Earlier quoted context omitted.
Yes, of course. Take the site down if you don't have a read only mode or something. You are losing millions in trust every minute this hack goes on.
Indeed, already billions in trust lost so far, guessing by the ~4+% after-hours TWTR drop.
Hackers take over prominent Twitter accounts in simultaneous attack
451–460 of 1001 posts
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#452Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#453This is what happens when you put all of your communication eggs into a single basket. Twitter needed to be taken down a couple of pegs. I think accounts of a high enough profile may want to closely examine the ActivityPub ecosystem.
Us politicians using twitter to communicate en masse is irresponsible in of itself. So unprofessional
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#454Earlier quoted context omitted.
Or it's been exploited for months/years to read people's DMs and private accounts and they decided to burn it now mostly for lolz?
That would be so incredibly stupid. Burning a money machine of that magnitude for lulz? I don't think anyone would do that.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#455I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.
a temp fix is to modify the backend to prevent anyone from pasting a bitcoin address or any long string of numbers and letters that may resemble such an address
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#456Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#457Just what kind of an operation is Twitter running here? It seems crazy that they don't have any kind of anti-abuse system in place that could just block tweets with this specific Bitcoin address or possibly tweets matching the regexp of any Bitcoin address. I.e. limit the damage and buy a couple of hours while they try to find the root cause. (Yes, yes, staged rollouts. But anti-abuse systems don't work by those rule…
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#458I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.
a temp fix is to modify the backend to prevent anyone from pasting a bitcoin address or any long string of numbers and letters that may resemble such an address
If they couldn't (or didn't want to) do it then I very much doubt they can do it now.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#459Earlier quoted context omitted.
Even worse? How about POTUS declares war on China thru twitter? OMG, I just realized how dumb that would have been to say back in 2016. But these days?
That's assuming Tweets actually serve an actual diplomatic function and are not merely marketing/propaganda for voters. (Also POTUS is not authorized to declare any wars btw.)
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#460Earlier quoted context omitted.
Even worse? How about POTUS declares war on China thru twitter? OMG, I just realized how dumb that would have been to say back in 2016. But these days?
That's assuming Tweets actually serve an actual diplomatic function and are not merely marketing/propaganda for voters. (Also POTUS is not authorized to declare any wars btw.)
He has fired people over twitter [0] so I'm not sure the scope of one can do there is limited to "marketing/propaganda"
> (Also POTUS is not authorized to declare any wars btw.)
Other nations are not going to read the US law first before deciding if the declaration was or not real.
[0] https://www.theverge.com/2018/3/13/17113950/trump-state-depa...