Live data from Hacker News

Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content

bloomberg.com

1–10 of 85 posts

Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content

#2
TheCounter‏: "We're aware that our service was hacked and have started an investigation into the matter.We've already taken measures to contain such abuse"

https://twitter.com/thecounter/status/841935867925139458

"This isn't TwitterCounter's first time. It's happened before. If you rely on it, it's time to pick better tools."

https://twitter.com/FR314/status/841925814417555460

http://press.twittercounter.com/139716-twitter-counter-accou...

UPD TheCounter‏: "Assuming this abuse is indeed done using our system, we’ve blocked all ability to post tweets and changed our Twitter app key."

https://twitter.com/thecounter/status/841941624238284800

Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content

#3
post #2

TheCounter‏: "We're aware that our service was hacked and have started an investigation into the matter.We've already taken measures to contain such abuse" https://twitter.com/thecounter/status/841935867925139458 "This isn't TwitterCounter's first time. It's happened before. If you rely on it, it's time to pick better tools." https://twitter.com/FR314/status/841925814417555460 http://press.twittercounter.com/139716-t…

What does this service do exactly? Why does it need to have write access to the account if it's only a stat thing?

Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content

#4
post #3
post #2

TheCounter‏: "We're aware that our service was hacked and have started an investigation into the matter.We've already taken measures to contain such abuse" https://twitter.com/thecounter/status/841935867925139458 "This isn't TwitterCounter's first time. It's happened before. If you rely on it, it's time to pick better tools." https://twitter.com/FR314/status/841925814417555460 http://press.twittercounter.com/139716-t…

What does this service do exactly? Why does it need to have write access to the account if it's only a stat thing?

Growth hacking. It announces what your count is when you use it the first time. Or maybe all times? I forget, it's been a while.

For one reason or another, my account doesn't seem to have done anything shady yet. Pretty sure I've used twitter counter in the past.

Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content

#5
post #3
post #2

TheCounter‏: "We're aware that our service was hacked and have started an investigation into the matter.We've already taken measures to contain such abuse" https://twitter.com/thecounter/status/841935867925139458 "This isn't TwitterCounter's first time. It's happened before. If you rely on it, it's time to pick better tools." https://twitter.com/FR314/status/841925814417555460 http://press.twittercounter.com/139716-t…

What does this service do exactly? Why does it need to have write access to the account if it's only a stat thing?

I don't know - I don't use it myself. I think many apps require write access to advertise themselves with occasional tweets.

Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content

#7
Every now and then I end up helping someone I know out with their twitter strategy or something on their PC. The number of full access 3rd party integrations people willingly sign up to and the number of browser plugins people happily add always shocks me.

Part of the problem is that getting your account hacked is such a widespread problem that people just accept it and there isn't much incentive for developers to invest heavily in preventing poor user decisions that exacerbate the situation.

Ideally developers of services like Twitter - and all those random SaaS apps you pipeline important business information to - should invest in:

* Better language about granting access rights up front. Chrome is always impressing me with their approach to language on HTTPS warning dialogs etc. Anyone allowing API access should spend lots of time crafting how they explain their token system to users.

* Requiring manual re-confirmation of access rights for integrations after a certain period of no use.

* Detecting unusual access patterns for integrations - usually this integration posts once per day per account, now it's posting continually.

Hopefully there are machine learning startup teams working on this. I'm sure at least some companies would care enough to send a log of 3rd party integration interactions to a machine learning startup and receive alerts of anonymous behaviour back.

(Yes, I know the irony of suggesting the answer to excessive 3rd party integration is a startup that provides anomaly detection as a service - but I doubt most small services offering integrations would be able to engineer a strong system like this...)

Re: Hacked Twitter Accounts Post Swastikas, Pro-Erdogan Content

#10

Someone is very interested in pushing people towards far right pro-kremlim parties in Europe right before elections..

Oh I wonder who would that be...

Doesn't seem like a very advanced hack to be honest, and "twitter services" are a constant source of account compromises

Post reply on HN