News for hackers. Stuff that matters.
Re:An update on our security incident by Bx6667 on Saturday July 18, 2020 @02:49AM (#23879579)
The idea that someone would opt out of downloading Elon masks or Jeff bezos’ DMs is insane. Completely and perfectly insane. Not to mention the other people. Even if just in terms of profit, clearly the dms of the richest man in the world have enough value to just click download. It seems like the probability of this guy passing it up due to lack of interest is very small. Slightly more likely is that he was overwhelmed by the massive implications of having this access and simply didn’t think to do it in the rush to do something before his source chickened out or realized what was going on. And most likely to me is that he simply couldn’t do it because of a higher level of security associated with verified accounts, hence why none of the accounts were verified. He wasn’t able to do anything with trumps twitter so I suspect that for certain high profile accounts, there is a much higher level of security that this guys source couldn’t override.
Re:An update on our security incident by kjaftaedi on Saturday July 18, 2020 @03:08AM (#23879649)
I'm not sure what you're thinking, but it's perfectly reasonable.

People like you're talking about don't communicate anything of value over twitter. Bezos only follows his ex-wife who doesn't follow him back, barely uses twitter and would be unlikely to have any DMs at all. After the saudi hack, I would be surprised if he has much of anything installed on his phone.

The only real reason to hack celebrity accounts in this instance, and which they should have done, would be to deflect attention from the accounts they actually went after.

Re:An update on our security incident by drawfloat on Saturday July 18, 2020 @03:15AM (#23879669)
I wouldn't be so sure with Musk, for example. He even met his partner via DM.
Re:An update on our security incident by ehsankia on Saturday July 18, 2020 @04:04AM (#23879875)
Yeah, Musk spends a lot of time on Twitter, his DMs are def loaded, but I also agree that Bezos' is definitely empty. Still, I'm sure there are some verified accounts they would've downloaded the data from if they could, so it makes me think they couldn't easily.
Re:An update on our security incident by fastball on Saturday July 18, 2020 @04:49AM (#23880045)
> Bezos only follows his ex-wife who doesn't follow him back

I honestly didn't believe you. But it's true. That's... kinda weird.

Re:An update on our security incident by unnouinceput on Saturday July 18, 2020 @09:12AM (#23881195)
Probably a dead account he no longer access it before divorce, hence the awkward status
Re:An update on our security incident by fastball on Saturday July 18, 2020 @12:02PM (#23882286)
Hmm, I don't think so. The account has tweeted as recently as Feb of this year, but his divorce was finalized in July 2019.
Re:An update on our security incident by weinzierl on Saturday July 18, 2020 @04:40AM (#23880021)
I always thought high profile accounts are run by media teams. I doubt the account owners know the credentials themselves or have direct access in most cases.
Re:An update on our security incident by konschubert on Saturday July 18, 2020 @10:31AM (#23881606)
I’m pretty positive Elon’s account is NOT run by a media team :D
Re:An update on our security incident by api on Saturday July 18, 2020 @12:41PM (#23882608)
His media team works behind the counter at the pot dispensary.
Re:An update on our security incident by rodgerd on Saturday July 18, 2020 @06:22AM (#23880382)
If you think Musk or Trump have any sense of restraint, much less opsec, do I ever have a bridge to sell you.
Re:An update on our security incident by rsj_hn on Saturday July 18, 2020 @03:18AM (#23879682)
Where do you think you will find more info -- the DMs of a PR account or the someone's private alt? Or the DMs of a twitter celebrity or the DMs of a hedge fund manager or member of the board of directors of a bank?
Re:An update on our security incident by notahacker on Saturday July 18, 2020 @06:31AM (#23880413)
I suspect that hedge fund managers and bank board members are considerably less likely to use DMs as a means of primary communication than Twitter celebrities. Private alt accounts would be very interesting, but you'd need to know who they are....
Re:An update on our security incident by ironSkillet on Saturday July 18, 2020 @02:16PM (#23883476)
I'm unfamiliar with Twitter's interface but, isn't it entirely possible that things like DMs are available (when you're able to log in as the account in question) and scrape-able without directly using the "download twitter data" tool?
Re:An update on our security incident by LoSboccacc on Saturday July 18, 2020 @03:05AM (#23879639)
the it's even weirder because this looks something that required a certain amount of planning