News for hackers. Stuff that matters.
Re:More than 1k people at Twitter had ability to aid hack of... by throw737 on Friday July 24, 2020 @05:08AM (#23937366)
PGP solved this issue 30 years ago. I can not believe we have this discussion in 2020
Re:More than 1k people at Twitter had ability to aid hack of... by tsimionescu on Friday July 24, 2020 @06:36AM (#23937845)
Except that the problem isn't the signature itself, it's the required infrastructure. Grandma doesn't know how to check The Donald's signature. And, of course, the infrastructure is hard (just check the unfixable problems with the PGP persistent DOS attacks that were discussed a year or 2 ago).
Re:More than 1k people at Twitter had ability to aid hack of... by jameshart on Friday July 24, 2020 @09:24AM (#23939148)
Twitter knows how to check a signature though.
Re:More than 1k people at Twitter had ability to aid hack of... by baaym on Friday July 24, 2020 @06:04AM (#23937657)
I don't tweet much, but when I do I'd love to be able to sign them like I sign my git commits.
Re:More than 1k people at Twitter had ability to aid hack of... by tuxcanfly on Friday July 24, 2020 @11:37AM (#23940760)
We did exactly this for a side project last week:

https://github.com/shabda/tweet-signer

At it's core it's just a spec, so feel free to write your own tools! Suggestions for improving the spec welcome. Please use Github issues