[deleted]
Who’s behind Wednesday’s epic Twitter hack?
441–450 of 536 posts
Re: Who’s behind Wednesday’s epic Twitter hack?
#442I'm sure it's been said before, but I just continue to be surprised that the admin panel used to carry out this attack wasn't locked behind a VPN. I've worked for multiple fully-remote companies that were easily able to protect tools like this from the outside world. The company I currently work for (fully remote) has tons of internal services that our engineers (who we trust) can access as needed in order to debug p…
Internal networks only accessible via VPN is considered an anti-pattern now in terms of security. It puts authorization firmly on the VPN. If the account with VPN access is compromised, then the attacker has full access to these sensitive systems. This hack probably underscores the importance of zero trust. Although if the system is compromised from within (like this hack is) then there is not much you can do.
> Internal networks only accessible via VPN is considered an anti-pattern now in terms of security. It puts authorization firmly on the VPN.
How do you jump from "VPN is not authorization" to "VPN is an anti-patern"? It's at a completely different layer than authorization ffs! You don't give up on seat-belts because they don't stop bullets coming through the windshield.
Re: Who’s behind Wednesday’s epic Twitter hack?
#443Earlier quoted context omitted.
Donald Trump?
He is one of the more peaceful presidents. This is ridiculous, there is ample room for criticism against Trump. This wouldn't fit at all. I guess you can blame him on Turkeys reaction in Syria, his staunch anti-Iranian policies that made talks more difficult. But the criticism of him starting random wars comes from an emotional corner beyond reality in my opinion.
It's ironic that our kids in the future reading wikipedia there will be a table of numbers killed overseas by US presidents. Trump will be listed as one of the most peaceful in that table.
It's ironic because his image today is of violence and instability and that the opponents of him don't consider violence overseas or international peace as that important.
It's things happening at home which counts politically in a present time.
Trump will kill less than Obama but Obama gets the noble peace prize.
Re: Who’s behind Wednesday’s epic Twitter hack?
#444Social media was praised so much for its contribution to conflicts outside western world, like middle east and North Africa. In the beginning of Syrian civil war for example; Twitter was the place where propaganda was streamed and extremists from all over the world would leave homes to join other extremists behading heads somewhere. Now, we see the potential of social media to be a tool for coordinated attacks agains…
I found it very interesting how Facebook et al got so much flak right after the 2016 U.S. presidential election. It was as if the DoD finally realized their little weapon could be turned against them and took action to reassert dominance.
Re: Who’s behind Wednesday’s epic Twitter hack?
#445The hack was epic and strange. But also epic and strange is how Twitter stock value hasn't taken a prolonged hit. Is there really so much trust on Twitter that this was an isolated incident?
Re: Who’s behind Wednesday’s epic Twitter hack?
#446Social media was praised so much for its contribution to conflicts outside western world, like middle east and North Africa. In the beginning of Syrian civil war for example; Twitter was the place where propaganda was streamed and extremists from all over the world would leave homes to join other extremists behading heads somewhere. Now, we see the potential of social media to be a tool for coordinated attacks agains…
The less conspiratorial take on this is that social media simply exacerbates and foments conflict, period. Maybe some of these involved significant coordinated propaganda efforts, but I doubt they all did. The mistake the western world made was thinking that this social media generated conflict was a result of some coherent "positive" motivation, when perhaps it was simply blind social media outrage that coincided with revolutions in places we thought were bad somehow.
It exacerbated it first in the middle east, maybe because those societies were close to conflict to start with, but the western world doesn't seem that far behind.
Re: Who’s behind Wednesday’s epic Twitter hack?
#447[deleted]
Re: Who’s behind Wednesday’s epic Twitter hack?
#448Earlier quoted context omitted.
Oh please. The rest of the world doesn’t take Twitter as seriously as Americans do. And truth be told, Americans shouldn’t take it seriously either. The platform derives power from the audience. Stop giving it your power.
Financial markets do. Where acting faster than your competition is essential you don't have a lot of choice. As for the blackmail and war starting you probably couldn't do much with public tweets (nobody is going to go to war over a tweet without fact checking it) but access to private messages is an entirely different story.
The https://en.wikipedia.org/wiki/Ems_Dispatch started the Franco-Prussian war.
Bismarck released his carefully worded readout in the evening of Thursday, 14 July 1870. Assuming the french were "making the bridge" for Bastille Day, they would have had one working day (Monday, 18 July 1870) to fact check, but I don't know if they took even that, because according to https://en.wikipedia.org/wiki/Causes_of_the_Franco-Prussian_... , on 19 July 1870 "Le Sourd, the French Chargé d'Affaires, delivered Napoleon [III]'s declaration of war at the Foreign Office" in Berlin.
https://scholar.dominican.edu/cgi/viewcontent.cgi?article=11... suggests the french were already mobilising on 14 July itself, and that while telegraph use may technically have been possible, US diplomats were still communicating by snail mail with State.
That emotion won over fact checking is supported by Ch. I p.3
> Washburne dismissed the accuracy of the Ems telegram because it had been challenged by King Wilhelm. "There is no truth in the reports concerning the indignity which the King of the North German Confederation offered to Benedetti, the Envoy of France." Washburne based this statement on a published denial by the King which he had read in Cologne while returning to Paris. Though he questioned the veracity of the Ems telegram, Washburne still credited it with arousing the French Chamber of Deputies to vote for war.
(the war vote was Friday, 15 July. It might be interesting to see if any french papers had carried Wilhelm's version of events.)
Re: Who’s behind Wednesday’s epic Twitter hack?
#449Earlier quoted context omitted.
People keep saying it could have started a war. Excuse me for being naive but come on—really? This is total sensationalism. What party wouldn’t verify something on twitter through diplomatic channels before going to war? Equity destruction: sure. War: no way.
Exactly! Nothing major could have come out of this. If you disagree, please let me try to convince you; Tweets were about bitcoin, therefore broad public was not the target of the attack. Hence Twitter just prevented verified accounts from posting and deleted some messages. Had president's account been hijacked and threats of imminent nuclear strike etc. were thrown around, DoD would have been quick to contact to Twi…
> and they would have been disabled the whole account, put notifications about hijack for everyone to see (like these COVID notifications) or maybe even take the whole platform offline until they fix it.
This hack had been going on for over two hours, with new high-stakes accounts being steadily taken over (and possibly have their DMs siphoned) and their only action was to disable posting for verified accounts. I think we can safely say that IF Twitter had the possibility to effectively pull the plug, we would've seen that on Wednesday.
Re: Who’s behind Wednesday’s epic Twitter hack?
#450Earlier quoted context omitted.
Yep or else none of this could happen. I work at a company that we need at least two methods to authenticate you to remove MFA through the admin console so this wouldn’t have happened.
Is this a part of your company’s product or internal tooling, or is this 2FA part of a software you use? If it’s the latter, please give a recommendation if it’s good!
It’s internal tooling sadly!