News for hackers. Stuff that matters.
Re:Dutch Ethical Hacker Logs into Trump’s Twitter Account by webel0 on Thursday October 22, 2020 @11:32AM (#24859095)
Trump had a hilariously bad password.

But it appears that twitter has even worse password protection policies.

The account was “hacked” by manually entering several different password ideas into Twitter’s login. The guy got it on the fifth try. Why not lock it down sooner?

Re:Dutch Ethical Hacker Logs into Trump’s Twitter Account by pelliphant on Thursday October 22, 2020 @12:26PM (#24859790)
If I got locked out from any of my accounts for just typing in the wrong password 5 times, a few seconds apart, I would get kinda pissed.
Re:Dutch Ethical Hacker Logs into Trump’s Twitter Account by 0xffff2 on Thursday October 22, 2020 @12:41PM (#24859981)
Because that's a thing that you do regularly? I would like for all of my accounts to at least start massively rate limiting me after 2 or 3 failed attempts. I honestly can't remember the last time I mistyped a password 3 times in a row, especially because it's increasingly rare that I actually have to type the password in by hand.
Re:Dutch Ethical Hacker Logs into Trump’s Twitter Account by Jorsiem on Thursday October 22, 2020 @11:58AM (#24859400)
He had a password you could guess in 5 tries and didnt have 2FA and your blaming Twitter?
Re:Dutch Ethical Hacker Logs into Trump’s Twitter Account by rexreed on Thursday October 22, 2020 @12:30PM (#24859841)
Yes. Twitter shouldn't treat a random person's account the same way they treat someone who wields a ridiculous amount of power and influence.

Typical person: 5 tries and no 2FA, that's ok (I Guess)

President: 5 tries and no 2FA? Twitter shouldn't have applied same ol' same ol' policies.

Sometimes you need to provide differential security. After all, the president doesn't ride around in an unprotected car even though pretty much everyone else does.

Re:Dutch Ethical Hacker Logs into Trump’s Twitter Account by sheepdestroyer on Thursday October 22, 2020 @12:11PM (#24859597)
I find the hacker mischievously hilarious : "The question remains why Trump was using such a weak and simple password. Gevers has a possible explanation: ‘Trump is over 70 – elderly people often switch off two-step verification because they find it too complicated."
Re:Dutch Ethical Hacker Logs into Trump’s Twitter Account by nicoburns on Thursday October 22, 2020 @11:55AM (#24859374)
Before 5 attempts? That's well within the range of a few careless typos. If he'd tried thousands of attempts then sure, but 5 seems completely reasonable.
Re:Dutch Ethical Hacker Logs into Trump’s Twitter Account by xenospn on Thursday October 22, 2020 @12:06PM (#24859527)
If you ever had to manage a site that had user accounts, you'd have realized that locking down access before the 5th attempt is a recipe for an insane amount of user frustration.