Slashdot Mirror
Google CEO Sundar Pichai's Quora Account Hacked (thenextweb.com)
Google CEO Sundar Pichai is the latest high-profile victim of a hacking group called OurMine. Earlier today, the group managed to get hold of Pichai's Quota account, which in turn, gave them access to his Twitter feed as well. In a statement to The Next Web, the group said that their intention is to just test people's security, and that they never change the victim's passwords. Looking at the comments they left after hacking Pichai's account, it is also clear that OurMine is promoting its security services. The same group recently also hacked Facebook CEO Mark Zuckerberg's Twitter and Pinterest accounts.
... reigns :)
I'm always amused when I hear about Quora. I guess when you've raised an absurd amount of money you can last a long time. Have the people working there ventured out of Facebook onto the wild west of the web yet? That's what it seems like, a web site built by people who have never used the web.
Personally, I got so fed up with their B.S. I mapped quora.com to 127.0.0.1 so their site frustrates me no longer. I wish them the best of luck.
Which is it, Quora (title) or Quota (summary)?
How do I CEO?
How can I make employees work for less money?
Should I buy nest thermometer?
How to stop Google(tm) from blocking furry porn image search?
http://thenextweb.com/insider/2016/01/28/how-the-fbi-became-the-worlds-largest-distributor-of-child-sex-abuse-imagery/
Let's invoke the unknowable for grate informashiun... or not.
From the Fine Article:
The group also noted that it managed to break into Pichai’s account by exploiting a vulnerability in Quora’s platform – one that it claims to have reported to the company, with no response.
Naturally, if you’re on Quora, you’ll want to change your password right away and make sure it isn’t the same as what you for other services.
So, I understand why you would want to make sure your Quora password is different from other passwords, but what is the point of changing your password on a vulnerable system? Maybe once the vulnerability is fixed... but right away?
Ahhh I get it now. A few days ago, I saw weird messages from Ree Drummond, aka The Pioneer Woman. There were OurMine links in them (which I avoided).
These guys sure are finding their way into a lot of accounts!
Defending IP by destroying access to it? That makes sense, RIAA/MPAA. Go to the corner until you can play nice!
Quora is the worst.
Quora? Quota? Which is it?
If OurMine really wants to show its capability, it should hack Google accounts (Gmail / YouTube / G+, etc.). Thanks to all of the additional signals Google uses (even without 2FA), those are much tougher to get into.
So far it just seems to be demonstrating that (a) accounts protected only by a password aren't very secure and (b) this is especially true of social media accounts, which most people don't see as important enough to justify using a particularly good password.
Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
...that connecting sites, and allowing one site to post to another, increases your attack surface. It also shows that a failure to police these connections can increase risk as older services become "stale."
Twitter, Facebook, et al should introduce security tools to help remind users. "Hey, you haven't used "Cartoon your face" in two years. Would you like to disable access to your account? You can always change it back later."
Please edit article link or title the two are probably not the same...
It's funny how I make sense to others and not myself...
dadada?
Is it just me or does this guy look like an Indian version of Jeff Goldblum?