Ashton Kutcher's Twitter Account Hacked at TED

tsigo wrote: post #2

"How excited will the stars Twitter seeks to get onboard be when they find out how easy it is for strangers to hijack their identities?" I had to read that sentence like five times in order for it to make sense.

Garden Path sentence?

http://en.wikipedia.org/wiki/Garden_path_sentence

Re: Ashton Kutcher's Twitter Account Hacked at TED

#5

Post by rdl » Thu, Mar 03, 2011, 2:47 AM UTC

End to end crypto is great, but I generally use a VPN whenever logging in from a public network for all traffic, just to avoid this -- anyone sniffing my Gig-E uplink at the colo, or the backbone, or the site, will hopefully only see SSL traffic to sites, but just in case, I'd rather put an extra barrier up for the easy coffeeshop wireless sniffing attacker.

Re: Ashton Kutcher's Twitter Account Hacked at TED

#6

Post by timtadh » Thu, Mar 03, 2011, 3:21 AM UTC

BenSchaechter wrote: post #3

So someone in the audience was using Firesheep. Horrors. https://twitter.com FTW

I agree. This strikes me as non-news. Side-jacking is a bad thing. We get it. Use VPN, use SSH tunneling, in general don't be dumb when using an open network. If possible use the https version.

Re: Ashton Kutcher's Twitter Account Hacked at TED

#7

Post by DTrejo » Thu, Mar 03, 2011, 3:25 AM UTC

Not related to Twitter, but I saw this in the comments:

Facebook does now have an 'enable SSL by default' option.

Account> Account Settings> Account Security> Secure Browsing (https)

Re: Ashton Kutcher's Twitter Account Hacked at TED

#8

Post by toephu » Thu, Mar 03, 2011, 3:33 AM UTC

i still see 0 use for twitter.

Re: Ashton Kutcher's Twitter Account Hacked at TED

#9

Post by TGJ » Thu, Mar 03, 2011, 4:06 AM UTC

Sad to see this in relation to TED talks. The TED site has a great deal of integrity so seeing someone hack a person's twitter account is disheartening. No matter the cause, taking someone's account just to prove a silly point is wrong.

Re: Ashton Kutcher's Twitter Account Hacked at TED

#10

Post by h5n1 » Thu, Mar 03, 2011, 4:07 AM UTC

DTrejo wrote: post #7

Not related to Twitter, but I saw this in the comments: Facebook does now have an 'enable SSL by default' option. Account> Account Settings> Account Security> Secure Browsing (https)

Lifehacker had this a few weeks ago, after FireSheep was big.