Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

451–460 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#451

Earlier quoted context omitted.

Yes, of course. Take the site down if you don't have a read only mode or something. You are losing millions in trust every minute this hack goes on.

Indeed, already billions in trust lost so far, guessing by the ~4+% after-hours TWTR drop.

To be fair, it's still higher than yesterday's low. It's not like TWTR is known to increase over time anyways.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#452

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

Maybe the dude shorted the Twitter stock?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#453
post #393

This is what happens when you put all of your communication eggs into a single basket. Twitter needed to be taken down a couple of pegs. I think accounts of a high enough profile may want to closely examine the ActivityPub ecosystem.

Us politicians using twitter to communicate en masse is irresponsible in of itself. So unprofessional

Yes, they should make the constituents come to them! What?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#454

Earlier quoted context omitted.

Or it's been exploited for months/years to read people's DMs and private accounts and they decided to burn it now mostly for lolz?

That would be so incredibly stupid. Burning a money machine of that magnitude for lulz? I don't think anyone would do that.

Sometimes relationships fall apart and things get ugly.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#455

I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.

a temp fix is to modify the backend to prevent anyone from pasting a bitcoin address or any long string of numbers and letters that may resemble such an address

For the specific variation this hack is currently taking, sure. But the actual problem is that someone has access to these accounts and can post anything they want. That is not okay, and has nothing to do with bitcoin addresses.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#456

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

Quite possibly this isn't a hack and someone got a Twitter admin's account, then got access to the admin panel and "all" accounts without having to hack much of anything.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#457
post #133

Just what kind of an operation is Twitter running here? It seems crazy that they don't have any kind of anti-abuse system in place that could just block tweets with this specific Bitcoin address or possibly tweets matching the regexp of any Bitcoin address. I.e. limit the damage and buy a couple of hours while they try to find the root cause. (Yes, yes, staged rollouts. But anti-abuse systems don't work by those rule…

[dead]

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#458

I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.

a temp fix is to modify the backend to prevent anyone from pasting a bitcoin address or any long string of numbers and letters that may resemble such an address

Cryptocurrency scams have been going on for years despite the fix being an easy "if reply to a high-profile account and contains the words "bitcoin" or "giveaway" then ban".

If they couldn't (or didn't want to) do it then I very much doubt they can do it now.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#459
post #438
post #356

Earlier quoted context omitted.

Even worse? How about POTUS declares war on China thru twitter? OMG, I just realized how dumb that would have been to say back in 2016. But these days?

That's assuming Tweets actually serve an actual diplomatic function and are not merely marketing/propaganda for voters. (Also POTUS is not authorized to declare any wars btw.)

Ok, mass panic then?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#460
post #438
post #356

Earlier quoted context omitted.

Even worse? How about POTUS declares war on China thru twitter? OMG, I just realized how dumb that would have been to say back in 2016. But these days?

That's assuming Tweets actually serve an actual diplomatic function and are not merely marketing/propaganda for voters. (Also POTUS is not authorized to declare any wars btw.)

> That's assuming Tweets actually serve an actual diplomatic function and are not merely marketing/propaganda for voters.

He has fired people over twitter [0] so I'm not sure the scope of one can do there is limited to "marketing/propaganda"

> (Also POTUS is not authorized to declare any wars btw.)

Other nations are not going to read the US law first before deciding if the declaration was or not real.

[0] https://www.theverge.com/2018/3/13/17113950/trump-state-depa...

Post reply on HN