News for hackers. Stuff that matters.
Re:Hackers take over prominent Twitter accounts in simultane... by actuator on Wednesday July 15, 2020 @05:20PM (#23852029)
Yeah, I would have guessed a platform like Twitter would have anti-abuse systems with at least term filters.
Re:Hackers take over prominent Twitter accounts in simultane... by Barrin92 on Wednesday July 15, 2020 @05:36PM (#23852253)
At this point I'd advocate for a huge red button or a gong that someone can smash and it just halts the platform
Re:Hackers take over prominent Twitter accounts in simultane... by jsnell on Wednesday July 15, 2020 @05:48PM (#23852454)
Kill-switches are dangerous, since they get built and never get used. I work on an anti-abuse system. It caused two user-visible outages in the last couple of years, one of which was an accidentally triggered kill-switch that had not been used in years and had some unexpected side-effects.

So I can see why they wouldn't have one of those pre-built for setting the entire site to a read-only mode. It's not at all obvious whether the risks are larger with or without that capability built in. But a spam filter with configs you can push quickly seems like table stakes, and should be a system that gets excercised weekly if not daily.

Re:Hackers take over prominent Twitter accounts in simultane... by castratikron on Wednesday July 15, 2020 @07:10PM (#23853538)
"This is a test of the emergency broadcast system..."
Re:Hackers take over prominent Twitter accounts in simultane... by dmix on Wednesday July 15, 2020 @07:17PM (#23853611)
"Press okay if you want to enable cookies"
Re:Hackers take over prominent Twitter accounts in simultane... by MattGaiser on Wednesday July 15, 2020 @05:56PM (#23852588)
You don't need to kill the entire site. Just the ability to post new messages.
Re:Hackers take over prominent Twitter accounts in simultane... by actuator on Wednesday July 15, 2020 @06:03PM (#23852703)
They are somewhat right. I have built these feature flag/kill switch kind of things and they rarely get tested. Over time it might not even work or have other side effects.

On the other hand, a product like Twitter having some content moderation filter seems very likely.

Re:Hackers take over prominent Twitter accounts in simultane... by MattGaiser on Wednesday July 15, 2020 @06:12PM (#23852847)
> they rarely get tested.

One of the largest problems of our industry.

Re:Hackers take over prominent Twitter accounts in simultane... by catalogia on Wednesday July 15, 2020 @06:10PM (#23852828)
> Kill-switches are dangerous, since they get built and never get used.

What about the circuit breakers at their data centers? Serious question..

Re:Hackers take over prominent Twitter accounts in simultane... by Nextgrid on Wednesday July 15, 2020 @06:24PM (#23853010)
Even if there is no "huge red button", at this stage it should be easy to reconfigure their load balancers to just return 500 for all endpoints or even take down their DNS records and essentially shut down the platform until they sort it out.
Re:Hackers take over prominent Twitter accounts in simultane... by Lobosque on Wednesday July 15, 2020 @09:01PM (#23854509)
This seems like a pretty big red button.
Re:Hackers take over prominent Twitter accounts in simultane... by Nextgrid on Wednesday July 15, 2020 @09:49PM (#23854855)
If there was no other option I would personally go as far as pulling the power, data loss be damned.

This is in many ways worse than your typical large-scale malware or ransomware crisis (like the one that hit Maersk for example).

Malware or ransomware attacks are typically limited to internal company impact with potential stolen data (which you usually discover after it’s been stolen already).

This current situation however has ongoing external impact for as long as the platform is kept online and could even have geopolitical repercussions if a certain high-profile “real” account ends up affected.

The fact that they left the platform online for so long with an ongoing, uncontained attack is absolutely irresponsible.