Twitter internal panel linked to account hijackings

Post by richardwhiuk » Thu, Jul 16, 2020, 9:18 AM UTC

toyg wrote: post #275

paranoidrobot wrote: post #256

Earlier quoted context omitted.

I'm no lawyer either, but I imagine that the definition of authorisation is key here. If you're a sysadmin on a company email system, then you do technically have access to everyone's data on that system. However, you're generally limited by company policy that you are not permitted to access/modify that data without direct authorisation, say from the employee themselves or from HR. So, therefore, if you go and read…

But that's gross misconduct or some other fireable offense - a civil matter at best. The only item I can see here is fraud (impersonating the people whose accounts have been taken over), of which the mole would be complicit.

Post by bemmu » Thu, Jul 16, 2020, 9:24 AM UTC

slg wrote: post #95

minimaxir wrote: post #68

The Vice article ( https://news.ycombinator.com/item?id=23853786 ) was recently updated with a note that the Twitter insider was paid to help take over the accounts, which raises further questions on the nature of "social engineering": > we spoke to two hackers and we were able to independently verify they were in control of hijacked accounts today. One of them said they paid the Twitter employee to help them take ov…

This makes things sound even fishier. I think there has to be something else going on we don't yet know about. The amount of money this scam will actually earn the hacker is tiny compared to the potential of this hack and yet they still have enough money left over to bribe a presumably highly paid Twitter employee? Or maybe the Twitter employee is a low paid person which leads back to a question I raised elsewhere in…

Post by [deleted] » Thu, Jul 16, 2020, 9:27 AM UTC

dang wrote: post #231

dilandau wrote: post #54

Didn't Twitter say that they don't shadow-ban? [1] From a leaked screenshot of the panel, though, it appears they have a search/trend blacklist. 1: https://www.washingtonexaminer.com/business/jack-dorseys-per... EDIT: thanks for the downvotes, twitter.

> EDIT: thanks for the downvotes It's against the site guidelines to do that, so please resist. https://news.ycombinator.com/newsguidelines.html

Post by alwayseasy » Thu, Jul 16, 2020, 9:30 AM UTC

bemmu wrote: post #323

slg wrote: post #95

Earlier quoted context omitted.

This makes things sound even fishier. I think there has to be something else going on we don't yet know about. The amount of money this scam will actually earn the hacker is tiny compared to the potential of this hack and yet they still have enough money left over to bribe a presumably highly paid Twitter employee? Or maybe the Twitter employee is a low paid person which leads back to a question I raised elsewhere in…

> The amount of money this scam will actually earn the hacker is tiny compared to the potential of this hack If the attackers had a big short position in TWTR, they may have made a lot more money than they received from BTC.

Post by therein » Thu, Jul 16, 2020, 9:37 AM UTC

alwayseasy wrote: post #327

bemmu wrote: post #323

Earlier quoted context omitted.

> The amount of money this scam will actually earn the hacker is tiny compared to the potential of this hack If the attackers had a big short position in TWTR, they may have made a lot more money than they received from BTC.

Shorts get caught. Easier to have Elon Musk tweet "I'll buy Hertz at $69 a share to make all their cars autonomous".