231–240 of 394 posts
Earlier quoted context omitted.
Any thoughts why the attacker would tell the guy how he did it if this is the obvious solution?
Yeah why is that attacker so nice and kind? No joking, it's bad for their business.
Seems like Twitter could easily verify the story based on their own logs and then restore access to his N account. He doesn't mention pursuing that, though.
He said he wasn't using it much. Thus, isn't he basically a squatter?
Earlier quoted context omitted.
Activity doesn't require the creation of a tweet though. There are plenty of active accounts where the users just read.
And there's nothing wrong with "just reading". Plenty of people post 100+ times per day and say nothing interesting at all.
I feel bad for this guy, and twitter needs to do the right thing and return to him his handle. Then I can come back here and post nasty comments about squatters.
Any thoughts why the attacker would tell the guy how he did it if this is the obvious solution?
Why would a company ever ever ever accept 6 digits of a credit card number as a way to authenticate an identity?? Credit card numbers are not secure. Therefore, they should not ever be accepted as authentication. Especially only 6 digits of it! This is by far the most shocking part of this story. As if I needed another reason to despise GoDaddy. [Edited to add] I would sure love to see a scarlet letter list of compan…
well, http://plaintextoffenders.com exists - someone should make creditcardoffenders.com .
I read the article. Sounds like an epic fail by GoDaddy, I blame them for 99% of what happened. Glad I'm not a customers of theirs... Oh btw, try to find a registrar that does 2factor authentication!
http://wiki.gandi.net/en/contacts/login/2-factor-activation
(note to self: activate 2FA)
Earlier quoted context omitted.
The reason for the 6 digits is probably linked to PCI DSS compliance where agents are allowed to view the first 2 and last 4 of stored card numbers.
The first digit of a credit card number identifies the type of company the issuer is, e.g. 1 is an airline, 3 is a travel agency, 4 and 5 are credit card companies, 7 is an oil company. The final digit is a checksum. Two things about this baffle me: 1) that websites feel the need to have a dropdown to identify what sort of card you have instead of just figuring it out and 2) why they need to ping it off the issuer's…
Pretty much all cards can be validated with the Luhn algorithm in js. See http://stackoverflow.com/questions/20725761/validate-credit-...
Earlier quoted context omitted.
Yeah why is that attacker so nice and kind? No joking, it's bad for their business.
Maybe just 'pride' of what he accomplished.
Perhaps he has something against GoDaddy (many do) and/or PayPal (again, many do) so took the opportunity to make them look bad by making sure that their effective complicity in the hack is well known.
Seems like Twitter could easily verify the story based on their own logs and then restore access to his N account. He doesn't mention pursuing that, though.
He said he wasn't using it much. Thus, isn't he basically a squatter?
It doesn't appear that he is trying to sell it, which is the usual behaviour of an account/name squatter.
I have several domains that I plan to use for little projects over the coming year (though given my lack of free time right now that may not happen like it didn't last year...). Am I a squatter for having paid for something I intend to use but have not got around to doing anything with yet? A couple of them are password/credentials related, for an example of a squatter talk to the person who owns password.net and sends me unsolicited email regularly trying to get me to offer to buy it as it will "help my brand" (the names I've got are the intended "brand", the generic short name is worth no more to me than standard registration fees - who slaps short names into their address bar instead of using a search engine these days?).
Earlier quoted context omitted.
> A better analogy would be an owner of a valuable piece of property who wasn't putting it to good use. So if you were not putting your backyard to good use you would not feel too bad if your neighbors decided to encroach on it?
I have a friend with family in Venezuela. A few years ago, Chavez decided that underutilized land is suddenly free for the poor to squat on. Their family member had bought the land after saving a long time, and was now saving for the funds to build a house on the land. Now the land is gone. The GP's analogy is extremely weak.