There is definitely a big red button at Twitter that somebody should have pressed an hour ago.
Totally agreed. This is beyond irresponsible.
Hackers take over prominent Twitter accounts in simultaneous attack
521–530 of 1001 posts
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#522So Twitter's killswitch is that verified accounts cant tweet any more...
Vive la plebs!
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#523Watch this turns out to be a JS dependency tree problem from some library that was compromised months ago in some NPM module, used in the twitter web interface.
Given the Twitter web interface is just an client of the Twitter semi-public API, I highly doubt this is it.
As long as the API isn't running on node, right? :)
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#524With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!
If they had full access to Twitter’s backend, they probably would be tweeting from accounts like @POTUS or @jack. But this seems like they have access to limited accounts. Most likely gained access to a third party service that allows you to manage your tweets? Edit: they tweeted from the twitter support account. Just wow. They might have actually gotten into Twitter’s systems. Edit 2: To expand on my edit above, I s…
Can you clarify your edit? All I see is this tweet (https://twitter.com/TwitterSupport/status/128351803844522393...) which reads
We are aware of a security incident impacting accounts on Twitter. We are investigating and taking steps to fix it. We will update everyone shortly.
Are you implying that this was tweeted by the attackers? or something else?
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#525With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!
If they had full access to Twitter’s backend, they probably would be tweeting from accounts like @POTUS or @jack. But this seems like they have access to limited accounts. Most likely gained access to a third party service that allows you to manage your tweets? Edit: they tweeted from the twitter support account. Just wow. They might have actually gotten into Twitter’s systems. Edit 2: To expand on my edit above, I s…
I think that they just like to be alive, so they avoided hacking POTUS or other countries Presidents/PMs.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#526Earlier quoted context omitted.
Seems more likely to me that it was a Twitter employee or someone with access to an employee's PC to reset passwords.
But wouldn't that be evident very, very quickly, from just looking at a relevant account's audit log, and shut down right away?
But it was shut down right away...
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#527Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.
Inkl bite: lets say I hack capable of doing this. How do I sell my hack?
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#528Earlier quoted context omitted.
> how little the BTC reward is going to be So far, the address has received the equivalent of over 50,000 USD.
Again, nothing. Given the accounts that were hacked, they could easily have moved markets and had pre-placed short bets that would have netted them potentially hundreds of millions.
That's a lot easier to trace than BTC transactions though. And of course even there if the adversary is determined enough you'll get caught.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#529https://twitter.com/TwitterDev/status/1283068902331817990 Hmm.
Yep, that won't be a coincidence. Also a bit relieving because this means that probably there was no access to DMs etc. before the rollout of this feature.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#530Earlier quoted context omitted.
Even worse? How about POTUS declares war on China thru twitter? OMG, I just realized how dumb that would have been to say back in 2016. But these days?
This hack could absolutely get people killed. There are several tweets I can think of from POTUS that would begin immediate military mobilization from an unfriendly country.
100%
And everyone in government will quickly conclude that they can't allow this to happen.
This could be the beginning of the end of social media.