Live data from Hacker News

An incident impacting 5M accounts and private information on Twitter

privacy.twitter.com

201–210 of 479 posts

Re: An incident impacting 5M accounts and private information on Twitter

#201

Earlier quoted context omitted.

If you know the right providers it's about $2/month for a non-VOIP, physical SIM to receive SMS for this sort of garbage.

Would be super interested in hearing more about where you could find such a deal _with a physical SIM_. Seems far too good to be true.

I used Red Pocket, which comes down to about 2.50/month if you buy a prepaid card on eBay: https://www.redpocket.com/plans/annual

Re: An incident impacting 5M accounts and private information on Twitter

#202

Can we have a proper postmortem about this please, with information about the exact process that was required to obtain this information? > We take our responsibility to protect your privacy very seriously and it is unfortunate that this happened. Patently not seriously enough.

It's always hilarious: Whenever any company is caught not taking X seriously, the first thing they do is issue a press release that starts with "Here at COMPANY, we take X very seriously!"

You can pretty much read a list of company values to find out exactly the things they do only for show.

The companies I've worked for have always ignored any stated values as soon as it costs them money or gets in the way of making money. Which is, you know, always.

Re: An incident impacting 5M accounts and private information on Twitter

#203

>If you operate a pseudonymous Twitter account, we understand the risks an incident like this can introduce and deeply regret that this happened. To keep your identity as veiled as possible, we recommend not adding a publicly known phone number or email address to your Twitter account. I'm so sick of this kind of victim blaming, you're forced to add a phone number to use twitter.

You can remove your phone number after creating the account.

And right after you do your account will be locked

Re: An incident impacting 5M accounts and private information on Twitter

#204

So what you’re saying is that you discovered a vulnerability that leaked the private information of your users, said absolutely nothing for 6 months, then finally came clean, but only because you were forced to because people were selling data on the deep web. Please take your “sorry” and shove it where the sun doesn’t shine. You don’t “take our privacy seriously”. This is utterly ridiculous and unacceptable, and in…

[deleted]

Re: An incident impacting 5M accounts and private information on Twitter

#205

> How to Protect Your Account > (...) To keep your identity as veiled as possible, we recommend not adding a publicly known phone number or email address to your Twitter account. Well, you're the ones constantly temporarily banning my account for not providing a phone number...

[deleted]

Re: An incident impacting 5M accounts and private information on Twitter

#206

>If you operate a pseudonymous Twitter account…we recommend not adding a publicly known phone number to your Twitter account. Dear Twitter, We need a phone number to be able to use Twitter longer than a week otherwise we get blocked for “suspicious activity” (which is entirely bullshit - logging in from the same IP is not suspicious). So what should we do? Go to AT&T and open a new line? Jokers.

[deleted]

Re: An incident impacting 5M accounts and private information on Twitter

#207
"we recommend not adding a publicly known phone number or email address to your Twitter account."

This is literally impossible. You can't create a Twitter account without a phone number. It sometimes allows you to do so, but then is blocked within 24 hours until you add one.

It's insulting that Twitter should lie about that.

Re: An incident impacting 5M accounts and private information on Twitter

#208

> How to Protect Your Account > (...) To keep your identity as veiled as possible, we recommend not adding a publicly known phone number or email address to your Twitter account. Well, you're the ones constantly temporarily banning my account for not providing a phone number...

Strange you say that. I’m six months into my pseudonymous account and they haven’t tried to extort my phone number. It’s like they know from my behavior that I don’t want to be doxxed by Twitter Inc. I signed up using a VPN and a weird email address, and used an AD blocker.

I think your experience is irregular. A while back I was forced to create an account just to report an impersonator and they insta-suspended it for "suspicious behavior" until I provided a phone number. I asked around and heard uniformly "oh yea, twitter does that".

Re: An incident impacting 5M accounts and private information on Twitter

#209
post #193

Earlier quoted context omitted.

The phrasing is a bit more specific.. "At that time, we had no evidence.." It could also mean "oh I spent five minutes looking into it and didn't see any evidence"

thats a lawyered up comment

As are most PR statements by companies when discussing breaches publicly.

Re: An incident impacting 5M accounts and private information on Twitter

#210

Earlier quoted context omitted.

"We have no evidence that this was exploited" is a standard psychological trick they pull in vulnerability announcements to give an unfounded impression that it hasn't been exploited.

It doesn't have to be a psychological trick. Sometimes you don't actually have evidence it was exploited - at which point what are you meant to say?

[deleted]
Post reply on HN