7 comments

[ 3.2 ms ] story [ 29.2 ms ] thread
They refute themselves here. They say there isn't a massive botnet, but dismiss it by saying spam isn't unique and most of the accounts are deleted now. So, yes, it was a massive botnet. Sure, it's not uncommon and Twitter deals with them regularly, but that doesn't mean it was not hit by a massive botnet, it was.
You and I have much different interpretations of "massive"
Well, they also assert that the supposed number of accounts (35,000~) doesn't qualify as "massive".
It's not massive to Twitter's spam team but it seems reasonably massive by most standards. I just think it's a bit daft of TNW to dismiss the original author this way.
If Twitter just had 35,000 spam bots in all of Twitter, they'd sign up for that in a heartbeat.
The crux of the story should be XML-RPC and it's delirious security model, not some half-assed contemporary messaging service company.