Live data from Hacker News

Trump's Twitter account hacked after Dutch researcher guessed password?

theguardian.com

51–60 of 111 posts

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#53
I would not know what to do with this power had it been me guessing the password.

Another “covfefe” perhaps? An innocent “ALL CAPS DAY” maybe? Or just a simple “;)”? And these are harmless examples. A targeted reference to certain prophets or Winnie the Pooh would have vast consequences.

I could have set the world alight for laughs.

And to think no extra measures were put in place by Twitter is shocking.

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#57
post #37

This seems to be completely implausible. Whatever email is tied to this account would have been instantly notified about a "suspicious login". There is absolutely no evidence in the article (not even links or screenshots of his tweet reaching out to the White House). Furthermore I can't believe Trump's account is even going through regular authentication mechanisms. It should be trivial to restrict access to an accou…

That is what likely happened: "A day after he gained access, Gevers noticed that two-step verification had been activated on Trump’s account. Two days later, the Secret Service got in touch. According to De Volkskrant, they thanked him for bringing the security problem to their attention."

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#58
Regardless of whether this is real or not, it sounds like it's long past time that Twitter implemented proper user controls for the use-case of multiple securely-authorized users who have the ability to control one high-visibility Verified account. Sharing passwords and TOTP creds between a dozen or so actual people seems massively failure-prone.

Re: Trump's Twitter account hacked after Dutch researcher guessed password?

#59

There's no evidence in this story, I'd take it with a grain of salt.

The TechCrunch article has a screenshot from the profile editor: https://techcrunch.com/wp-content/uploads/2020/10/trump-acce...

It's trivial to change with developer tools, doesn't count as evidence.
Post reply on HN