News for hackers. Stuff that matters.

A comment on Twitter names famed hacker 'Mudge' as head of security. Parent comment

Re:Twitter names famed hacker 'Mudge' as head of security by twox2 on Tuesday November 17, 2020 @10:23AM (#25124775)
At the end of the day most compromises that aren't state sponsored happen using low-tech methods like sim-swapping and spear phishing.
[ Parent | on HN ]
Re:Twitter names famed hacker 'Mudge' as head of security by bawolff on Tuesday November 17, 2020 @02:06PM (#25128149)
Honestly, that's the high tech end of what happens.

Most compromises are credential stuffing.

[ Parent | on HN ]
Re:Twitter names famed hacker 'Mudge' as head of security by twox2 on Wednesday November 18, 2020 @01:12PM (#25140175)
Yeah, for sure. It's bizarre that it's not standard practice to just blocklist previously used credentials from already documented leaks.
[ Parent | on HN ]