Twitter said to be testing two-step security in wake of AP hack

Re:Twitter said to be testing two-step security in wake of A... by fnordfnordfnord on Wednesday April 24, 2013 @08:43AM (#5601121)

Maybe accounts for clients like the AP need not a two-factor system, but perhaps messages should only originate from a whitelisted set of IP addresses.

[ Parent | on HN ]

Re:Twitter said to be testing two-step security in wake of A... by justin on Wednesday April 24, 2013 @08:46AM (#5601138)

This isn't really a good solution for mobile phones which change IP address frequently.

[ Parent | on HN ]

Re:Twitter said to be testing two-step security in wake of A... by fnordfnordfnord on Wednesday April 24, 2013 @09:39AM (#5601353)

Of course it isn't. But I can't imagine why the AP would want anyone to send tweets on their behalf from a mobile phone.

Maybe there isn't a single solution that meets the needs of every user.

[ Parent | on HN ]

Re:Twitter said to be testing two-step security in wake of A... by xxpor on Wednesday April 24, 2013 @10:33AM (#5601637)

>But I can't imagine why the AP would want anyone to send tweets on their behalf from a mobile phone.

Reporters in the field? Especially in a breaking news situation where they want to be first.

[ Parent | on HN ]

Re:Twitter said to be testing two-step security in wake of A... by fnordfnordfnord on Wednesday April 24, 2013 @11:37AM (#5602043)

Are you suggesting that there may be many AP reporters who are authorized to tweet on AP's behalf from the field, implying a total lack of editorial control (and probably a total lack of coordination as well)? I think that is very unlikely. I'd find it very hard to believe that there isn't a very well defined system in place to control all official correspondence.

They have a news desk that is staffed 24hrs per day. Surely a person there could monitor tweets or communications from reporters in the field. I'd even expect there to be a different individual with the keys to the Twittermachine.

[ Parent | on HN ]