Live data from Hacker News

Trump's Twitter account hacked after Dutch researcher guessed password?

theguardian.com

31–40 of 111 posts

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#31

The password format is surely the most common password pattern that everyone seems to have independently adopted

If you haven't, you need to watch this: https://www.youtube.com/watch?v=aHaBH4LqGsI

edit: title is "You Should Probably Change Your Password! | Michael McIntyre Netflix Special" if you prefer to search on youtube yourself

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#33
Twitter spokesperson Ian Plunkett:

“We’ve seen no evidence to corroborate this claim, including from the article published in the Netherlands today. We proactively implemented account security measures for a designated group of high-profile, election-related Twitter accounts in the United States, including federal branches of government.”

https://techcrunch.com/2020/10/22/dutch-hacker-trump-twitter...

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#34
The Trump-tie aside, does anyone have a good reason why 2FA isn't absolutely enforced on all verified accounts?

I can't really see a situation where the need for "authenticity" of a person/account meets the bar for needing verification, but not be considered important enough for basic security practices.

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#35
post #2

The password was maga2020 infinite_facepalm.gif

Off topic: how do you format text on Hacker News? I never knew it was possible to use italics.

It's kind of a tiny subset of markdown. So you can surround words/phrases in * to italicize. Maybe indent four spaces

    for(code blocks) { ... }
Yep, that worked.

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#36
post #12

IMO anyone using internet must be taught about Passwords and how non guessable strong password can prevent(to some extent) these kind of attacks (cracking the account).

Let's see:

* Letters - check

* Numbers - check

* Special symbols - check

So the new, secure, password should be Maga2020!

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#37
This seems to be completely implausible. Whatever email is tied to this account would have been instantly notified about a "suspicious login".

There is absolutely no evidence in the article (not even links or screenshots of his tweet reaching out to the White House).

Furthermore I can't believe Trump's account is even going through regular authentication mechanisms. It should be trivial to restrict access to an account to certain address ranges of a government VPN.

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#38
post #13

Earlier quoted context omitted.

Agreed. If the password was that simple it would have hacked a while back

I mean who knows how many intelligence agencies are reading his DM's. If I knew Trumps password I wouldn't do anything that would make it clear that I knew it.

> I mean who knows how many intelligence agencies are reading his DM's

I'd be surprised if Twitter didn't have access logs. Anyway if his campaign team had the password, there may be nothing of value in those dms.

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#39

The password format is surely the most common password pattern that everyone seems to have independently adopted

It's not happening independently, it's cargo-culted. There's lots of "security advice" out there recommending doing exactly this.

Plus, if you're missing a requirement when trying to set your password, the easiest thing to do is just append the missing requirement at the end. Especially if it's punctuation, which naturally goes at the end of words/sentences anyway.

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#40

Earlier quoted context omitted.

* maga2020!

It's got everything a strong password needs. Letters, numbers, and special characters!

No capital letters, though. It is important to follow all security rules. Weakest link and such. If only his password was Maga2020!, it would be impossible to hack.
Post reply on HN