News for hackers. Stuff that matters.

A comment on Ex-Twitter exec blows the whistle, alleging reckless cybersecurity policies. Parent comment

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by shadowgovt on Tuesday August 23, 2022 @10:53AM (#32565775)
Additionally, Twitter collected PII and then did a bad job protecting it. We don't see a phone-numbers-leaked story like this out of Google, which has had 2FA with phone number deployed for years.

Twitter has some 200+ million daily active users and should act like it.

[ Parent | on HN ]
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by blitzar on Tuesday August 23, 2022 @11:10AM (#32566035)
Decide whether people who have your email address or phone number can find and connect with you on Twitter. If you select yes, then someone with l33t skills can "hack" twitter and type in your email / phone number and get your twitter handle (or just put it in their contacts and click a button in the twitter app aka l33t hax0r skills)

The reason there isnt "leak" from google is because they dont offer the functionality to look up your account by your phone number.

[ Parent | on HN ]