Hello All, Is there anyone have an experience to hijack a twitter account?
well, the story is really weird. There is a celebrity's account hijacked (password stolen, etc), and then he created a new account, the told the world that he could do something in his old account, e.g. sending a new tweet as usual. This case is the same with: Bob can tweet in Alice's timeline. Can Bob do that? This is almost being very stupid question, and the answer is: IMPOSSIBLE, or possible with an 'if' ...? To make long story short, I am developing a twitter client in C, and I am implementing oauth with liboauth and I feel I do not deeply understood of oauth in the case above (hijack vulnerability). Thanks for your comment, Best regards, DWI