Live data from Hacker News

Jb’s story about how he nearly lost his Twitter handle

d.pr

1–10 of 123 posts

Re: Jb’s story about how he nearly lost his Twitter handle

#2
These stories are starting to scare me...

I've already started using 1Password but I'm now considering closed some accounts and calling some of these services to ensure they never give out my information for password resets and such... Scary stuff...

Re: Jb’s story about how he nearly lost his Twitter handle

#3

These stories are starting to scare me... I've already started using 1Password but I'm now considering closed some accounts and calling some of these services to ensure they never give out my information for password resets and such... Scary stuff...

It’s worth setting up two-factor authentication on any service that supports it: Google, Facebook and Github spring to mind.

Re: Jb’s story about how he nearly lost his Twitter handle

#4

These stories are starting to scare me... I've already started using 1Password but I'm now considering closed some accounts and calling some of these services to ensure they never give out my information for password resets and such... Scary stuff...

It’s worth setting up two-factor authentication on any service that supports it: Google, Facebook and Github spring to mind.

I've got it setup on facebook and google, didn't know GitHub has it.

Re: Jb’s story about how he nearly lost his Twitter handle

#5

These stories are starting to scare me... I've already started using 1Password but I'm now considering closed some accounts and calling some of these services to ensure they never give out my information for password resets and such... Scary stuff...

It’s worth setting up two-factor authentication on any service that supports it: Google, Facebook and Github spring to mind.

Awesome! Github setup! Thanks.

Re: Jb’s story about how he nearly lost his Twitter handle

#6
I think a lot of it comes down to this:

"4. Some of the biggest companies in the world have security that is only as good as a minimum-wage phone support worker who has the power to reset your account. And they have valid business reasons for giving them this power."

Re: Jb’s story about how he nearly lost his Twitter handle

#8

These stories are starting to scare me... I've already started using 1Password but I'm now considering closed some accounts and calling some of these services to ensure they never give out my information for password resets and such... Scary stuff...

It’s worth setting up two-factor authentication on any service that supports it: Google, Facebook and Github spring to mind.

And AWS! As the article said he got lucky that the attacker didn't twig that there was an AWS account associated with that amazon.com login.

You should be using two-factor authentication for all your AWS accounts, especially the 'root' account that's tied to your regular Amazon.com login (I've always though this is a bit odd).

You should also never use that root account and set up IAM accounts for yourself and any other user (which also use 2FA).

Re: Jb’s story about how he nearly lost his Twitter handle

#9

These stories are starting to scare me... I've already started using 1Password but I'm now considering closed some accounts and calling some of these services to ensure they never give out my information for password resets and such... Scary stuff...

It’s worth setting up two-factor authentication on any service that supports it: Google, Facebook and Github spring to mind.

Dropbox and app.net also do 2FA.

If the service you're using doesn't support it, ask them to implement it. If enough people did it..

Post reply on HN