4 ms·
To be fair, it's not clear how hard it is to hack twitter. The site falls over all the time all by itself. Granted, they briefly managed to serve some content
by seldo 17y ago
To be fair, it's not clear how hard it is to hack twitter. The site falls over all the time all by itself.
Granted, they briefly managed to serve some content as twitter, so it does look like a genuine hack rather than merely a DDoS or something.
[edit] TechCrunch is reporting it's a DNS redirection attack, so their machines were probably never compromised (your password is safe). It also probably means the site will not be back up for a while, as it will take time for the DNS to propagate everywhere even after they fix it.
[edit 2] ...aaaand it came back up 3 seconds later.
- rglullis 17y agoI don't think we can claim that "our passwords are safe". What about twitter clients that store your password to fetch your tweets automatically? Wouldn't they be posting your account password to http://twitter.com http://twitter.com, or twitter only uses HTTPS? If there is any way to login using standard HTTP, the same server that is used to deface the website can be collecting tons of user credentials. And even if twitter uses only HTTPS, what's the policy of twitter clients in regard to bad certificates?