Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Who’s behind Wednesday’s epic Twitter hack?

krebsonsecurity.com

Post reply on HN
Print view View original

51–60 of 536 posts

Re: Who’s behind Wednesday’s epic Twitter hack?

#51

Post by aahhahahaaa »

TechBro8615 wrote: post #23

This is the most important point: > Also, it seems clear that this Twitter hack could have let the attackers view the direct messages of anyone on Twitter, information that is difficult to put a price on but which nevertheless would be of great interest to a variety of parties, from nation states to corporate spies and blackmailers. My understanding is the hackers used the admin panel to change the email addresses of…

If you're already logged in to a Twitter account you can deactivate 2FA by disabling the account (aka deleting with a 30 day window) and then re-enabling the account.

Re: Who’s behind Wednesday’s epic Twitter hack?

#52

Post by thinkloop »

danso wrote: post #37

> “This is NOT a method, you will be given a full refund if for any reason you aren’t given the email/@, however if it is revered/suspended I will not be held accountable,” Chaewon wrote in their sales thread, which was titled “Pulling email for any Twitter/Taking Requests.” If access were being sold via message board, I wonder if the thread contains stipulations on which accounts are off-limits for being hacked. My…

Obama and Biden are part of it

Re: Who’s behind Wednesday’s epic Twitter hack?

#53

Post by d1str0 »

paulpauper wrote: post #30
crtasm wrote: post #20

Earlier quoted context omitted.

And you don't even need to steal an account. When the Playstation 5 launch event was happening I searched for it on Youtube, clicked the top result and it turned out to be a scammer restreaming the real live event with graphics added saying Sony would double your BTC - just send to this address ___.

that may have been an ad. scammers are buying youtube ads too

Ive seen what this previous poster has talked about. They overlay graphics in the actual video stream promoting btc payments. Happened with a Nasa stream right after the first spacex manned mission.

Re: Who’s behind Wednesday’s epic Twitter hack?

#54

Post by christoph »

I don’t really think he should be naming who his unnamed sources “think” is behind an attack on this scale, especially with full name, city of origin, Instagram, suggested current location, age, etc. It feels a very, very small step away from doxxing to me.

Added to which he has somebody in the comments essentially calling for the death penalty over this. If he has this personal information and evidence, pass it to the relevant authorities and don’t sensationalise it on a blog. Technical details fine, but people’s personal information feels like it’s crossing a line on something like this.

Re: Who’s behind Wednesday’s epic Twitter hack?

#55

Post by madeofpalk »

Dahoon wrote: post #45

Krebs should get someone half as good at html and CSS as he is in security to update his awful site. Doesnt even work in Firefox reader.

Maybe Firefox should get someone half as good as Chrome developers, because the reader mode works on his site fine there.

Re: Who’s behind Wednesday’s epic Twitter hack?

#56

Post by paulpauper »

danso wrote: post #37

> “This is NOT a method, you will be given a full refund if for any reason you aren’t given the email/@, however if it is revered/suspended I will not be held accountable,” Chaewon wrote in their sales thread, which was titled “Pulling email for any Twitter/Taking Requests.” If access were being sold via message board, I wonder if the thread contains stipulations on which accounts are off-limits for being hacked. My…

it is possible trump account had a special measure in place to override the email reset to make it hack-proof.

Re: Who’s behind Wednesday’s epic Twitter hack?

#57

Post by [deleted] »

liquidise wrote: post #31
strikelaserclaw wrote: post #11

man who falls for this stuff. i've been seeing "send me money to this account to get double that" scam for like 20 years, its hard to believe there are people who still don't know better.

Consider this: i'd argue that the fundamental feature of twitter isn't tweets. It is the underlying certainty that the tweeted content belongs to the person with the blue checkmark. My friends in social media positions heard about the twitter hack from me, not the other way around. Given how this info disseminated, combined with the breaking of twitters fundamental feature, i'm surprised more people didn't fall for t…

[deleted]

Re: Who’s behind Wednesday’s epic Twitter hack?

#58

Post by paxys »

It's bizarre to me that someone pulled off an account takeover of this magnitude and the end result was random people being scammed out of ~$100K in Bitcoin (that too allegedly). A single well-crafted Tweet from one of these accounts is probably worth more. Heck Twitter would have paid that much or more just in bug bounties for reporting this.

Re: Who’s behind Wednesday’s epic Twitter hack?

#60

Post by easterncalculus »

TechBro8615 wrote: post #23

This is the most important point: > Also, it seems clear that this Twitter hack could have let the attackers view the direct messages of anyone on Twitter, information that is difficult to put a price on but which nevertheless would be of great interest to a variety of parties, from nation states to corporate spies and blackmailers. My understanding is the hackers used the admin panel to change the email addresses of…

> Ironically, Twitter's solution of disabling posts from blue checkmarks would not have stopped exfiltration of direct messages while an account was compromised.

Sure helps keep down on the public effect though... feels mostly like a PR move.

Post reply on HN