Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

501–510 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#501

Earlier quoted context omitted.

Yeah, I would have guessed a platform like Twitter would have anti-abuse systems with at least term filters.

At this point I'd advocate for a huge red button or a gong that someone can smash and it just halts the platform

Even if there is no "huge red button", at this stage it should be easy to reconfigure their load balancers to just return 500 for all endpoints or even take down their DNS records and essentially shut down the platform until they sort it out.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#503

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

It could just be a relatively unsophisticated actor who stumbled upon a serious vulnerability and didn't know enough to market it to, eg, a state actor or whatever.

While possible, this scenario requires such a massive disconnect between the attacker's skill, connections, and luck versus their understanding of economic and geopolitical context that I would consider it among the least likely.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#504
post #393

This is what happens when you put all of your communication eggs into a single basket. Twitter needed to be taken down a couple of pegs. I think accounts of a high enough profile may want to closely examine the ActivityPub ecosystem.

Us politicians using twitter to communicate en masse is irresponsible in of itself. So unprofessional

Agreed. Any public sector institution should be running its own W3C standards-compliant infrastructure (or should be paying someone else to run this on their behalf).

I envision that the current centralized services could be getting into this business if they were to white-label their applications.

Imagine "Twitter, but for your own domain" in the way that G Suite is Gmail and Google Apps for your domain.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#506

Earlier quoted context omitted.

They could have inconspicuously joined the numerous TSLA shorters and made 100x that with one tweet

This strategy would require having money to begin with. It's a pretty big assumption that hackers have any money. If they had money, they wouldn't have to be hackers.

Whatever hack you have that can take a verified account over with 2FA is worth some money... you could sell access to any account with this bypass...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#507

Earlier quoted context omitted.

Many powerful actors, including state actors, would love to see Twitter, as a political instrument, go away. It could even be our own, or a dissident group within our own, IC. If someone can get a presidential candidate and an ex-president's twitter account to say what they want, then that is pretty much the end of Twitter as a political tool.

I hadn't really considered that the attack might be against Twitter, the corporation, itself. The BTC thing is obviously too stupid to be the objective, but if you hate Twitter, then would there be a better way to teardown the entire site than doing something like this?

Make everyone post the N-word and goatse?

Hell, even just hacking Trump to do it would probably trigger a federal investigation. I doubt this current situation will.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#508
post #393

This is what happens when you put all of your communication eggs into a single basket. Twitter needed to be taken down a couple of pegs. I think accounts of a high enough profile may want to closely examine the ActivityPub ecosystem.

We had a decentralized system before. It was called the mainstream medias. But they lost so much trust from the public that now we turn to social medias.

[deleted]

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#509
post #438
post #356

Earlier quoted context omitted.

Even worse? How about POTUS declares war on China thru twitter? OMG, I just realized how dumb that would have been to say back in 2016. But these days?

That's assuming Tweets actually serve an actual diplomatic function and are not merely marketing/propaganda for voters. (Also POTUS is not authorized to declare any wars btw.)

Doesn't matter. Imagine, for a moment, a Tweet posted on Trump's account along the lines of Reagan's joke in 1984 [1]:

> Iran has gone TOO FAR! As President I have ordered the use of nuclear weapons against key military targets. We begin bombing in five minutes.

Regardless of the plausibility of the message, it would be likely to trigger a panicked response from foreign militaries. It's not at all implausible that it'd start a war.

[1]: https://en.wikipedia.org/wiki/We_begin_bombing_in_five_minut...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#510

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

If they had full access to Twitter’s backend, they probably would be tweeting from accounts like @POTUS or @jack. But this seems like they have access to limited accounts. Most likely gained access to a third party service that allows you to manage your tweets? Edit: they tweeted from the twitter support account. Just wow. They might have actually gotten into Twitter’s systems. Edit 2: To expand on my edit above, I s…

You say they'd target POTUS but of the very high profile accounts it's so far billionaires, corporations and democrat politicians. Does make you wonder.
Post reply on HN