gwibber-bugs team mailing list archive

[Jamie Strandboge <jamie@xxxxxxxxxx>]

** This bug is no longer flagged as a security vulnerability

-- 
You received this bug notification because you are a member of Gwibber
Bug Heros, which is subscribed to Gwibber.
https://bugs.launchpad.net/bugs/495524

Title:
  Retweeting does not honour send permissions.

Status in Gwibber:
  Confirmed
Status in “gwibber” package in Ubuntu:
  Triaged

Bug description:
  I've set up an "official" account and a "personal" account on Twitter. Gwibber is set up to follow both, but only to post to the personal account. However, the following retweet was sent from my official account, contrary to the permissions setup (i.e. permission to send to physihacker is not allowed):
  http://twitter.com/physihacker/status/6569717668

  It's either because both accounts are subscribed to the NAPress, or
  only physihacker. Both cases should be checked.

  In addition, the purpose of the retweet is to notify my friends who
  might be interested and who're following my personal accounts on
  identi.ca, twitter, and facebook, so even limiting the posting to my
  very-limited offiical account wasn't what was intended.

  Marking security, because this is likely to leak information at some
  point due to this surprising behavior (although the information is
  technically public).