News for hackers. Stuff that matters.
Re:Jack Dorsey’s account was hacked by lazzlazzlazz on Friday August 30, 2019 @06:07PM (#20843156)
Is this interesting? Not a shit post question - do routine minor security breaches rise to the level of noteworthy these days?
Re:Jack Dorsey’s account was hacked by zacwebb on Friday August 30, 2019 @06:12PM (#20843181)
I'd say influential figures (i.e. the CEO of the platform) having their accounts hacked and posting bomb threats is considered noteworthy...
Re:Jack Dorsey’s account was hacked by dmitrygr on Friday August 30, 2019 @06:09PM (#20843162)
It is karmic justice for yet another company that pushes SMS 2fa as "safe"
Re:Jack Dorsey’s account was hacked by lozaning on Friday August 30, 2019 @06:29PM (#20843304)
If someone got into Zuck's facebook account I'd be interested in knowing.
Re:Jack Dorsey’s account was hacked by jordanpg on Friday August 30, 2019 @06:10PM (#20843166)
That was my first thought too -- it seems profound, although it's difficult to articulate why. It's not like high-profile individuals have special security protocols available to them. Just the same password/2FA like the rest of us proles.

On the other hand, it did make me consider that there are some accounts that could be compromised that would be very significant: Trump.

Re:Jack Dorsey’s account was hacked by beardog on Friday August 30, 2019 @06:18PM (#20843220)
Although technically available to anyone, Google has an "advanced protection program" for highly targeted accounts. It has the follow (may have missed some) effects on your account:

* locked to 2fa with security keys * limiting the set of apps that can access account data * better scrutinized account reset - i assume this means it makes your account more resistant to phishing on Google employee's part.

https://landing.google.com/advancedprotection/

Its nice that Google apparently makes this available to anyone who is willing to buy the security keys. It would be nice if all major social media services had such a program.

Re:Jack Dorsey’s account was hacked by hermitdev on Friday August 30, 2019 @09:06PM (#20844028)
Not sure if this falls into the advanced protection for Google, but about a year or two ago, got a notification of a suspicious login from Moscow (I'm from the US and have never travelled out of North America). Promptly changed my password.
Re:Jack Dorsey’s account was hacked by drivebycomment on Friday August 30, 2019 @07:07PM (#20843542)
Yeah. At this point, any identity provider that doesn't support FIDO u2f is either incompetent or negligent or both.
Re:Jack Dorsey’s account was hacked by perl4ever on Friday August 30, 2019 @06:49PM (#20843445)
"there are some accounts that could be compromised that would be very significant"

Trump? I'm not really being facetious when I ask what difference it could possibly make. Of course, sometimes his tweets do appear to move the stock market, but still.

Re:Jack Dorsey’s account was hacked by saagarjha on Friday August 30, 2019 @06:12PM (#20843178)
This isn't a "routine minor security breach".
Re:Jack Dorsey’s account was hacked by peterwwillis on Friday August 30, 2019 @06:23PM (#20843260)
Did all of Twitter get hacked, or did a single user get embarrassed?
Re:Jack Dorsey’s account was hacked by atemerev on Friday August 30, 2019 @06:12PM (#20843185)
It is. The consequences of hacking e.g. @RealDonaldTrump would be disastrous (especially if the adversary is a hostile nation state whose hackers are smart enough to make plausible, but damaging statements).
Re:Jack Dorsey’s account was hacked by ben_w on Friday August 30, 2019 @06:25PM (#20843283)
Would it, in that particular case? Don’t get me wrong, I agree with your general point (imagine a police department account tweeting a photo of someone while accusing them of a crime), but given the Tweets of his that people quote I get the impression that even if Trump’s account posts open declarations of war nobody would do anything?
Re:Jack Dorsey’s account was hacked by cookie_monsta on Friday August 30, 2019 @06:32PM (#20843327)
Agreed. Trump's Twitter account is a bad example of things that people read that might have real world consequences.
Re:Jack Dorsey’s account was hacked by AaronFriel on Friday August 30, 2019 @07:15PM (#20843579)
https://www.mediaite.com/online/pentagon-reportedly-feared-t...

The official policy of the White House is that the President's tweets from @realDonaldTrump can be statements of the President in his official capacity, and therefore binding to the extent that any Presidential order or command can be. He has fired people, he has announced sweeping policy changes, made nominations, and so on through Twitter, which have then been acted on by the executive branch, Congress (which held appointment hearings for a SecDef before a formal nomination, but after a tweet), and the courts.

Re:Jack Dorsey’s account was hacked by cookie_monsta on Friday August 30, 2019 @08:23PM (#20843906)
Of course that's the nod nod wink wink official policy - how could it be otherwise, and with any other president you would be wise to attach some weight to presidential tweets. But here's the only test you have to make: would you take real-life, consequential action based solely on a Trump tweet or would you look for verification elsewhere first? Because if it's the latter, it doesn't really matter if Trump's account gets hacked.
Re:Jack Dorsey’s account was hacked by AaronFriel on Friday August 30, 2019 @09:26PM (#20844100)
I just gave examples:

1. of the executive branch by and through the US Department of Defense, among other examples

2. the legislative branch, by and through committee hearings and acceptance as fact of nominations not yet formally made, among other examples

3. and the judicial branch, by and through accepting as fact the arguments of the DOJ through the solicitor general that statements by the President via Twitter are "official statements of the President", among other examples

That's not wink wink, nod nod. That's just fact. The federal government, in its three branches, accepts as fact that the President issues official edicts through Twitter.

Re:Jack Dorsey’s account was hacked by cookie_monsta on Friday August 30, 2019 @10:42PM (#20844337)
> The federal government, in its three branches, accepts as fact that the President issues official edicts through Twitter.

Sure, but pretty much everybody in the world accepts as fact that he uses it to issue random nonsense as well. Surely you don't need examples of this.

Which comes back to my question: would you take real-life, consequential action based solely on a Trump tweet or would you look for verification elsewhere first?

Re:Jack Dorsey’s account was hacked by anigbrowl on Friday August 30, 2019 @07:38PM (#20843706)
He's used to to announce trade sanctions, with the tweets in question literally being cut and pasted together to form the official White house statement a few hours later.