Slashdot Mirror
Yahoo and Twitter CEOs Have Their Twitter Accounts Compromised
The man who sent Twitter's very first public tweet now also becomes the first Twitter CEO to have his own Twitter account compromised. An anonymous reader quotes a report from Digital Trends about this weekend's wave of high-profile attacks:
At 2:50 a.m. ET, a tweet reading, "Hey, its OurMine, we are testing your security" and linking to the group's website was briefly posted, and while it was soon deleted, identical tweets continued to appear... The group has previously taken over other social media accounts, including Google's Sundar Pichai's Quora account, and Mark Zuckerberg's Instagram, LinkedIn, Pinterest, and Twitter accounts...
Dorsey also wasn't the only tech heavy hitter whose Twitter account was breached during that 24-hour period. Yahoo CEO Marissa Mayer and venture capitalist Vinod Khosla also saw breaches to their accounts, both of which were attributed to OurMine.
The Tweets may have come from Vine, according to Digital Trends, "which suggests that Dorsey was either using an old or shared password on the video network, or had otherwise connected his account to a compromised service...it's certainly alarming that a man who ostensibly is more aware than most of security protocols (especially on Twitter) fell victim to such an attack..."
Dorsey also wasn't the only tech heavy hitter whose Twitter account was breached during that 24-hour period. Yahoo CEO Marissa Mayer and venture capitalist Vinod Khosla also saw breaches to their accounts, both of which were attributed to OurMine.
The Tweets may have come from Vine, according to Digital Trends, "which suggests that Dorsey was either using an old or shared password on the video network, or had otherwise connected his account to a compromised service...it's certainly alarming that a man who ostensibly is more aware than most of security protocols (especially on Twitter) fell victim to such an attack..."
AAC gets first post. Sky is blue. Rain is wet.
Claiming you are testing security by breaking into companies' networks to advertise your product is not a great idea.
Real lawyers write in C++
If only Twitter supported 2-factor authentication methods other than SMS to a unique phone number...
Sorry Mitch, I like eating shellfish and wearing wool socks with leather shoes.
It would be hilarious if they called support claiming to be Jack Dorsey and got the CSR to reset the password.
The CSRs are really the weak link for so many of these hacks. All of the two factor and out of band authentication in the world can't help you if the level 1 phone support just hands your account over to anybody who can do some basic research.
I read the internet for the articles.
it's certainly alarming that a man who ostensibly is more aware than most of security protocols (especially on Twitter) fell victim to such an attack.
Perhaps he's simply more aware than most of how useless Twitter really is and wasn't too concerned about securing his account.
Sorry Mitch, I like eating shellfish and wearing wool socks with leather shoes.
I see you like to keep your feet warm. Well, they'll be nice and toasty IN HELL!!
- Pastor Mitch
$ sudo apt-get install pwgen
$ pwgen 18
All the password security you need for most purposes, at your fingertips. There's no reason to use shared and/or easily guessable passwords, except laziness.
Twitter is for twits. And it looks like the security of Twitter is going into the shitter
Yeah but wtf is Jesus going to do about my Twitter security?
Sincerely,
- Pastor Bitch
Why would anyone expect a CEO—even of a tech company—to have any idea about computer security? That's like expecting a POTUS to have a deep knowledge of battlefield strategy, simply because they're Commander-in-Chief of the US Armed Forces.
Is butt fucking ok if I don't do it on Sunday?
google goes into lockdown mode if you so much as sneeze while logging in, requiring a security question response or other bullshit; even if you're on the same fucking computer, using the same fucking browser, and are on the same fucking ip address as you were last time you logged-in successfully. .
Hey, its OurMine, we are testing your security
---- MISSING MISCELLANEOUS DATA SEGMENT --- [sigdash] trolololol
There are no social media accounts they are social network accounts.
Get it fucking right!
even google doesn't let you use google authenticator without activating your phone number first.
The differences between the two are that Google is more likely to allow landlines, and Google is more likely to allow authentication on multiple accounts per phone number.
Is how twitter hides tons of filtering options until you become a premium verified user
They are Israel state-sponsored. They are flexing their muscles against the USA government because they see weakness right now in their intelligence services. The CIA have been going rogue to the point there are barely any field agents left.
He's such a dweeb!
But i don't want either one to have my number. And for non-us citizens google voice is no option either ...