Live data from Hacker News

How I Lost My $50,000 Twitter Username

medium.com

191–200 of 394 posts

Re: How I Lost My $50,000 Twitter Username

#191

Earlier quoted context omitted.

GoDaddy requires 6 digits, but the agent let the attacker guess 2 of them (repeatedly, until he got it right). That's truly awful.

I thought everyone knew not to use GoDaddy after the SOPA incident. Hopefully this will convince more people to move their domains to a domain registrar that cares about its customers.

SOPA was from one person (in-house counsel) and was not and is not the sentiment of c-level management or any employees I've ever talked to.

Re: How I Lost My $50,000 Twitter Username

#192

One thing that people should realize in why Twitter may not respond to these kinds of issues, or may be slow to respond, is that it's probably true that lots of people buy and sell Twitter accounts, and people may report them stolen when in fact they've already sold them to someone. This kind of thing happened a lot in MMO games which is why they try to push account security into your hands so they don't have to atte…

So what? If Twitter returned control of a handle if someone could prove that they had recently controlled the handle, that would quickly make the handles market dry up.

Re: How I Lost My $50,000 Twitter Username

#193

Why would a company ever ever ever accept 6 digits of a credit card number as a way to authenticate an identity?? Credit card numbers are not secure. Therefore, they should not ever be accepted as authentication. Especially only 6 digits of it! This is by far the most shocking part of this story. As if I needed another reason to despise GoDaddy. [Edited to add] I would sure love to see a scarlet letter list of compan…

When a customer calls into the GoDaddy call center, they are supposed to provide a 4 digit pin in order to gain access to their account.

I don't work in that department, but I'll forward the page to the CEO and make sure it gets read and addressed.

Re: How I Lost My $50,000 Twitter Username

#194

I feel bad for this guy, and twitter needs to do the right thing and return to him his handle. Then I can come back here and post nasty comments about squatters.

The problem is stealing @N is, someone will have to use it one day. How can they hope not to be traced?

Re: How I Lost My $50,000 Twitter Username

#195
post #185

I feel bad for this guy, and twitter needs to do the right thing and return to him his handle. Then I can come back here and post nasty comments about squatters.

Any thoughts why the attacker would tell the guy how he did it if this is the obvious solution?

Yeah why is that attacker so nice and kind? No joking, it's bad for their business.

Re: How I Lost My $50,000 Twitter Username

#197
post #164
post #140

Earlier quoted context omitted.

He's definitely a squatter. If you own something and you don't use it, you're a squatter. I own an old original Nintendo that I haven't used all year. That's why if someone comes into my house and takes it, it's my own fault.

I understand it was a sarcasm, but there's one difference between the two. A Twitter handle or a domain name is something unique as opposed to a game console of which there were millions of copies.

... and it still involves the right of selling the account at the price he wants, even if he's squatting.

Re: How I Lost My $50,000 Twitter Username

#198
post #195
post #185

Earlier quoted context omitted.

Any thoughts why the attacker would tell the guy how he did it if this is the obvious solution?

Yeah why is that attacker so nice and kind? No joking, it's bad for their business.

Maybe just 'pride' of what he accomplished.

Re: How I Lost My $50,000 Twitter Username

#199
post #165
post #160

Earlier quoted context omitted.

I tend to disagree: The right of ownership includes to right to use what you own in your own way.

The ownership of twitter namespace is Twitter's alone, not the user's

IIRC, Twitter officially doesn't allow you to sell your handle.

Re: How I Lost My $50,000 Twitter Username

#200
post #164
post #140

Earlier quoted context omitted.

He's definitely a squatter. If you own something and you don't use it, you're a squatter. I own an old original Nintendo that I haven't used all year. That's why if someone comes into my house and takes it, it's my own fault.

I understand it was a sarcasm, but there's one difference between the two. A Twitter handle or a domain name is something unique as opposed to a game console of which there were millions of copies.

Too bad then for the company named "N." They'll have to go with N_company or N_inc or N_co or get really creative if those are taken. There's probably only like 500 names they can choose from relating to "N."
Post reply on HN