Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Who’s behind Wednesday’s epic Twitter hack?

krebsonsecurity.com

Post reply on HN
Print view View original

531–536 of 536 posts

Re: Who’s behind Wednesday’s epic Twitter hack?

#531

Post by lousken »

trabant00 wrote: post #438
judge2020 wrote: post #313

Earlier quoted context omitted.

The issue is that, for any company without thousands of employees (heck, probably even some of these are guilty), the VPN is often the only barrier to the entire network. The BeyondCorp model makes you explicitly specify "John can access support.corp.com but not admin.corp.com", while setting up these explicit checks is the exception for VPN-based access, not the norm (and sometimes it isn't even done right - eg. rel…

> The issue is that, for any company without thousands of employees (heck, probably even some of these are guilty), the VPN is often the only barrier to the entire network. Sorry, but what? I've worked in multiple small companies where the we where less than 5 system administrators and inside the vpn we had encrypted traffic and ldap auth on everything. It's a few days job for a single person to set everything up thi…

yea, we have the same setup

Re: Who’s behind Wednesday’s epic Twitter hack?

#532

Post by rurban »

lifeformed wrote: post #260
dmitryminkovsky wrote: post #197

Earlier quoted context omitted.

People keep saying it could have started a war. Excuse me for being naive but come on—really? This is total sensationalism. What party wouldn’t verify something on twitter through diplomatic channels before going to war? Equity destruction: sure. War: no way.

Here's how I think it could be done: Get Trump's account, and tweet something like, "I've ordered a NUCLEAR STRIKE on China! The missiles are already in the air. The DEEP STATE is trying to take me out. They will try to silence me and delete these tweets and use deep fakes to say this was a hoax! The storm is here, Q is real, it's time to take up arms and kill democrats." Then continue tweeting escalating things over…

And then you need to people to read that nonsense. You need a Twitter account to be able to read that.

Only few people have Twitter accounts, it's a walled garden. Almost nobody cares what people shout in 140 chars, and likewise nobody cares about people streaming video on Twitch or YouTube in 20 min, what could be written publicly and read in 10 seconds.

Re: Who’s behind Wednesday’s epic Twitter hack?

#533

Post by dmitryminkovsky »

rapnie wrote: post #345
dmitryminkovsky wrote: post #197

Earlier quoted context omitted.

People keep saying it could have started a war. Excuse me for being naive but come on—really? This is total sensationalism. What party wouldn’t verify something on twitter through diplomatic channels before going to war? Equity destruction: sure. War: no way.

How about civil war, or at least large-scale riots?

Riots or mass hysteria I can imagine coming from a hack like this.

Re: Who’s behind Wednesday’s epic Twitter hack?

#534

Post by Zanneth »

mc32 wrote: post #158
dwd wrote: post #133

Earlier quoted context omitted.

The same could be said for radio, whether Orson Wells "Alien Invasion" broadcast or the multitude of April 1st jokes that got out of hand.

Apparently the "fallout" was an exaggeration that Orson went along with because it gave him more publicity. From the Wikipedia: >"The supposed panic was so tiny as to be practically immeasurable on the night of the broadcast. ... Radio had siphoned off advertising revenue from print during the Depression, badly damaging the newspaper industry. So the papers seized the opportunity presented by Welles’ program to discr…

This is true about how the events unfolded in the US, but the “War of the Worlds” story was translated and re-broadcast in Latin America where it had a much more devastating effect. In Ecuador, even the army and the police were rushed to the site where the invasion was supposedly taking place, intensifying the panic for average citizens. Never underestimate the potential power of a fictional story that is irresponsibly disclosed.

https://www.miamiherald.com/news/nation-world/world/americas...

Re: Who’s behind Wednesday’s epic Twitter hack?

#535

Post by dx034 »

bonestamp2 wrote: post #498
jobigoud wrote: post #378

Earlier quoted context omitted.

You don't need 2FA to deactivate 2FA? That seems like a big flaw.

Yup. The interesting thing is that this 2FA exploit was posted to hacker news two days before the twitter hack. It's possible someone seized the opportunity before it was fixed.

Do you have a link to that? Didn't see it here on HN.

Re: Who’s behind Wednesday’s epic Twitter hack?

#536

Post by bonestamp2 »

dx034 wrote: post #535
bonestamp2 wrote: post #498

Earlier quoted context omitted.

Yup. The interesting thing is that this 2FA exploit was posted to hacker news two days before the twitter hack. It's possible someone seized the opportunity before it was fixed.

Do you have a link to that? Didn't see it here on HN.

My apologies, perhaps my memory was failing me. I can't find what I was thinking of and may have been incorrectly remembering this as twitter instead of google: https://news.ycombinator.com/item?id=23792767
Post reply on HN