Twitter teen hacker hired by Web app developer

Be the first to comment | 9I like it!
April 19, 2009, 07:28 PM —  Computerworld — 

An Oregon-based Web application developer Friday confirmed he has hired the teenager who admitted attacking Twitter with several different worms last weekend.

Travis Rowland, of Hammond Ore. said that he had offered a job to Michael "Mikeyy" Mooney, a 17-year-old who said last week he had written at least two of the worms that struck Twitter starting on April 11.

In a telephone interview on Friday, Rowland, the CEO of exqSoft Solutions, described his company as doing "custom Web application development, primarily geared toward businesses."

Mooney came to his attention because of the Twitter worms, Rowland acknowledged. "I contacted him and saw his Web site, and thought it was interesting," said Rowland. "Then I talked to him and found out he did it all by hand, so I asked him if he wanted to work as a programmer."

Rowland said that Mooney would also be involved doing "security analysis for us, to make sure our applications are as secure as they can be."

The attacks against Twitter began early last Saturday and continued in several waves through parts of Monday. Mooney, who goes by the nickname "Mikeyy," assumed responsibility for the first two worms, dubbed "StalkDaily" and "Mikeyy" in a message posted to his Web site and in later interviews.

StalkDaily and Mikeyy exploited one or more cross-site scripting or cross-site request forgery vulnerabilities in Twitter to infect user profiles. The first attack relied on tweets that referred to several malicious accounts allegedly created by Mooney; when users viewed those accounts' profiles, their own profiles became infected, and their accounts then sent more spam-style messages to entice friends to the just-infected profiles.

Twitter co-founder Biz Stone said Monday that Twitter had had to scrub about 200 infected accounts and delete 10,000 tweets carrying links to JavaScript attack code.

Rowland denied that hiring Mooney was a publicity stunt, but admitted the buzz was a nice benefit. "Any publicity is good publicity, he said. "I can't argue with that, but it's just a perk. If I can get [Mooney] on the right track, it works out for everybody." Mooney, who reportedly lives in Brooklyn, N.Y., is currently work for exqSoft. "He's already started, he's working from his computer, more as an apprentice," said Rowland. "I outsource to developers all around the world."

Rowland said that he has about 20 people on the payroll.

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

I like it!
Close

On Twitter now

twitter

Powered by Twitter
You are logged in | Sign out
Sign in and post to Twitter

What are you thinking?

Cancel Tweet sent

On Twitter now

Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
peer-to-peer

Brian Proffitt
Microsoft/Novell: Breaking Down the Coupon Numbers

Esther Schindler
Drupal's Dries Buytaert on Building the Next Drupal

Tom Henderson
Top Ten General Operating Systems Rants

pasmith
PS3 motion controller delayed; goes up against Project Natal

sjvn
Neolithic Windows security hole alive and well in Windows 7

claird
Perl source code comparison makes for good reading

mikelgan
Cell phones don't create stress or interrupt much

Sandra Henry-Stocker
How to: The Unix Interview

 

Where Google Chrome security fails: the password
I heard mention that the Chrome OS will have some sort of encryption available a la bitlocker. If it's possible to encrypt personal data using another password or key, then it may have potential for very secure data.... And Ubuntu has an 'encrypt home directory' option, perhaps google should follow suit.
- Dann

Join the conversation here

The Daily Tip

The Daily TipQuick, practical advice for IT pros. Made fresh daily.

Hot tips:

Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.

Newsletters

Subscribe to ITWORLD TODAY and receive the latest IT news and analysis.

I would like to receive offers via email from ITworld partners.
By clicking submit you agree to the terms and conditions outlined in ITworld's privacy policy.
Marketplace