p>\n

However,\u00a0the fact that these resources remain online even when Vine is no longer a priority for the company means there\u2019s still potential for things like this security incident to occur. Despite Twitter\u2019s\u00a0obvious interest in keeping the archive available for the Vine users and fandom, it may have been better for Twitter to have fully shuttered the site so engineering resources wouldn\u2019t have to be diverted to its ongoing maintenance.<\/p>\n

Twitter says users do not need to reset passwords on their Vine accounts, but should be aware that\u00a0any official communications from Vine will come from an @twitter.com email address. Twitter\u00a0will also never ask you via email to open an attachment or request your password, it says.<\/p>\n","protected":false},"excerpt":{"rendered":"

\"\" Twitter is alerting Vine users of a bug that exposed their email addresses and, in some cases,\u00a0phone numbers to third parties. It’s also advising affected users\u00a0to be cautious about any emails from unknown senders as a result. The company says the bug was only active for 24 hours before being patched, and doesn’t believe that the data was misused in any way, at this time. To… Read More<\/a><\/p>\n

\n<\/img><\/a> <\/img><\/a> <\/img><\/a> <\/img><\/a> <\/img><\/a> <\/img><\/a>\n<\/div>\n

\"\"\/ <\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-341451","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/341451","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=341451"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/341451\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=341451"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=341451"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=341451"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}