Celebrities and Politicians are popular targets for online hacking and smear campaigns, but sometimes the “hack” involves less code-cracking and more forgetting basic online safety precautions. The unfolding story of WeinerGate is a key example of this.
Anthony Weiner, outspoken Democratic Representative from New York, has embraced Twitter in the same unique and colorful way he conducts himself on the house floor. Becoming the unofficial King of Hashtags, Weiner has used the format to connect with his followers in his own style: namely witty and barbed. Here are some prime examples:

Over the course of the weekend, however, a strange tweet showed up in Weiner’s timeline containing only an @tagged username and a link to a picture on yfrog. The picture was a shot of a man’s covered family jewels with little identifying markers to anything else and was seemingly from Rep. Weiner’s yfrog account. A conservative Twitter user (who had teased weeks ago that a major Democrat would be having a sex scandal soon) was the only person who seemed to catch and retweet it before it was deleted from Twitter, and eventually yfrog. Bloggers and the media descended upon the user mentioned in the tweet and a tale of cross-country illicit Direct Messages was spun.
Without getting into the conspiracy theories on either side (feel free to look them up if you want), it’s actually pretty evident that getting that picture onto his account would have been fairly easy for someone who had the motivation and means. The Cannonfire blog details the yfrog security hole that allows this to happen: If someone has your yfrog upload email address, they can post anything to your account and directly to your twitter stream, without any hacking or password cracking. I tested it myself (with a picture of my puppy, nothing nefarious) and was even able to tag another user (blacked out for their privacy):

Weiner’s yfrog email could have been compromised by forwarding a picture from his email account to someone else, leaving the code following the username visible. Heck… it could even have been guessed by someone with too much time on their hands.
A routine security bug isn’t a big enough story for most of the media, however, leading papers like the New York Times to instead focus on the fact that smart, attractive women tended to follow and be followed by Rep. Weiner (a much juicier story that you’ll have to search out because I won’t link to it). But readers here should take the real lesson from this: with so many social media services offering an “email to post” type feature, you must remain vigilant about not sharing that email address with others. It’s as good as a password, and a wayward click could allow anyone a backdoor into your accounts.
Update 6/7/11: Rep. Weiner admitted in a press con fence yesterday to accidentally tweeting the picture, which he intended to be a direct message, then panicking and lying about claiming to be hacked. Nonetheless, yfrog looked into their post to email function and advised users to keep that address as safe as a PIN.
Originally posted at Visual Alliance Media: http://tampabaysocialmedia.com/weiner-gate-hack-found