138 comments

[ 4.0 ms ] story [ 215 ms ] thread
Whatever it was, got removed or keeled over...
i thought tumblr removed the post, but it seems like it is working now.
Wow, this works. SnoopDogg is now following me: http://twitter.com/snoopdogg. I'm the cartoon figure.
Bad plan to try this out with an account you value - if they can identify who has used the exploit they will probably ban you when the dust settles.
Is it an exploit or is it a valid command? I don't think we hacked anything, we just typed in some text that causes people to follow us, for all we know that's a new feature of twitter.
Unfortunately, they can probably do whatever they want with this, whether people think it's fair or not.
No matter what twitter planned for it, it's an exploit. Users think that only they can control who follows them, but this feature gets around that.
Sounds like a backdoor that someone forgot, or was too lazy to remove.
I highly doubt that. From what I'm reading on the Intarwebs, a LOT of people just couldn't resist playing with this exploit. If they truly banned everyone who did a force-follow with this hack I think they would lose a ton of people who are frankly only getting marginal value from Twitter.

I know that if I actually had to rebuild my followee list for "testing" this little hack out I would probably decide it wasn't worth the effort to start over again on Twitter.

Yes, this does work. Now what's the opposite verb to make someone unfollow me?
If you tweet “accept [Twitter Username]”, the other user will automaticly follow you.

eg. "accept snoopdog"

(comment deleted)
the user who found this says he was trying to tweet "accept pwnz" where accept is a music group name.
Yeah! BALLS TO THE WALL!

This is such an odd bug. I guess it goes to show that nobody knows what strange code which should have been removed four years ago lurks in the heart of Twitter.

(comment deleted)
That's an utterly insane bug! Some kind of debug accidentally left in? Or an admin phrase not authorised properly?
Laziness and security by obscurity.
I wonder if they are going to be able to undo this. Do they have a two sided log of the follow process? If it's just one-sided, they may be able to fix the bug but not to reverse the damage.
I suspect the Summize technology is better than they let on, and they can just do a search for tweets starting with "accept." I doubt there are many legit ones like that.
Wondering if there will be repercussions for people using this, or if they are able to track it? They aren't able to keep a lot of logs due to the volume.
They are at least able to tell if you've used it--my account just lost all its followers. http://twitter.com/sjwalter

I'd had a legitimate 30ish followers, used this bug a few times, now 0.

I think everyone is at 0. I didn't use the bug and I'm at 0/0
confirmed, everyone is at 0
well, i can tell you right now that my followed and following lists were both just now wiped out, and using the accept bug now produces an internal server error.

edit: seems everyone is at 0/0, but the bug still produces an error for me.

> They aren't able to keep a lot of logs due to the volume.

That's pretty much untrue.

Anyway, I don't imagine it's too hard to grep the logs for the last day's worth of POST and 'accept .*' and undo all the follows constructed from that.

Wow, tested and verified.

Somebody is working late tonight.

Okay, all followers of everyone just dropped to 0...
And the command now gives "internal server error"
Interesting. My "following" and "followers" counts just dropped to 0.
(comment deleted)
Heh, I used this a bunch of times. It did work just fine, I had all sorts of people following me who really shouldn't care about me. And now I have 0 followers.
Is it broken now? Both followers and follow count is 0 now?!
amazing. They found out, it seems: right now everyone seems to have 0 following and 0 followers.
Thank god. Its everyone.
I had the exact same feeling of panic, then relief to find out I'm not alone.
Were you drawing outside the lines again?

(horrible ayn rand joke)

I'm really looking forward to seeing how they handle this.
Probably just rollback to a previous snapshot?
Twitter damage control: TRUNCATE followers;
It appears that they just wiped everyone's list of followers? My feed still works though.
Now I am getting a 502 when I try to post accept messages.
They appear to be working on some sort of fix right now.

If you look at "following" lists, everything is showing up as zero for me right now, as in it shows that I'm not following anyone. All other users that I check are also showing that they aren't following anyone.

This is up there with putting everybody in a root terminal by default on their Androids.