Twitter Hacked – 250,000 User Accounts Potentially Compromised

Re:Twitter Hacked – 250,000 User Accounts Potentially Compro... by wiredfool on Friday February 01, 2013 @07:25PM (#5154456)

Me too, and I've never attached an app to twitter. (I've got an account that I basically have signed into 3 or 4 times in 5 years). I'm curious why my username came up as being compromised, unless they're doing something sneaky about updating all passwords older than x yrs old.

edit: The attacker got salted password hashes. That explains it.

[ Parent | on HN ]

Re:Twitter Hacked – 250,000 User Accounts Potentially Compro... by 0x0 on Friday February 01, 2013 @07:27PM (#5154465)

Maybe they stopped the hackers in the middle of dumping the database and they only got away with the earliest accounts created.

[ Parent | on HN ]

Re:Twitter Hacked – 250,000 User Accounts Potentially Compro... by kape on Friday February 01, 2013 @07:33PM (#5154493)

Got also the message. My account was created in January 2007 and user id is about 700k. So this could be the case.

[ Parent | on HN ]

Re:Twitter Hacked – 250,000 User Accounts Potentially Compro... by wiredfool on Friday February 01, 2013 @07:30PM (#5154476)

Iirc, my usernumber is ~ 700k. So, probably an early version of the hash, unless they silently upgrade on logins.

[ Parent | on HN ]

Re:Twitter Hacked – 250,000 User Accounts Potentially Compro... by irq on Friday February 01, 2013 @08:03PM (#5154603)

I just got the reset email, and my uid is in the 3.8 million range, created 4/2007.

[ Parent | on HN ]

Re:Twitter Hacked – 250,000 User Accounts Potentially Compro... by wallywax on Friday February 01, 2013 @07:31PM (#5154480)

Could be. My account dates from 2006, and my userid is sub 50k.

[ Parent | on HN ]

Re:Twitter Hacked – 250,000 User Accounts Potentially Compro... by taligent on Friday February 01, 2013 @08:26PM (#5154684)

Or more likely the database is sharded and they just compromised those physical machines.

[ Parent | on HN ]

Re:Twitter Hacked – 250,000 User Accounts Potentially Compro... by 0x0 on Friday February 01, 2013 @08:55PM (#5154775)

That sounds odd, 250k out of 500m sounds like way too little data for even a single shard, no? And why would only a single shard be vulnerable?

[ Parent | on HN ]