Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

291–300 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#291
post #242

Earlier quoted context omitted.

> Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down! Is Twitter really using GitHub internally (even self-hosted)?

Is there even a self hosted Github? AFAIK there is no public offering of the sort.

Github has offered this for years: https://github.com/enterprise MIT used it for a long time.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#292

Earlier quoted context omitted.

They could have inconspicuously joined the numerous TSLA shorters and made 100x that with one tweet

This strategy would require having money to begin with. It's a pretty big assumption that hackers have any money. If they had money, they wouldn't have to be hackers.

And it would need to be a relatively small bet compared to your total net worth to avoid detection by the SEC and the hack could fail at the exact time Tesla had a 20% pop leaving you underwater

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#294

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

It "feels" like an insider attack (simultaneous compromise of lots of high value accounts) but I agree, it will make for a fascinating post mortem if one is produced.

Hmm, how much money this scam would potentially generates? I think the salary of an engineer working on twitter would be higher given how fast this scam would be shut down. Would a twitter employee risk their career to this scam?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#295
It would be incredibly irresponsible if there isn't a team at Twitter right now working to bring the whole site down.

It's one thing going after a couple celebrities and CEOs, but they've now hit a former US President and a current Presidential candidate.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#296
A lot of people (rightly) pointing out that the actual exploit payload here is a horribly inefficient way to monetize such awesome power. Some of the replies that influencing regulated markets would be traceable...sure, but trillions of dollars flow through these markets each and every day. A decently large options position accumulated over days wouldn't raise any red flags, and one tweet about the Fed raising rates on the back of strong employment + vaccine hope would have sent markets into a tailspin. The reality is that it would be much more difficult to identify bad actors than it is with public crypto addresses. And your money is clean at that point, part of the US financial system (or other tier 1 banking system).

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#297

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

Twitter depends on GitHub?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#298

Earlier quoted context omitted.

probably a social media manager api keys

Do that many accounts use the same social media manager?

I know hootsuite is a very popular app for managing the social media accounts.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#300

I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.

You mean shutdown Twitter? I think that's a bit extreme in this case.

Its not extreme at all.
Post reply on HN