Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content
1–10 of 85 posts
Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content
#2https://twitter.com/thecounter/status/841935867925139458
"This isn't TwitterCounter's first time. It's happened before. If you rely on it, it's time to pick better tools."
https://twitter.com/FR314/status/841925814417555460
http://press.twittercounter.com/139716-twitter-counter-accou...
UPD TheCounter: "Assuming this abuse is indeed done using our system, we’ve blocked all ability to post tweets and changed our Twitter app key."
Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content
#3TheCounter: "We're aware that our service was hacked and have started an investigation into the matter.We've already taken measures to contain such abuse" https://twitter.com/thecounter/status/841935867925139458 "This isn't TwitterCounter's first time. It's happened before. If you rely on it, it's time to pick better tools." https://twitter.com/FR314/status/841925814417555460 http://press.twittercounter.com/139716-t…
Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content
#4TheCounter: "We're aware that our service was hacked and have started an investigation into the matter.We've already taken measures to contain such abuse" https://twitter.com/thecounter/status/841935867925139458 "This isn't TwitterCounter's first time. It's happened before. If you rely on it, it's time to pick better tools." https://twitter.com/FR314/status/841925814417555460 http://press.twittercounter.com/139716-t…
What does this service do exactly? Why does it need to have write access to the account if it's only a stat thing?
For one reason or another, my account doesn't seem to have done anything shady yet. Pretty sure I've used twitter counter in the past.
Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content
#5TheCounter: "We're aware that our service was hacked and have started an investigation into the matter.We've already taken measures to contain such abuse" https://twitter.com/thecounter/status/841935867925139458 "This isn't TwitterCounter's first time. It's happened before. If you rely on it, it's time to pick better tools." https://twitter.com/FR314/status/841925814417555460 http://press.twittercounter.com/139716-t…
What does this service do exactly? Why does it need to have write access to the account if it's only a stat thing?
Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content
#6Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content
#7Part of the problem is that getting your account hacked is such a widespread problem that people just accept it and there isn't much incentive for developers to invest heavily in preventing poor user decisions that exacerbate the situation.
Ideally developers of services like Twitter - and all those random SaaS apps you pipeline important business information to - should invest in:
* Better language about granting access rights up front. Chrome is always impressing me with their approach to language on HTTPS warning dialogs etc. Anyone allowing API access should spend lots of time crafting how they explain their token system to users.
* Requiring manual re-confirmation of access rights for integrations after a certain period of no use.
* Detecting unusual access patterns for integrations - usually this integration posts once per day per account, now it's posting continually.
Hopefully there are machine learning startup teams working on this. I'm sure at least some companies would care enough to send a log of 3rd party integration interactions to a machine learning startup and receive alerts of anonymous behaviour back.
(Yes, I know the irony of suggesting the answer to excessive 3rd party integration is a startup that provides anomaly detection as a service - but I doubt most small services offering integrations would be able to engineer a strong system like this...)
Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content
#8Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content
#9Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content
#10Someone is very interested in pushing people towards far right pro-kremlim parties in Europe right before elections..
Doesn't seem like a very advanced hack to be honest, and "twitter services" are a constant source of account compromises