News for hackers. Stuff that matters.

A comment on An incident impacting 5M accounts and private information on Twitter. Parent comment

Re:An incident impacting 5M accounts and private information... by munchler on Tuesday August 09, 2022 @03:48PM (#32403249)
5,000,000 seconds is about two months. The attackers simply might not have had enough time to check more numbers than that.

(Assumption: They were checking only one number per second, either to avoid detection or because they were rate-limited.)

[ Parent | on HN ]
Re:An incident impacting 5M accounts and private information... by onionisafruit on Wednesday August 10, 2022 @12:31AM (#32407877)
What percent of mobile numbers do you think are associated with twitter accounts? I don’t know, but it wouldn’t surprise me to find out they had to try 500M or more numbers to find 5M accounts.
[ Parent | on HN ]
Re:An incident impacting 5M accounts and private information... by herbst on Wednesday August 10, 2022 @03:59AM (#32409007)
We'd need to actually test it. But I believe the finding ratio would be even lower than 1 in 100.
[ Parent | on HN ]
Re:An incident impacting 5M accounts and private information... by rolivercoffee on Thursday August 11, 2022 @07:53AM (#32424315)
As of Dec 2020 only 2.3% of active accounts had any form of 2FA enabled [1]

[1] https://www.bleepingcomputer.com/news/security/twitter-revea...

[ Parent | on HN ]