Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

Post reply on HN
Print view View original

801–810 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#801

Post by dang »

caetris1 wrote: post #789

I've never heard of Hacker News censoring comments that do not abuse the site guidelines, with rational opinions. This comment thread is being heavily censored. This fundamentally abuses the trust that users have put into this site.

Your comment was deleted because you yourself deleted it. "Hacker News" hasn't been censoring anything.

Is it possible that you thought your comment was removed because in fact it was on one of the later pages of comments? That is simple pagination. I tried to tell people about this by pinning https://news.ycombinator.com/item?id=23853229 to the top of the first page.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#802

Post by Spooky23 »

zelly wrote: post #772
fishtoaster wrote: post #336

Earlier quoted context omitted.

It could just be a relatively unsophisticated actor who stumbled upon a serious vulnerability and didn't know enough to market it to, eg, a state actor or whatever.

What would a state actor do with this? Read celebrities' DMs?

If I were a state actor, I would compromise the accounts of personalities that POTUS follows towards the end of Hannity on a day meaningful to my state.

Most of the adults are asleep and there are any number of things you could write to trigger some sort of shitstorm from POTUS.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#803

Post by dang »

caetris1 wrote: post #781

My original comment was deleted, so I'll try this again. I've read the comments here and quite surprisingly there are a lot of folks saying that the value of this hack isn't worth more than roughly one year's salary at Twitter (as an intern). I appreciate the pragmatism, but unlikely. Anyone with this kind of exploit could have sold it, moved to Russia, and received immunity from extradition. Secondly, people should…

Your comment was deleted because you yourself deleted it.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#804

Post by Spooky23 »

Nightshaxx wrote: post #739
css wrote: post #661

Earlier quoted context omitted.

Or someone making one last use of an exploit on the old API, since ostensibly there is a day to go before the new API is released on the public net.

This makes way more sense than any of the other suggestions in HN. DMs are almost worthless; who uses DMs for anything important? It's for contacting people you kinda know but not really. State secrets aren't transitted over DM, but not because people wouldn't be stupid enough to do it. the people holding them are much older than the demographic that uses Twitter DMs. Worst case with DMs is some new YouTuber drama wo…

Never underestimate the power of stupid. There is unlimited potential.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#805

Post by jliptzin »

Seems to me twitter should hire some humans to sit there and manually approve every tweet by all VIP accounts before they go live. How hard could that be? If that’s all they do you’re adding maybe a 30 second delay to every VIP tweet and you’re pretty much guaranteeing that this doesn’t happen again. Unless of course the hackers somehow inserted the tweet directly to the database and bypassing any such measures.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#806

Post by Nextgrid »

pastrami_panda wrote: post #196
danso wrote: post #108

This is the earliest non-deleted tweet I've found referencing the bitcoin address (or rather, noticing that an account got hacked). It was sent at 12:23PM Pacific time (more than 1.5 hours ago): https://twitter.com/lawmaster/status/1283481418518208513

It's astonishing that they can't seem to at least shut the platform down. Have they lost control completely or do they think it's preferable to let the scammers go on than to close shop?

Cryptocurrency scams with fake accounts impersonating verified ones have been around for years despite being detectable with a simple regex. There's no reason to believe this disgraceful company actually cares, although after this incident hopefully they will change their mind.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#807

Post by Nextgrid »

rsa25519 wrote: post #214

Obama https://twitter.com/BarackObama/status/1283515490653147139 Also: - Musk - Bill Gates - Apple - Uber - Jeff Bezos - Joe Biden - MrBeast

When it comes to MrBeast I think this is where the most damage/payout could be achieved because MrBeast is popular for literally giving money away.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#808

Post by coronadisaster »

dang, if you would collapse all threads by default and only show/load top level comments, you probably would not even need this performance workaround. On the first page of your performance workaround, there was only 4 top-level comments... probably less than 100 total, I would guess (for most posts).

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#809

Post by codexon »

Sebb767 wrote: post #499
fishtoaster wrote: post #336

Earlier quoted context omitted.

It could just be a relatively unsophisticated actor who stumbled upon a serious vulnerability and didn't know enough to market it to, eg, a state actor or whatever.

But then why set up a rather simply scam instead of getting the bug bounty from twitter? That wallet is currently sitting at about 150k USD and these are rather hard to pay out. Why not just go for 100k USD bug bounty, completely legal and with fame?

Hackerone has non-technical people screening your exploits. They will often mark them as out of scope.

Companies will routinely downgrade the severity of your exploit so they can pay you less.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#810

Post by pazimzadeh »

nseggs wrote: post #792
6nf wrote: post #775

Earlier quoted context omitted.

The BTC is adding up to many millions so far. I'd say it's worth it by itself.

Lol not even close

He didn't say in what currency

100k USD = 4.2 billion rial or 2.3 billion dong

Post reply on HN