Live data from Hacker News

Tampa teen accused of being ‘mastermind’ behind Twitter hack

wfla.com

311–320 of 702 posts

Re: Tampa teen accused of being ‘mastermind’ behind Twitter hack

#311

The announcement video is quite intense and feels odd for some reason. Maybe it's the aspect ratio or cold intro - not sure. https://youtu.be/z80K3-q3Kqg

They could have trimmed the first few seconds of that video.

I would also like to see a loop of the first 4.5 seconds.

Re: Tampa teen accused of being ‘mastermind’ behind Twitter hack

#312
post #167

The story has been updated, three people have now been charged, the teen, a man from Orlando and a man from the UK. https://www.theverge.com/2020/7/31/21349920/twitter-hack-arr...

> Originally, “Kirk” claimed to be a Twitter employee, according to a Discord chat log

So these guys were able to get into Twitter but they chatted freely on Discord without considering everything would be recorded?

And then they make one of the most public hacks in recent history without considering someone would go through all the logs with all the noise they made?

Re: Tampa teen accused of being ‘mastermind’ behind Twitter hack

#313

I have an unrealistic idea (more of a thought experiment) that companies should face equal culpability to criminal hackers in attacks. After all, technically the way the hackers use systems /is/ authorized in a sense, even if the method of obtaining authorization is unconventional. Maybe this would get companies to pay more attention to securing their systems. From a certain perspective, Twitter is an accomplice to f…

accomplice means they knowingly aided in the fraud or profited from it. Being caught off guard is not a crime. The culpability is the reputation damage from being hacked.

Re: Tampa teen accused of being ‘mastermind’ behind Twitter hack

#314

Earlier quoted context omitted.

I'm not sure what your criticism of the quote means here. The biggest weakness of BTC for criminal enterprise is the fact that every transaction must be logged to a global public ledger. The hard part is aligning the public keys with private keys, but if you have enough additional information (such as, say, the private keys' owners sitting in a prison cell and the private keys themselves flayed out of their unencrypt…

I know the quote was accurate. I thought it was common knowledge that bitcoin is not anonymous, therefore making "de-anonymized the bitcoin transactions" a bit of an overstatement.

It is and it isn't. Hacker News is anonymous until someone ties your username to your identity.

Re: Tampa teen accused of being ‘mastermind’ behind Twitter hack

#315
post #295

Earlier quoted context omitted.

No, and that's why we (basically all nations that have banks or nuclear power plants) have specific laws governing them. Look, if you want to pass a law saying all internet business having X personal data needs to prove Y security, then I'd probably be for it (depending on X and Y). We already have PCI-DSS and similar today for payment providers. I'm just saying that there is nothing like that today, and if there was…

In "2020 Commission Report" by Jeffrey Lewis, North Korea nukes the US because of one twit. This looks very plausible to me.

Are you arguing against something I've said? Because if so I don't understand what or how.

Re: Tampa teen accused of being ‘mastermind’ behind Twitter hack

#316

Earlier quoted context omitted.

It's been quite awhile now since the GDRP protections have been around. If they haven't finished removing tracking by now, then they're lying when they say "your privacy matters to us". No, it doesn't. If it mattered, then you would act like it.

This isn't the New York Times. I don't think it's reasonable to expect the local news for a mid-sized American city to prioritize implementation of the EU's data rules.

They seem to have the technical wherewithal and motivation to prioritize all that tracking in the first place, though...

Re: Tampa teen accused of being ‘mastermind’ behind Twitter hack

#317

If this turns out to be true, then we can conclude two things: 1. It's incredible that the security of Twitter allows for a solitary 17-year old to gain full access to (any) account. 2. This also explains why the profit of the hack was 'only' ~$100k. Many speculated about how incredibly valuable such a hack could be and how much more a group could have profited from this hack. Using it for two hours of bitcoin scammi…

The Krebs article says that prior to the bitcoin hack, they were selling accounts such as @6 for $2000. They probably had a rapidly shrinking window and the bitcoin scam was the last ditch effort before whatever admin account they hijacked got discovered.

Re: Tampa teen accused of being ‘mastermind’ behind Twitter hack

#318

Earlier quoted context omitted.

I am saying I know I made a mistake and if they truly caught those who are responsible, then I don't see why they won't be able to get access to the stolen funds. My eth is in that collection of stolen funds. I'd rather prove it's mine and have the government return it to me vs them auctioning it off.

I understand what you are saying, and I'm sorry you are in this situation. But I can also see that because you acted outside of the reach of the legal system then there is less chance of it being able to help you. Sorry if I'm being heartless here but I'd also argue that the funds were not stolen, they were given in a system that provides almost no legal recourse.

Cryptocurrency is not outside of the reach of the legal system.

"the United States District Court for the Eastern District of Texas ... ordered Trendon Shavers to pay more than $40 million in disgorgement and prejudgment interest, and a civil penalty of $150,000 related to [Bitcoin scam] BCS&T." https://www.justice.gov/usao-sdny/pr/texas-man-sentenced-ope...

Re: Tampa teen accused of being ‘mastermind’ behind Twitter hack

#319

I have an unrealistic idea (more of a thought experiment) that companies should face equal culpability to criminal hackers in attacks. After all, technically the way the hackers use systems /is/ authorized in a sense, even if the method of obtaining authorization is unconventional. Maybe this would get companies to pay more attention to securing their systems. From a certain perspective, Twitter is an accomplice to f…

I'm not sure I would call this "authorized in a sense" since social engineering, in order to gain access to an internal tool, was the method.

Social engineering most often involves impersonation, so the person getting access was not really the intended party.

Re: Tampa teen accused of being ‘mastermind’ behind Twitter hack

#320

Earlier quoted context omitted.

Good luck. This is how bitcoin works. You send value to somewhere else of your will. There is no outside party here.

Practically speaking, at this point the government is probably in possession of the private keys and could authorize reverse transactions to restore the stolen crypto. The larger question is a question of policy and law... Does the government even consider entries in a blockchain ledger to be "returnable stolen property?"

Yes, crypto scammers have been forced to give money back before.
Post reply on HN