No post body was provided.
Twitter blocked my account for a tweet I did not make
111–120 of 276 posts
Re: Twitter blocked my account for a tweet I did not make
#112Earlier quoted context omitted.
That brings up a page where Twitter wants my phone number, which they can't have.
You're assuming at this point they want your number. It is not unreasonable to assume that this has been changed to the attackers number.
True, but they are still asking for it even now and they prefix it with the NL country code.
Re: Twitter blocked my account for a tweet I did not make
#113Earlier quoted context omitted.
Paranoid would imply that you set up Authenticator app based 2FA and a Security key. ;-) https://twitter.com/settings/account/login_verification
I don't have a smart phone and don't want to give Twitter my phone number because I see that as a risk rather than a solution.
Wow, TIL that you don't have a smart phone, so interesting!
Anyway, twitter has had app based 2FA since the end of 2017...
https://techcrunch.com/2017/12/20/twitter-adds-support-for-a...
A year ago, they added security key support:
https://9to5mac.com/2021/06/30/twitter-users-can-now-add-sec...
You don't need a phone to have security.
Re: Twitter blocked my account for a tweet I did not make
#114I'm confused - was OP's account compromised, or not? It sounds like it was, but he doesn't seem very fussed about how it happened or keeping it from happening again, just annoyed that Twitter's response to it isn't faster. Is it this commonplace for twitter accounts to be taken over? Also, is saying things like "Go die" an insta-ban on twitter? I don't use it but I thought it took more than that.
> I'm confused - was OP's account compromised, or not? I do not know. The tweet certainly looks like it was made by my account, but definitely not from this computer and definitely not using my password. I'm pretty precise about stuff like that and Twitter would be the least of my problems if my passwords were hacked. For now I am assuming either someone social engineered Twitter to change my password or a compromise…
For now I am assuming either someone social engineered Twitter to change my password or a compromise of Twitter of some sort.
Try to log in with a clear cache or in a private window. If you get redirected back to the page saying to delete the tweet, then you know your password wasn't changed.
Re: Twitter blocked my account for a tweet I did not make
#115Quoted post unavailable.
OP is @jacquesm here; this is the internet so long cons are always possible, but he's one of the more credible people around here. Additionally, the tweet in question is pretty far out of character.
Exactly! It makes way more sense for a person who tweeted something deeply out of character to try and disavow it in this way, than for a person that regularly tweets this kind of things.
Re: Twitter blocked my account for a tweet I did not make
#116I'm confused - was OP's account compromised, or not? It sounds like it was, but he doesn't seem very fussed about how it happened or keeping it from happening again, just annoyed that Twitter's response to it isn't faster. Is it this commonplace for twitter accounts to be taken over? Also, is saying things like "Go die" an insta-ban on twitter? I don't use it but I thought it took more than that.
> I'm confused - was OP's account compromised, or not? I do not know. The tweet certainly looks like it was made by my account, but definitely not from this computer and definitely not using my password. I'm pretty precise about stuff like that and Twitter would be the least of my problems if my passwords were hacked. For now I am assuming either someone social engineered Twitter to change my password or a compromise…
》What is interesting is that the account was blocked within seconds of the tweet being posted
Do you suspect inner job or flagging bot farm?
Re: Twitter blocked my account for a tweet I did not make
#117Earlier quoted context omitted.
If somebody had that kind of an exploit of Twitter, is it really plausible they'd use it for such an inconsequential tweet and on your account? Seems like there would be far juicier targets.
That I agree with. Still, no indication at all that anything besides Twitter has been abused and believe me there are far juicier targets on this machine as well. So why just Twitter if someone has compromised my main work machine? That would really make no sense.
It is not unheard of as a distraction technique. Similar to flooding an inbox with spam mail so the "changed password" email gets missed in the flurry.
You could be spending all of your time trying to solve your Twitter issue while time is being taken to delicately extract some of those "far juicier" targets.
Not saying this is for sure, but just one reason why a malicious actor might act in this way. If you haven't done a full forensics on your main machine, you should be doing that before jumping to the conclusion that your machine is completely clean.
Re: Twitter blocked my account for a tweet I did not make
#118tl;dr: OP was hacked but refuse to believe they were compromised by traditional means.
That is possible, but I have absolutely zero evidence for that at this point. I would either think someone successfully managed to social engineer Twitter into making an unauthorized change or that there is some other avenue besides the regular interface that allowed access to my account (so not protected by my password or session).
Re: Twitter blocked my account for a tweet I did not make
#119Remember, not long ago even @jack's account was taken over: https://www.wired.com/story/jack-dorsey-twitter-hacked/ If you'd ever supplied a phone number as a backup-auth, then a SIM/phone-number-hijack would be a likely cause. (I think you'd see an email about a password reset in that case.) But also any 3rd-party app that was ever granted posting access ª then itself compromised or misused – could also be to blame.…
As far as I know, the poster is in the Netherlands, which makes SIM swapping a bit harder.
Re: Twitter blocked my account for a tweet I did not make
#120Earlier quoted context omitted.
I don't have a smart phone and don't want to give Twitter my phone number because I see that as a risk rather than a solution.
Wow, TIL that you don't have a smart phone, so interesting! Anyway, twitter has had app based 2FA since the end of 2017... https://techcrunch.com/2017/12/20/twitter-adds-support-for-a... A year ago, they added security key support: https://9to5mac.com/2021/06/30/twitter-users-can-now-add-sec... You don't need a phone to have security.
I don't have a smartphone specifically because I believe they are insecure by design, at least one company and a whole raft of employees there have access to it and that's before we get into automatic updates of the software on those devices and so on.
When I say I'm pretty sure that this machine wasn't compromised that is because I'm utterly paranoid when it comes to stuff like this. Possibly not paranoid enough - given the evidence just obtained...