News for hackers. Stuff that matters.

A comment on Hackers take over prominent Twitter accounts in simultaneous attack. Parent comment

Re:Hackers take over prominent Twitter accounts in simultane... by karlding on Thursday July 16, 2020 @12:48AM (#23855863)
Why do employees even have access to tools that allow them to take over accounts? What use case does having this functionality provide?

Unless they're saying that there's certain people who have raw DB access...

[ Parent | on HN ]
Re:Hackers take over prominent Twitter accounts in simultane... by jsjohnst on Thursday July 16, 2020 @01:30AM (#23856097)
> Why do employees even have access to tools that allow them to take over accounts?

It’s commonly done for customer service purposes at many companies and is heavily audit trailed and access controlled (if the company is doing it right).

[ Parent | on HN ]
Re:Hackers take over prominent Twitter accounts in simultane... by saagarjha on Thursday July 16, 2020 @01:46PM (#23861585)
Guess they didn't do it right here…
[ Parent | on HN ]
Re:Hackers take over prominent Twitter accounts in simultane... by jsjohnst on Saturday July 18, 2020 @11:38AM (#23882084)
I’ve seen nothing so far to indicate they didn’t have heavy audit logging and access control. They just had an employee who knowingly or unknowingly violated company policy.
[ Parent | on HN ]