Twitter: no-follow on all links, security problem untouched
Last week Twitter closed a 'loophole' for SEOs to get free no-follow links to their website. Twitter added rel=nofollow to links produced by their API. That meant links in lines like "1 minute ago from TweetDeck" were no longer followed to the application, in this case Tweetdeck.
Dave showed us he could have easily gained access to any Twitter-users login cookie and therefore making hacking really easy. Dave gave us an example using a especcially set up account which got suspended the same day. You can see the example in this video Dave made:
The opening Dave exposed is something we shouldn't underestimate. The taking over of accounts can be used for all sorts of malicious things. It is for example not unexpected if many use the same password for their Twitter account as for their GMail, hotmail or any other service.
Dave pointed at some ways to prevent you from getting your account being hacked:
Chances are that if you use a third party Twitter client you'll be allright, but be sure to use any of the popular ones. Using the Twitter website could be dangerous however. Be sure to read both Dave's posts on this on his blog to get the full story and how to.
This move is a blow for linkbuilders who can no longer rely directly on Twitter, but even more important: Twitter seems to be closing the walls around them. It looks a lot like how Wikipedia works: internal links do matter, external links won't. How will SEO's handle this one? Dave, any suggestions? ;)
Tagcloudseo smx russia news ppc internet research blog microsoft search engine strategies google tools a4uexpo google wave google maps maps sem video privacy matt cutts youtube event baidu searchcowboys search engines indonesia twitter sea business browser iphone google interview europe yandex social advertising blogger adwords mobile google earth