Twitter confirms zero-day used to expose data of 5.4M accounts

Re:Twitter confirms zero-day used to expose data of 5.4M acc... by hombre_fatal on Saturday August 06, 2022 @09:23AM (#32367857)

I don’t agree. At worst it just introduces a “hey i lost my phone” customer support backdoor that may be weaker than what was there before.

[ Parent | on HN ]

Re:Twitter confirms zero-day used to expose data of 5.4M acc... by kube-system on Saturday August 06, 2022 @11:43PM (#32373716)

It’s not any worse than the “hey I forgot my password” support backdoor.

If you have a support backdoor, it doesn’t matter what technology you use. That’s not a technology problem.

[ Parent | on HN ]

Re:Twitter confirms zero-day used to expose data of 5.4M acc... by rtev on Saturday August 06, 2022 @12:09PM (#32369280)

That’s a security flaw. Backup codes are the fix if you get locked out. Sure, the attacker could find the backup codes, but that can be a challenging task.

[ Parent | on HN ]

Re:Twitter confirms zero-day used to expose data of 5.4M acc... by duckmysick on Saturday August 06, 2022 @12:55PM (#32369670)

And at best? And what about on average?

[ Parent | on HN ]