Live data from Hacker News

Who’s behind Wednesday’s epic Twitter hack?

krebsonsecurity.com

91–100 of 536 posts

Re: Who’s behind Wednesday’s epic Twitter hack?

#91
post #37

> “This is NOT a method, you will be given a full refund if for any reason you aren’t given the email/@, however if it is revered/suspended I will not be held accountable,” Chaewon wrote in their sales thread, which was titled “Pulling email for any Twitter/Taking Requests.” If access were being sold via message board, I wonder if the thread contains stipulations on which accounts are off-limits for being hacked. My…

it is possible trump account had a special measure in place to override the email reset to make it hack-proof.

After a Twitter employee suspended Trump's account on their last day of work in 2017, I expect access to his account to do anything at all is much more highly restricted within Twitter's internal tools.

Re: Who’s behind Wednesday’s epic Twitter hack?

#92

I think people are still severely under-estimating how dangerous this was. Back in 2013 when The Associated Press was hacked with a tweet of "Breaking: Two Explosions in the White House and Barack Obama is injured" and erased $136 billion in equity market value: Archive: http://archive.is/8lCMV https://www.washingtonpost.com/news/worldviews/wp/2013/04/23... This twitter hack could have literally destroyed economies,…

It didn't "erase" anything. A few day traders gave money to a few other day traders.

Re: Who’s behind Wednesday’s epic Twitter hack?

#93
post #84

Earlier quoted context omitted.

see this, from earlier: https://news.ycombinator.com/item?id=23860584 "No, you couldn't have made more money than the Twitter hacker" https://fortenf.org/e/security/2020/07/15/twitter-hack.html

I don't buy the stock market argument. People open short positions worth more than $100K every day, especially against companies like Tesla. There would be nothing suspicious about a few such trades. But really, my point is that pulling off a sophisticated exploit involving major celebrities, politicians and CEOs, social engineering/bribery, internal access at a top company etc. doesn't really seem worth the risk if…

There would be afterwards though, so the question would be could the money from the trades settle and be exfiltrated to a private non-traceable account before the SEC thought something was amiss and started looking at impacted stocks and suspicious associated trades by timing.

Re: Who’s behind Wednesday’s epic Twitter hack?

#94

I think people are still severely under-estimating how dangerous this was. Back in 2013 when The Associated Press was hacked with a tweet of "Breaking: Two Explosions in the White House and Barack Obama is injured" and erased $136 billion in equity market value: Archive: http://archive.is/8lCMV https://www.washingtonpost.com/news/worldviews/wp/2013/04/23... This twitter hack could have literally destroyed economies,…

It's almost as if web services that let people post whatever they want at any time, vulnerable to whatever security flaws may be present, shouldn't be used as a reliable source for up-to-the-minute information about literally anything important at all.

This.

We've entered a world where the lowest common denominator of information is being used as primary source for current events. That's asinine.

Re: Who’s behind Wednesday’s epic Twitter hack?

#95

man who falls for this stuff. i've been seeing "send me money to this account to get double that" scam for like 20 years, its hard to believe there are people who still don't know better.

I too don't understand who's technical enough to know what BitCoin is but not technical enough to understand the scam. I think some people are possibly just sending the scammers some money for the banter? A sign of respect for the hack.

Wishful thinking is a powerful drug. The same technique is used on dating apps, where a beautiful "girl", explicitly seeking sex, sends you a link to some paid service, to "verify" your account or some nonsense.

Re: Who’s behind Wednesday’s epic Twitter hack?

#96

I think people are still severely under-estimating how dangerous this was. Back in 2013 when The Associated Press was hacked with a tweet of "Breaking: Two Explosions in the White House and Barack Obama is injured" and erased $136 billion in equity market value: Archive: http://archive.is/8lCMV https://www.washingtonpost.com/news/worldviews/wp/2013/04/23... This twitter hack could have literally destroyed economies,…

I wonder if the hacked could have made more if they instead used Musk's Twitter account for something like that while shorting Tesla.

Re: Who’s behind Wednesday’s epic Twitter hack?

#97
post #5

Earlier quoted context omitted.

You'd have to be a special kind of stupid to "un-wash" your own bitcoins this way.

Possibly. The only reason this would be stupid is because Bitcoin has rapidly been centralizing. I suspect many exchanges might start blacklisting any wallet that has any transactions from this wallet. On the other hand, they can’t really do that. At that point the attackers would be able to poison any wallet just by sending a small amount of BTC to it. Therefore it seems like the only penalty is that they’d have to…

> the attackers would be able to poison any wallet just by sending a small amount of BTC to it

I'd be surprised if there was any followup blocking on this wallet. It might just be set as super high-taint wallet.

Re: Who’s behind Wednesday’s epic Twitter hack?

#98
post #87
post #61

Earlier quoted context omitted.

Many startups and hip companies don't do VPNs anymore - unfortunately they also dont do Zero Trust (which would require machine certs for everything and be enforced) - so stuff is often available over Internet with password auth + maybe MFA. Attacker who gets hold of cookie or bearer token wins. And the best part, support personnel often doesnt have MFA, because its outsourced to countries where smart phones with Aut…

I don't see any issue with auth without VPN if TLS is terminated by owner

[deleted]

Re: Who’s behind Wednesday’s epic Twitter hack?

#99

I don’t really think he should be naming who his unnamed sources “think” is behind an attack on this scale, especially with full name, city of origin, Instagram, suggested current location, age, etc. It feels a very, very small step away from doxxing to me. Added to which he has somebody in the comments essentially calling for the death penalty over this. If he has this personal information and evidence, pass it to t…

> It feels a very, very small step away from doxxing to me. What small step is that? Looks like a textbook case of doxxing to me.

> Researching and publicly broadcasting private or identifying information (especially personally identifying information) about an individual or organization.

Yeah this is definitionally doxxing

Re: Who’s behind Wednesday’s epic Twitter hack?

#100
post #20

The among taken in this scam is chump change compared to the YouTube scammers. YouTube is a vastly bigger website than twitter and way slower to respond to accounts begin stolen by scammers. I remember seeing an Ripple giveaway scam that in a single day made 100k with just a single account ,. And fake bill gates one made 40k. the list goes on and on. My guess is the total taken is in the $3-5 million range from youtu…

And you don't even need to steal an account. When the Playstation 5 launch event was happening I searched for it on Youtube, clicked the top result and it turned out to be a scammer restreaming the real live event with graphics added saying Sony would double your BTC - just send to this address ___.

Those are irrelevant victimless activities. The point of Bitcoin is Eve Online with real money. The only rules are what the protocol says.
Post reply on HN