News for hackers. Stuff that matters.
Re:Hackers take over prominent Twitter accounts in simultane... by neurostimulant on Wednesday July 15, 2020 @05:17PM (#23851984)
With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it.

Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

Re:Hackers take over prominent Twitter accounts in simultane... by byteshock on Wednesday July 15, 2020 @06:13PM (#23852853)
If they had full access to Twitter’s backend, they probably would be tweeting from accounts like @POTUS or @jack. But this seems like they have access to limited accounts. Most likely gained access to a third party service that allows you to manage your tweets?

Edit: they tweeted from the twitter support account. Just wow. They might have actually gotten into Twitter’s systems.

Edit 2: To expand on my edit above, I saw multiple tweets from other accounts that showed a screenshot of the scam tweet originating from the twitter support account. I’m not sure if it’s real or not, since they keep deleting the tweets. If it is real that would definitely open doors to more theories.

Edit 3: Seems like the twitter support account was a joke. Impossible to tell with everything going on!

Re:Hackers take over prominent Twitter accounts in simultane... by benlumen on Wednesday July 15, 2020 @06:25PM (#23853034)
You say they'd target POTUS but of the very high profile accounts it's so far billionaires, corporations and democrat politicians. Does make you wonder.
Re:Hackers take over prominent Twitter accounts in simultane... by metrokoi on Wednesday July 15, 2020 @09:37PM (#23854777)
The POTUS account likely has more additional security than normal accounts.
Re:Hackers take over prominent Twitter accounts in simultane... by GhostVII on Thursday July 16, 2020 @12:27AM (#23855761)
Not sure why you are being downvoted given that this is probably correct? Sounds like the attack was through an admin portal. Given that Trump was one of the few high profile accounts not targeted, it seems like the attackers were not able to access his account through that portal. And his Twitter has been attacked by employees before so Twitter probably locked it down so employees can't modify it.
Re:Hackers take over prominent Twitter accounts in simultane... by dclowd9901 on Thursday July 16, 2020 @11:35AM (#23860031)
Or whoever did this didn’t want to draw a terrorism charge if they got caught and just wanted to keep it limited to wire fraud.
Re:Hackers take over prominent Twitter accounts in simultane... by Akronymus on Thursday July 16, 2020 @02:22AM (#23856358)
Could you elaborate on twitter employees attacking his account? This is the first time I read about that.
Re:Hackers take over prominent Twitter accounts in simultane... by coolspot on Thursday July 16, 2020 @02:38AM (#23856430)
Re:Hackers take over prominent Twitter accounts in simultane... by Akronymus on Thursday July 16, 2020 @02:40AM (#23856437)
Oh, I thought you meant defacing his account or something. It "just" being deleted didn't quite register as an attack for me.
Re:Hackers take over prominent Twitter accounts in simultane... by zucker42 on Wednesday July 15, 2020 @10:23PM (#23855058)
Like what?
Re:Hackers take over prominent Twitter accounts in simultane... by smsm42 on Wednesday July 15, 2020 @11:40PM (#23855505)
Maybe not everybody with internal tools can mess with it. Because somebody with internal tools already messed with it before and it didn't look very well for twitter. So if there's anybody with brains there they probably made some measures so it won't happen again.
Re:Hackers take over prominent Twitter accounts in simultane... by drak0n1c on Wednesday July 15, 2020 @11:24PM (#23855402)
The account was vandalized in the past by a rogue employee, they probably added more controls since then.
Re:Hackers take over prominent Twitter accounts in simultane... by Thorentis on Wednesday July 15, 2020 @08:21PM (#23854204)
I'm constantly amazed that people who are critical of billionaires and corporations, never wonder why billionaires and corporations are usually democrat supporters.
Re:Hackers take over prominent Twitter accounts in simultane... by dragonwriter on Wednesday July 15, 2020 @09:33PM (#23854755)
> I'm constantly amazed that people who are critical of billionaires and corporations, never wonder why billionaires and corporations are usually democrat supporters.

Most billionaires and large corporations have connections in, and make donations to, both major parties. The people who are critical of billionaires and corporations tend to also be the people that point out that the dominant faction of the Democratic Party (less sophisticated members of the critical group will shorten this to just the Democratic Party, without making the factional distinction) has for decades been, in economic policy terms, a center-right pro-corporate neoliberal group, not a progressive one.

Re:Hackers take over prominent Twitter accounts in simultane... by icedistilled on Wednesday July 15, 2020 @09:23PM (#23854682)
I'm pretty sure most billionaires support the GOP. I don't have a citation. But neither did you. Let's not turn HN into a hodgepodge of wild unbacked claims. That's what reddit is for.
Re:Hackers take over prominent Twitter accounts in simultane... by blisseyGo on Wednesday July 15, 2020 @10:03PM (#23854946)
1. Most want cheap foreign labour via H1b Visas which is currently more of a democrat thing (it's republican thing too but Trump is avoiding that right now). They claim they like diversity but it's actually just importing H1B visas who basically get exploited by the companies because if they don't over perform, then they don't get promoted and therefore get fired leading them to get deported back. This is also why these companies have the "get promoted every 1-2 years or you are fired".

2. Most don't publicly support GOP because they don't want to get cancelled.

PREFERENCE FALSIFICATION: Preference falsification is the act of misrepresenting one’s wants under perceived social pressures.

Re:Hackers take over prominent Twitter accounts in simultane... by Thorentis on Wednesday July 15, 2020 @09:34PM (#23854763)
Gates, Bezos, Zucckerburg, etc. etc. I was talking mostly about tech billionaires, should've made that clearer.
Re:Hackers take over prominent Twitter accounts in simultane... by ballarak on Wednesday July 15, 2020 @10:09PM (#23854976)
Bezos is a conservative. Amazon as a company is also conservative-leaning. If you look at Amazon's PAC, most of their donations go to the GOP.
Re:Hackers take over prominent Twitter accounts in simultane... by icedistilled on Thursday July 16, 2020 @02:33PM (#23862186)
Well that's wrong too.

I'm not sure the FB counts as democratic. At best he's big shades of gray with contradicting indications.

Out of the top four richest tech billionaires, according to forbes, only one of them is not most likely conservative and that one tries to stay out of politics, i.e. bill gates.

The next two have clear conservative leanings or contradicting indications, i.e. Bezos and Zuck.

Number four is Larry Ellison, who recently hosted a trump fundraiser. Well here is what wikipedia has on him:

Politics

Ellison was critical of NSA whistle-blower Edward Snowden, saying that "Snowden had yet to identify a single person who had been 'wrongly injured' by the NSA's data collection".[85] He has donated to both Democratic and Republican politicians,[86] and in late 2014 hosted Republican Senator Rand Paul at a fundraiser at his home.[87][88]

Ellison was one of the top donors to Conservative Solutions PAC, a super PAC supporting Marco Rubio's 2016 presidential bid. As of February 2016, Ellison had given $4 million overall to the PAC.[89] In 2020, Ellison hosted a fundraiser for Donald Trump at his Rancho Mirage estate.[90][91]

Re:Hackers take over prominent Twitter accounts in simultane... by talaketu on Wednesday July 15, 2020 @08:31PM (#23854305)
That's an amazing stack of assertions you have there.
Re:Hackers take over prominent Twitter accounts in simultane... by boringg on Wednesday July 15, 2020 @08:39PM (#23854361)
Full stack
Re:Hackers take over prominent Twitter accounts in simultane... by WhompingWindows on Wednesday July 15, 2020 @10:19PM (#23855034)
Simple, billionaires are usually Democratic because they tend to come from liberal backgrounds in liberal areas: Zuckerberg, Gates, or anyone who's come up through universities recently is younger and thus more Democratic leaning. It's really a case of demographics.
Re:Hackers take over prominent Twitter accounts in simultane... by Pmop on Wednesday July 15, 2020 @06:29PM (#23853088)
I think that they just like to be alive, so they avoided hacking POTUS or other countries Presidents/PMs.
Re:Hackers take over prominent Twitter accounts in simultane... by bollu on Wednesday July 15, 2020 @06:29PM (#23853087)
Can you clarify your edit? All I see is this tweet (https://twitter.com/TwitterSupport/status/128351803844522393...) which reads

We are aware of a security incident impacting accounts on Twitter. We are investigating and taking steps to fix it. We will update everyone shortly.

Are you implying that this was tweeted by the attackers? or something else?

Re:Hackers take over prominent Twitter accounts in simultane... by byteshock on Wednesday July 15, 2020 @06:36PM (#23853171)
I edited my comment, but basically I saw tweets that showed a screenshot of the scam tweet from the twitter support account. Not sure if it’s real since they delete the scam tweets.
Re:Hackers take over prominent Twitter accounts in simultane... by archon810 on Wednesday July 15, 2020 @07:26PM (#23853704)
That was a joke.
Re:Hackers take over prominent Twitter accounts in simultane... by byteshock on Wednesday July 15, 2020 @07:31PM (#23853771)
Ah alright, really impossible to tell with everything going on!
Re:Hackers take over prominent Twitter accounts in simultane... by VectorLock on Wednesday July 15, 2020 @08:23PM (#23854220)
The Twitter backend is probably heavily sprinkled with statements like `account_handle match { case "therealdonaldtrump" => throw new TrumpNotAllowedException("can't do"); }`

Especially after the last insider account tampering event.

Re:Hackers take over prominent Twitter accounts in simultane... by mlinsey on Wednesday July 15, 2020 @08:08PM (#23854090)
I do think it's odd that so many prominent accounts were hit but not Trump's. I remember there was an incident a couple years ago that a trust and safety employee at Twitter suspended Trump's account on their last day. It's very likely that after that incident, special guards were set in place to prevent admin tools from messing with Trump's account. This would align with speculation that this hack targeted an internal employee admin tool.
Re:Hackers take over prominent Twitter accounts in simultane... by Krasnol on Wednesday July 15, 2020 @07:18PM (#23853619)
Maybe they're POTUS fans ;)
Re:Hackers take over prominent Twitter accounts in simultane... by tathougies on Wednesday July 15, 2020 @06:44PM (#23853267)
If they target @POTUS, I believe they'd be guilty of impersonating an elected official, which would make this an even more serious crime? I dunno
Re:Hackers take over prominent Twitter accounts in simultane... by techntoke on Wednesday July 15, 2020 @08:24PM (#23854233)
They hack thousands of accounts and make national news, I doubt they are that worried. They probably just don't have access or they would have.
Re:Hackers take over prominent Twitter accounts in simultane... by jmkni on Wednesday July 15, 2020 @06:15PM (#23852890)
Donald Trump was Tweeting in Farsi earlier, I was seriously on the fence about whether that was a genuine tweet.
Re:Hackers take over prominent Twitter accounts in simultane... by eternalban on Wednesday July 15, 2020 @06:41PM (#23853231)
"3 people have been sentenced to death for participating in demonstrations. They could be subject to execution at any moment. This sends a deplorable message to the world and should not occur. #dont_execute"

[edit: not sure why this is getting so much silent attention. It is a literal translation of the tweet referenced in OP.]

Re:Hackers take over prominent Twitter accounts in simultane... by benlumen on Wednesday July 15, 2020 @06:21PM (#23852976)
Totally agree, backend - Musk's tweets being deleted and popping up again before our eyes was a dead giveaway.

It could be SQL injection writing tweets directly to the database for all we know.

I agree with everyone else saying the site should be pulled. Incredibly sketchy.

Re:Hackers take over prominent Twitter accounts in simultane... by VectorLock on Wednesday July 15, 2020 @08:25PM (#23854243)
Write through caches would need to send the tweets through the normal channels for them to 'fan out' instead of writing directly to MySQL. But essentially what you're saying about possible backend compromise.
Re:Hackers take over prominent Twitter accounts in simultane... by ChuckMcM on Wednesday July 15, 2020 @05:44PM (#23852403)
It "feels" like an insider attack (simultaneous compromise of lots of high value accounts) but I agree, it will make for a fascinating post mortem if one is produced.
Re:Hackers take over prominent Twitter accounts in simultane... by ChuckMcM on Wednesday July 15, 2020 @11:57PM (#23855625)
And now this : A Twitter insider was responsible for a wave of high profile account takeovers on Wednesday, according to leaked screenshots obtained by Motherboard and two sources who took over accounts.

From - https://www.vice.com/en_us/article/jgxd3d/twitter-insider-ac...

Re:Hackers take over prominent Twitter accounts in simultane... by neurostimulant on Wednesday July 15, 2020 @05:47PM (#23852441)
Hmm, how much money this scam would potentially generates? I think the salary of an engineer working on twitter would be higher given how fast this scam would be shut down. Would a twitter employee risk their career to this scam?
Re:Hackers take over prominent Twitter accounts in simultane... by WrtCdEvrydy on Wednesday July 15, 2020 @06:17PM (#23852916)
If you can't get caught, it's just some free money... depends on moral compass...

Maybe we'll get a leetcode question out of it, how much should you risk your career for after taking a job at a FAANG?

Re:Hackers take over prominent Twitter accounts in simultane... by therein on Wednesday July 15, 2020 @06:58PM (#23853414)
More than 130k, that's for sure. It would have to be orders of magnitude larger.
Re:Hackers take over prominent Twitter accounts in simultane... by swagonomixxx on Wednesday July 15, 2020 @07:12PM (#23853561)
That would be hilarious and full of irony.

Given that most FANGers are obsessed with cash, I'm pretty sure they'd say "yes" to risking their career for some sweet BTC.

Re:Hackers take over prominent Twitter accounts in simultane... by ChuckMcM on Wednesday July 15, 2020 @08:28PM (#23854273)
I would be surprised if it were an engineer, but not everyone who is employed would be an engineer. When I was at Google two fairly high profile incidents were enacted by contractors (one in the IT "TechStop" group and one a data center tech)
Re:Hackers take over prominent Twitter accounts in simultane... by alberts00 on Wednesday July 15, 2020 @05:51PM (#23852510)
It might as well be an employee whose devices were compromised.
Re:Hackers take over prominent Twitter accounts in simultane... by zelly on Wednesday July 15, 2020 @05:49PM (#23852471)
There is no way Twitter depends on Github CI/CD to push updates. I refuse to believe this.
Re:Hackers take over prominent Twitter accounts in simultane... by sleepybrett on Wednesday July 15, 2020 @06:00PM (#23852636)
If they did, they would be running the self hosted option.
Re:Hackers take over prominent Twitter accounts in simultane... by suzzer99 on Wednesday July 15, 2020 @06:03PM (#23852708)
That twitter buildspec.yml must be HUGE!
Re:Hackers take over prominent Twitter accounts in simultane... by whoisjuan on Wednesday July 15, 2020 @05:21PM (#23852044)
And it seems that it's still compromised. Tweets get deleted and then they re-appear.
Re:Hackers take over prominent Twitter accounts in simultane... by Narretz on Wednesday July 15, 2020 @05:59PM (#23852625)
30 minutes later and it still happens, just after "Elon" posted a normal message. Hopefully most users have caught on to the scam by now.
Re:Hackers take over prominent Twitter accounts in simultane... by epanchin on Wednesday July 15, 2020 @07:23PM (#23853671)
Crazy twitter can’t pin a warning to everyone’s feed... or just kill the site.
Re:Hackers take over prominent Twitter accounts in simultane... by manquer on Wednesday July 15, 2020 @07:44PM (#23853891)
they have killed tweeting from verified accounts and also blocking tweeting that BTC address to mitigate the damage.
Re:Hackers take over prominent Twitter accounts in simultane... by slezyr on Wednesday July 15, 2020 @05:34PM (#23852229)
> All Bitcoin sent to my address below will be sent back doubled. If you send $1,000, I will send back $2,000!

> Only doing this for the next 30 minutes! Enjoy.

No, it's hacker's doing, they need to keep timestamps updated

Re:Hackers take over prominent Twitter accounts in simultane... by jacquesm on Wednesday July 15, 2020 @05:40PM (#23852335)
It may be that the github outage is related. Too many companies rely on 3rd party hosted services for their deployment workflow. Even ones you really would not expect.
Re:Hackers take over prominent Twitter accounts in simultane... by rvz on Wednesday July 15, 2020 @05:37PM (#23852285)
> Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

Imagine that. At that point it would be more secure to self-host the code off of GitHub to push that critical fix Twitter sorely needs right now.

Its still on going as we type.

Re:Hackers take over prominent Twitter accounts in simultane... by kelnos on Wednesday July 15, 2020 @10:51PM (#23855213)
> ... and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

I sincerely doubt Twitter depends on github.com. Github's enterprise version runs on your own infra, self-managed, and if Twitter uses GH at all, that'd be the version they use.

Re:Hackers take over prominent Twitter accounts in simultane... by kyleee on Wednesday July 15, 2020 @05:21PM (#23852041)
boy I sure hope we get a juicy post mortem, this is quite a scam
Re:Hackers take over prominent Twitter accounts in simultane... by misnome on Wednesday July 15, 2020 @05:35PM (#23852247)
I don’t think I’ve ever looked forwards to a postmortem so much, so many possibilities.
Re:Hackers take over prominent Twitter accounts in simultane... by tornato7 on Wednesday July 15, 2020 @09:25PM (#23854691)
Twitter hasn't released postmortems for other incidents, so I wouldn't hold out hope
Re:Hackers take over prominent Twitter accounts in simultane... by Sebb767 on Wednesday July 15, 2020 @07:32PM (#23853782)
I'm just glad the fallout from this isn't nuclear, to be honest.
Re:Hackers take over prominent Twitter accounts in simultane... by libraryatnight on Wednesday July 15, 2020 @06:17PM (#23852922)
and yet lots of technical type Twitter personalities tweeting like each individual user got popped. "OMG THEY GOT MR BEAST!" No, they got twitter. I mean its possible, we do not know, but this "They GOT so and so" thing is annoying at this point.
Re:Hackers take over prominent Twitter accounts in simultane... by granzymes on Wednesday July 15, 2020 @05:34PM (#23852219)
Twitter almost certainly self-hosts GitHub, no?
Re:Hackers take over prominent Twitter accounts in simultane... by one2know on Wednesday July 15, 2020 @05:45PM (#23852410)
Don't know, but current corporate dogma is to not host anything, including using third party auth provider which is like giving away their customer list.
Re:Hackers take over prominent Twitter accounts in simultane... by fouc on Wednesday July 15, 2020 @06:51PM (#23853335)
Many larger corporations have strict rules on keeping things like their source code in-house, so that means no external services for code reviews or CI, etc.
Re:Hackers take over prominent Twitter accounts in simultane... by justinmeiners on Wednesday July 15, 2020 @05:52PM (#23852515)
> current corporate dogma is to not host anything

Do you mean that they prefer using managed services? Or do you mean that the services managed by their internal IT utlize AWS/etc for servers as opposed to on premises.

Re:Hackers take over prominent Twitter accounts in simultane... by one2know on Wednesday July 15, 2020 @08:04PM (#23854054)
They prefer to use managed services through third parties. Even to their detriment as those third parties basically own their customer lists. If for instance the auth provider goes out of businesses the business would end. Same with code, most new companies are using something like gitlab or github. But it's not as dangerous as many people will have a copy of the source code cloned.
Re:Hackers take over prominent Twitter accounts in simultane... by Spooky23 on Wednesday July 15, 2020 @10:19PM (#23855032)
The former. It’s pretty insane.

Like you are able to launch Adobe Photoshop because Okta says so. :)

Re:Hackers take over prominent Twitter accounts in simultane... by brentm on Wednesday July 15, 2020 @06:00PM (#23852656)
I wonder if this is hack in the sense that the account passwords were compromised or that the system itself was compromised in a way that would allow the attacker to tweet from any account.
Re:Hackers take over prominent Twitter accounts in simultane... by Darkphibre on Wednesday July 15, 2020 @07:01PM (#23853451)
I'd guess that Elon's first reaction would be to change the password. Since it's still happening, it's probably back-end.
Re:Hackers take over prominent Twitter accounts in simultane... by kerng on Wednesday July 15, 2020 @05:36PM (#23852256)
Maybe a front end/OAuth issue - those are not uncommon either. Will be interesting to learn more.

Also begs the question, who is liable in such cases....

Re:Hackers take over prominent Twitter accounts in simultane... by Scoundreller on Wednesday July 15, 2020 @05:38PM (#23852304)
Could be front end, since all of these cite "Twitter Web App" as the source. Never anything else (unless you're a low-follower troll).
Re:Hackers take over prominent Twitter accounts in simultane... by Geee on Wednesday July 15, 2020 @07:06PM (#23853498)
Maybe a popular browser extension? Would explain why it seems to target tech people.
Re:Hackers take over prominent Twitter accounts in simultane... by CleanCoder on Wednesday July 15, 2020 @05:43PM (#23852371)
Liable for the account being compromised? Twitter. Liable for people sending money? People sending money.
Re:Hackers take over prominent Twitter accounts in simultane... by gowld on Wednesday July 15, 2020 @05:51PM (#23852497)
How much will Twitter pay me for it's liability of my hacked account?
Re:Hackers take over prominent Twitter accounts in simultane... by SheinhardtWigCo on Wednesday July 15, 2020 @06:06PM (#23852752)
The same amount you pay them.
Re:Hackers take over prominent Twitter accounts in simultane... by ragerino on Thursday July 16, 2020 @07:15AM (#23857748)
It seems like the devs at Twitter are clueless, how this happened.

The hackers could be deep in Twitters systems, eventually even have even someone working at Twitter, or it's a result of a new yet unknown password list or phishing attempt.

Re:Hackers take over prominent Twitter accounts in simultane... by ragerino on Thursday July 16, 2020 @07:27AM (#23857837)
Just saw this https://www.vice.com/en_us/article/jgxd3d/twitter-insider-ac...

Means they had someone inside Twitter.

Re:Hackers take over prominent Twitter accounts in simultane... by maps7 on Thursday July 16, 2020 @03:52AM (#23856788)
Why can twitter staff tweet under people's accounts? How does that make sense?
Re:Hackers take over prominent Twitter accounts in simultane... by gsich on Wednesday July 15, 2020 @07:28PM (#23853733)
Selfhost. If you rely on Github for your service you are rightfully doomed.
Re:Hackers take over prominent Twitter accounts in simultane... by gowld on Wednesday July 15, 2020 @05:47PM (#23852446)
Twitter depends on GitHub?
Re:Hackers take over prominent Twitter accounts in simultane... by sidcool on Thursday July 16, 2020 @07:45AM (#23857974)
Is the root cause and attack vector known?
Re:Hackers take over prominent Twitter accounts in simultane... by vmception on Wednesday July 15, 2020 @05:30PM (#23852174)
probably a social media manager api keys
Re:Hackers take over prominent Twitter accounts in simultane... by celticninja on Wednesday July 15, 2020 @05:36PM (#23852257)
I can't see that bill gates, Elon musk and every cryptocurrency channel using the same manager. This looks like something closer to a Twitter hack than an intermediary, especially with the the reposting after deletion.
Re:Hackers take over prominent Twitter accounts in simultane... by kristofferR on Wednesday July 15, 2020 @05:35PM (#23852237)
No way, it's way too widepread and would be shut down by now.

Elon Musk, Barack Obama and Wiz Khalifa just tweeted the scam again this very minute, more than an hour since it started. This is backend access, Twitter can't figure out how to shut it down.

Re:Hackers take over prominent Twitter accounts in simultane... by jacquesm on Wednesday July 15, 2020 @05:42PM (#23852352)
They could have shut these bitcoin giveaway scams down with a single regex a year ago when they first showed up. They let them go and this is the price they will pay. Let's see if someone is going to sue Twitter because 'verified' to be Bill Gates is meaningless now.
Re:Hackers take over prominent Twitter accounts in simultane... by saagarjha on Wednesday July 15, 2020 @05:43PM (#23852381)
This is much, much worse than a typical Bitcoin scam.
Re:Hackers take over prominent Twitter accounts in simultane... by jacquesm on Wednesday July 15, 2020 @05:55PM (#23852578)
It has the same textual footprint. These tweets should be quarantined automatically until expressly checked by a human being.
Re:Hackers take over prominent Twitter accounts in simultane... by neurostimulant on Wednesday July 15, 2020 @05:37PM (#23852275)
But when you post a tweet via api, the tweet will include the app's name at the bottom? The screenshot in the article has "Twitter Web App" at the bottom.
Re:Hackers take over prominent Twitter accounts in simultane... by throwaway43234 on Wednesday July 15, 2020 @06:07PM (#23852777)
Its not hard to believe that a group with the ability to hijack the twitter accounts of some of the world's most influential people could also hijack the "posted by" metadata.
Re:Hackers take over prominent Twitter accounts in simultane... by lhoff on Wednesday July 15, 2020 @06:41PM (#23853236)
I guess the previous post was seen as a argument against compromised API keys.
Re:Hackers take over prominent Twitter accounts in simultane... by throwaway43234 on Wednesday July 15, 2020 @06:53PM (#23853351)
right, it's not only compromised API keys, but it could be that with something else.
Re:Hackers take over prominent Twitter accounts in simultane... by MattGaiser on Wednesday July 15, 2020 @05:34PM (#23852226)
Do that many accounts use the same social media manager?
Re:Hackers take over prominent Twitter accounts in simultane... by vmception on Wednesday July 15, 2020 @06:12PM (#23852845)
I think many people have try several of them before settling on one for their use case, and don't revoke the OAuth.
Re:Hackers take over prominent Twitter accounts in simultane... by mtzaldo on Wednesday July 15, 2020 @05:47PM (#23852447)
I know hootsuite is a very popular app for managing the social media accounts.
Re:Hackers take over prominent Twitter accounts in simultane... by bfm on Wednesday July 15, 2020 @08:07PM (#23854079)
And their status page shows their integration with Twitter is having issues now https://web.archive.org/web/20200716000356/https://status.ho...
Re:Hackers take over prominent Twitter accounts in simultane... by lqet on Wednesday July 15, 2020 @05:40PM (#23852327)
> Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

Is Twitter really using GitHub internally (even self-hosted)?

Re:Hackers take over prominent Twitter accounts in simultane... by boarnoah on Wednesday July 15, 2020 @05:43PM (#23852370)
Is there even a self hosted Github? AFAIK there is no public offering of the sort.
Re:Hackers take over prominent Twitter accounts in simultane... by cgk on Wednesday July 15, 2020 @05:46PM (#23852436)
Github has offered this for years: https://github.com/enterprise MIT used it for a long time.
Re:Hackers take over prominent Twitter accounts in simultane... by AsyncAwait on Wednesday July 15, 2020 @05:45PM (#23852412)
There's (was?) an on-premises enterprise version.
Re:Hackers take over prominent Twitter accounts in simultane... by dylz on Wednesday July 15, 2020 @05:46PM (#23852427)
Re:Hackers take over prominent Twitter accounts in simultane... by ry4nolson on Wednesday July 15, 2020 @05:45PM (#23852407)
github enterprise i believe can be onprem
Re:Hackers take over prominent Twitter accounts in simultane... by vehementi on Wednesday July 15, 2020 @05:48PM (#23852456)
Yes, it can.
Re:Hackers take over prominent Twitter accounts in simultane... by techntoke on Wednesday July 15, 2020 @08:26PM (#23854256)
They must do some crazy code obfuscation or security though, because the source hasn't leaked.