11–20 of 1001 posts
This sounds like an incredible fuckup by Twilio. If it's true that their authentication verification was the entrypoint, they could be liable for leaking an enormous amount of personal information.
Whatever the case, this is going to be 'fun' to watch.
Earlier quoted context omitted.
The linked post celebrates this saying they can share this data with law enforcement, but is it legal for them to pursue cases based on the evidence found in stolen data?
https://www.nolo.com/legal-encyclopedia/searches-private-cit... > But, in some ways, there’s really no such thing as an “illegal” search by a private citizen, at least in the sense that police searches can be illegal: Regardless of issues like lack of probable cause, evidence found by private citizens acting on their own is usually admissible in court. That’s true even if the private citizen committed a crime like tr…
This sounds like an incredible fuckup by Twilio. If it's true that their authentication verification was the entrypoint, they could be liable for leaking an enormous amount of personal information.
This sounds like an incredible fuckup by Twilio. If it's true that their authentication verification was the entrypoint, they could be liable for leaking an enormous amount of personal information.
This sounds like an incredible fuckup by Twilio. If it's true that their authentication verification was the entrypoint, they could be liable for leaking an enormous amount of personal information.
It's highly unlikely Twilio's API responds with something like {"authenticated": true} when you haven't paid your bill or they suspend you.
This sounds like an incredible fuckup by Twilio. If it's true that their authentication verification was the entrypoint, they could be liable for leaking an enormous amount of personal information.
Does anyone have any suggestions?
This sounds like an incredible fuckup by Twilio. If it's true that their authentication verification was the entrypoint, they could be liable for leaking an enormous amount of personal information.
Sounds like Twillo was actively helping hackers "That allowed them to see which users had moderator rights and this in turn allowed them to reset passwords of existing users with simple “forgot password” function. Since Twilio no longer authenticated emails, hackers were able to access admin accounts with ease."
This sounds like an incredible fuckup by Twilio. If it's true that their authentication verification was the entrypoint, they could be liable for leaking an enormous amount of personal information.