Slashdot Mirror
Yahoo and Twitter CEOs Have Their Twitter Accounts Compromised
The man who sent Twitter's very first public tweet now also becomes the first Twitter CEO to have his own Twitter account compromised. An anonymous reader quotes a report from Digital Trends about this weekend's wave of high-profile attacks:
At 2:50 a.m. ET, a tweet reading, "Hey, its OurMine, we are testing your security" and linking to the group's website was briefly posted, and while it was soon deleted, identical tweets continued to appear... The group has previously taken over other social media accounts, including Google's Sundar Pichai's Quora account, and Mark Zuckerberg's Instagram, LinkedIn, Pinterest, and Twitter accounts...
Dorsey also wasn't the only tech heavy hitter whose Twitter account was breached during that 24-hour period. Yahoo CEO Marissa Mayer and venture capitalist Vinod Khosla also saw breaches to their accounts, both of which were attributed to OurMine.
The Tweets may have come from Vine, according to Digital Trends, "which suggests that Dorsey was either using an old or shared password on the video network, or had otherwise connected his account to a compromised service...it's certainly alarming that a man who ostensibly is more aware than most of security protocols (especially on Twitter) fell victim to such an attack..."
Dorsey also wasn't the only tech heavy hitter whose Twitter account was breached during that 24-hour period. Yahoo CEO Marissa Mayer and venture capitalist Vinod Khosla also saw breaches to their accounts, both of which were attributed to OurMine.
The Tweets may have come from Vine, according to Digital Trends, "which suggests that Dorsey was either using an old or shared password on the video network, or had otherwise connected his account to a compromised service...it's certainly alarming that a man who ostensibly is more aware than most of security protocols (especially on Twitter) fell victim to such an attack..."
AAC gets first post. Sky is blue. Rain is wet.
Claiming you are testing security by breaking into companies' networks to advertise your product is not a great idea.
Real lawyers write in C++
If only Twitter supported 2-factor authentication methods other than SMS to a unique phone number...
Many of us put our trust in businesses and governments to keep us safe. We expect that the personal information we give to businesses and governments won't be compromised or used against us. We trust them to be responsible and honest with us, keeping their promises and acting honorably. Most of us do that to some degree, even if our trust is placed in things like open source software.
I have news for you: no matter what institutions of man you place your trust in, it is misplaced. Man cannot be trusted to do the right thing. Man, by himself, is only capable of evil, not good. If we want to truly be able to trust, we must place that trust in God and his only son, Jesus Christ. If we attempt to place our trust in anything built by man, we will only be disappointed.
If you'd like to place your trust in Jesus Christ, you must repent and be born again. When you trust in Jesus Christ, the institutions of man will no longer matter and you will invest in things that matter in eternity. If you want everlasting life, you must accept Jesus Christ as your personal savior and you must be born again. There is no other way.
- Pastor Mitch
It would be hilarious if they called support claiming to be Jack Dorsey and got the CSR to reset the password.
The CSRs are really the weak link for so many of these hacks. All of the two factor and out of band authentication in the world can't help you if the level 1 phone support just hands your account over to anybody who can do some basic research.
I read the internet for the articles.
it's certainly alarming that a man who ostensibly is more aware than most of security protocols (especially on Twitter) fell victim to such an attack.
Perhaps he's simply more aware than most of how useless Twitter really is and wasn't too concerned about securing his account.
$ sudo apt-get install pwgen
$ pwgen 18
All the password security you need for most purposes, at your fingertips. There's no reason to use shared and/or easily guessable passwords, except laziness.
Twitter is for twits. And it looks like the security of Twitter is going into the shitter
Why would anyone expect a CEO—even of a tech company—to have any idea about computer security? That's like expecting a POTUS to have a deep knowledge of battlefield strategy, simply because they're Commander-in-Chief of the US Armed Forces.
google goes into lockdown mode if you so much as sneeze while logging in, requiring a security question response or other bullshit; even if you're on the same fucking computer, using the same fucking browser, and are on the same fucking ip address as you were last time you logged-in successfully. .
Hey, its OurMine, we are testing your security
---- MISSING MISCELLANEOUS DATA SEGMENT --- [sigdash] trolololol
There are no social media accounts they are social network accounts.
Get it fucking right!
even google doesn't let you use google authenticator without activating your phone number first.
The differences between the two are that Google is more likely to allow landlines, and Google is more likely to allow authentication on multiple accounts per phone number.
Is how twitter hides tons of filtering options until you become a premium verified user
They are Israel state-sponsored. They are flexing their muscles against the USA government because they see weakness right now in their intelligence services. The CIA have been going rogue to the point there are barely any field agents left.
He's such a dweeb!
But i don't want either one to have my number. And for non-us citizens google voice is no option either ...