Jeff Bezos too.
Hackers take over prominent Twitter accounts in simultaneous attack
131–140 of 1001 posts
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#132Poll: Will this affect your trust in Twitter as a source of information? If no, why not?
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#133Just what kind of an operation is Twitter running here? It seems crazy that they don't have any kind of anti-abuse system in place that could just block tweets with this specific Bitcoin address or possibly tweets matching the regexp of any Bitcoin address. I.e. limit the damage and buy a couple of hours while they try to find the root cause.
(Yes, yes, staged rollouts. But anti-abuse systems don't work by those rules, at least in emergencies.)
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#134How did they possibly steal Elon Musk's Twitter account? We need a post-mortem on this because if he can be phished, then we need to know how, and if it was some internal hack then I also need to know how. That's extremely scary!
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#135Oh wow, now they're doing multiple tweets/minute: https://twitter.com/search?q=bc1qxy2kgdygjrsqtzq2n0yrf2493p8... It might make sense for Twitter to redirect all non-retweets of that address to /dev/null (or a sandbox) for a little while.
"Something something blockchain
bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh"
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#136Earlier quoted context omitted.
Honestly, we should be relieved if thats all that was stolen. A more sophisticated attack would involve OTM puts on TSLA and a tweet along the lines of: "finding major defects in Ys and 3s. shutting down all lines to reconfigure for a week" That could have netted the attackers millions.
"Hacking Elon’s Twitter account and using it for a crypto scam rather than a stock-trading scam shows a complete lack of imagination" - Naval https://twitter.com/naval/status/1283507218294292481?s=19
I disagree, a stock-trading scam would be way easier to track than crypto.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#137Twitter should just ban all Btc address posting momentarily until this is solved
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#138> At least some of the compromised accounts have multi-factor authentication enabled, including CoinDesk's. Interesting. I wonder if it was a SMS hack, and if not, then a new kind of vulnerability?
Twitter dropped support for SMS posting earlier this year: https://www.theverge.com/2020/4/27/21238131/twitter-sms-noti...
I meant in the sense of SIM-swap hacks, though SMS-posting would also make sense as a vector (had Twitter not recently ended it)
https://info.phishlabs.com/blog/sim-swap-attacks-two-factor-...
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#139Bezos now, too! https://twitter.com/JeffBezos/status/1283508547897171969
Searching for the bitcoin address in twitter gives an absolute ton of results. Are all these accounts hacked, or are people now posting just to joke around?
Love how they don't just ban the bitcoin address. Firehose big data my ass. No one at home at Twitter.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#140Earlier quoted context omitted.
Honestly, we should be relieved if thats all that was stolen. A more sophisticated attack would involve OTM puts on TSLA and a tweet along the lines of: "finding major defects in Ys and 3s. shutting down all lines to reconfigure for a week" That could have netted the attackers millions.
"Hacking Elon’s Twitter account and using it for a crypto scam rather than a stock-trading scam shows a complete lack of imagination" - Naval https://twitter.com/naval/status/1283507218294292481?s=19
this is the first thought that popped into my mind when hearing about it. Why are you quoting tweets as a reply on HN?