Who’s behind Wednesday’s epic Twitter hack?

Post by skinkestek » Fri, Jul 17, 2020, 6:25 PM UTC

bosswipe wrote: post #381

mansion7 wrote: post #141

Earlier quoted context omitted.

That's partially because the sources formally seen as primary, at least in the US, have started to be viewed as biased and unreliable. This is largely through their own actions. Examples are legion, but a recent one is debacle at NYT over an op-ed. The news-consuming public was able to view the shenanigans of NYT reporters and staffers, which would formerly been done being the scenes. Many eyes were opened, and I'm c…

> This is largely through their own actions. Or it could be the result of a decades long effort to attack credible authoritative institutions by forces that take a dim view of transparency and accountability.

Post by stopshills » Fri, Jul 17, 2020, 8:32 PM UTC

VectorLock wrote: post #512

stopshills wrote: post #510

Earlier quoted context omitted.

Yes. I know Lucky and I knew Adrian. If Adrian wanted Lucky to assume control of his accounts I’ll eat a hat.

I knew Adrian but I didn't know Lucky. Adrian was always good at compartmentalizing his relationships. Why don't you think he'd want Lucky to have them?

Post by VectorLock » Fri, Jul 17, 2020, 9:00 PM UTC

stopshills wrote: post #513

VectorLock wrote: post #512

Earlier quoted context omitted.

I knew Adrian but I didn't know Lucky. Adrian was always good at compartmentalizing his relationships. Why don't you think he'd want Lucky to have them?

To be clear, they definitely knew each other, I just don’t believe Adrian wanted Lucky to be custodian of his accounts. Lucky would criticize Adrian behind his back all the time, and Adrian knew about it. They were rivals at best, and frenemies who barely tolerated each other in public at worst. Lucky’s the kind of guy who’ll toss someone right under the bus as soon as they’re no longer useful to him, but feign frien…

Post by totony » Fri, Jul 17, 2020, 9:52 PM UTC

trabant00 wrote: post #438

judge2020 wrote: post #313

Earlier quoted context omitted.

The issue is that, for any company without thousands of employees (heck, probably even some of these are guilty), the VPN is often the only barrier to the entire network. The BeyondCorp model makes you explicitly specify "John can access support.corp.com but not admin.corp.com", while setting up these explicit checks is the exception for VPN-based access, not the norm (and sometimes it isn't even done right - eg. rel…

> The issue is that, for any company without thousands of employees (heck, probably even some of these are guilty), the VPN is often the only barrier to the entire network. Sorry, but what? I've worked in multiple small companies where the we where less than 5 system administrators and inside the vpn we had encrypted traffic and ldap auth on everything. It's a few days job for a single person to set everything up thi…

Post by three_seagrass » Sat, Jul 18, 2020, 12:42 AM UTC

Nextgrid wrote: post #294

three_seagrass wrote: post #203

Earlier quoted context omitted.

The traffic burst would be huge for the Tesla tweet. That type of scam introduces more complexity, such as requiring hosting for millions of visitors in an hour, which can leave a traceable trail.

Hosting for millions of visitors/hour isn't that hard. Maybe the cloud companies want to make you think otherwise, but a handful of bare metal servers around the world should be enough to handle that kind of load unless you're streaming video or running a really heavy web framework. Those can easily be obtained for free if you're already a criminal and have access to compromised servers or stolen credit cards to buy…