4 ms·

I don't know how the account was compromised - but, I notice that Twitter's hardware U2F support is not designed to be very useable. They only allow one securit

I don't know how the account was compromised - but, I notice that Twitter's hardware U2F support is not designed to be very useable. They only allow one security key per account, whereas most users have multiple - one on the keychain, one left in the laptop, etc. So, I bet that high-risk accounts like Jack are not even using this enhanced security mode because of its poor user experience. Compare this to Google where every employee is issued multiple hardware keys, internal systems require security keys, and they put a lot of effort into their "Advanced Protection Program" to make it useable: https://landing.google.com/advancedprotection/ https://landing.google.com/advancedprotection/

deleted 7y ago
[deleted]
sdan 7y ago
I use U2F everywhere and can tell you that Twitter's usability with U2F is really poor. Can't remember why I stopped using U2F on twitter, but it's probably because of that fact that I couldn't use multiple keys.
hammock 7y ago
Twitter and Google are on completely different planes when it comes to what data and access they have to protect.
- whymauri 7y ago
  And? If you want your company to avoid becoming a headline, you need the best security you can afford.
- CobrastanJorji 7y ago
  That's true. One is the President's principle mechanism of speaking with the American public and firing top officials.
  - komali2 7y ago
    If Trump's account got hacked it could quite literally result in the death of millions.
    - deleted 7y ago
      [deleted]
    - ironSkillet 7y ago
      More likely is that some Russian or Chinese hackers would make statements that tank the stock market. While setting up some short positions immediately prior.
      - nexuist 7y ago
        The funny part about this is that if we are to believe Trump is a Manchurian candidate, they already did this with the trade war.
    - bgdnyxbjx 7y ago
      If Trump’s account gets hacked it will be difficult to tell the difference between his normal incoherent ranting.
    - philwelch 7y ago
      I’m just curious how you imagine this happening. @realdonaldtrump tweeting “I HEREBY ORDER...” is not a legally binding order. Launching nuclear missiles or whatever requires authentication codes and can only be ordered via a portable radio alongside a series of codebooks, all of which is carried by a military aide who is always near the President. Another country isn’t going to start a war based on some weird tweets. It’s an extremely unlikely and weird risk.
      - thanatropism 7y ago
        A well crafted message that inflames followers to riot... I'm the kind of person who, for example, doubted the Covington Kids story from the beginning. By which I mean I'm not particularly alarmist about a putative vast right-wing catastrophe taking place. But any popular leader (and he's very popular among the people he's popular with) can start incidents like that by accident.
- ceejayoz 7y ago
  Yeah. On Twitter you can potentially impersonate the President and cause weeks/months of political chaos by calling someone the N-word or something similar.
  - asveikau 7y ago
    This raises an interesting question. Such an attacker would need to craft a tweet with the following constraints: * Plausible so that people do not believe it is a compromise * Offensive enough to cause action * Not in the category that people just roll their eyes and think Trump is being outrageous on the internet again. This is probably harder than it seems at first glance.
    - vageli 7y ago
      > This raises an interesting question. Such an attacker would need to craft a tweet with the following constraints: > * Plausible so that people do not believe it is a compromise > * Offensive enough to cause action > * Not in the category that people just roll their eyes and think Trump is being outrageous on the internet again. > This is probably harder than it seems at first glance. Is the third bullet even a thing after the whole Greenland debacle? Before then I had already thought I'd heard it all.
    - Phlarp 7y ago
      "DOUBLEING TARIFFS ON ALL CHINESE IMPORTS TMRW!!!"
    - CobrastanJorji 7y ago
      "I am now reviewing papers to double the tariffs against China. I will win this trade war no matter what."
- ALittleLight 7y ago
  Imagine if you were an intelligence agency and you were permitted to surveil American communications, and there was this pesky congressman who didn't want to support your organization, so you collect lewd photos of him from his phone and post them on his Twitter repeatedly. You could effectively use the data on Twitter to control the leaders of the US. "Hey, remember that congressman who didn't like us and then accidentally tweeted his own sexts? That was hilarious. Anyway, we'd really like you to increase funds and be more permissive about what our agency can do." Apropos of nothing, here's an interesting interesting website: https://votesmart.org/candidate/key-votes/23162/anthony-weiner/13/civil-liberties-and-civil-rights#.XWnKPxhlD3A https://votesmart.org/candidate/key-votes/23162/anthony-wein...
  - vageli 7y ago
    > Imagine if you were an intelligence agency and you were permitted to surveil American communications, and there was this pesky congressman who didn't want to support your organization, so you collect lewd photos of him from his phone and post them on his Twitter repeatedly. > You could effectively use the data on Twitter to control the leaders of the US. "Hey, remember that congressman who didn't like us and then accidentally tweeted his own sexts? That was hilarious. Anyway, we'd really like you to increase funds and be more permissive about what our agency can do." > Apropos of nothing, here's an interesting interesting website: https://votesmart.org/candidate/key-votes/23162/anthony-wein.. https://votesmart.org/candidate/key-votes/23162/anthony-wein.... I may be dense but it was not clear to me what the point in linking to the votesmart site was? Is it the change between pro/against for patriot act?
    - AdamJacobMuller 7y ago
      > collect lewd photos of him from his phone and post them on his Twitter repeatedly He's suggesting that anthony weiner was "framed" by some 3-letter agency.
xeromal 7y ago
Is it worth considering advanced protection as a normal person? Would it make life a pain in the butt?

deleted 7y ago

[deleted]

sdan 7y ago

I use U2F everywhere and can tell you that Twitter's usability with U2F is really poor. Can't remember why I stopped using U2F on twitter, but it's probably because of that fact that I couldn't use multiple keys.

hammock 7y ago

Twitter and Google are on completely different planes when it comes to what data and access they have to protect.

whymauri 7y ago
And? If you want your company to avoid becoming a headline, you need the best security you can afford.
CobrastanJorji 7y ago
That's true. One is the President's principle mechanism of speaking with the American public and firing top officials.
- komali2 7y ago
  If Trump's account got hacked it could quite literally result in the death of millions.
  - deleted 7y ago
    [deleted]
  - ironSkillet 7y ago
    More likely is that some Russian or Chinese hackers would make statements that tank the stock market. While setting up some short positions immediately prior.
    - nexuist 7y ago
      The funny part about this is that if we are to believe Trump is a Manchurian candidate, they already did this with the trade war.
  - bgdnyxbjx 7y ago
    If Trump’s account gets hacked it will be difficult to tell the difference between his normal incoherent ranting.
  - philwelch 7y ago
    I’m just curious how you imagine this happening. @realdonaldtrump tweeting “I HEREBY ORDER...” is not a legally binding order. Launching nuclear missiles or whatever requires authentication codes and can only be ordered via a portable radio alongside a series of codebooks, all of which is carried by a military aide who is always near the President. Another country isn’t going to start a war based on some weird tweets. It’s an extremely unlikely and weird risk.
    - thanatropism 7y ago
      A well crafted message that inflames followers to riot... I'm the kind of person who, for example, doubted the Covington Kids story from the beginning. By which I mean I'm not particularly alarmist about a putative vast right-wing catastrophe taking place. But any popular leader (and he's very popular among the people he's popular with) can start incidents like that by accident.
ceejayoz 7y ago
Yeah. On Twitter you can potentially impersonate the President and cause weeks/months of political chaos by calling someone the N-word or something similar.
- asveikau 7y ago
  This raises an interesting question. Such an attacker would need to craft a tweet with the following constraints: * Plausible so that people do not believe it is a compromise * Offensive enough to cause action * Not in the category that people just roll their eyes and think Trump is being outrageous on the internet again. This is probably harder than it seems at first glance.
  - vageli 7y ago
    > This raises an interesting question. Such an attacker would need to craft a tweet with the following constraints: > * Plausible so that people do not believe it is a compromise > * Offensive enough to cause action > * Not in the category that people just roll their eyes and think Trump is being outrageous on the internet again. > This is probably harder than it seems at first glance. Is the third bullet even a thing after the whole Greenland debacle? Before then I had already thought I'd heard it all.
  - Phlarp 7y ago
    "DOUBLEING TARIFFS ON ALL CHINESE IMPORTS TMRW!!!"
  - CobrastanJorji 7y ago
    "I am now reviewing papers to double the tariffs against China. I will win this trade war no matter what."
ALittleLight 7y ago
Imagine if you were an intelligence agency and you were permitted to surveil American communications, and there was this pesky congressman who didn't want to support your organization, so you collect lewd photos of him from his phone and post them on his Twitter repeatedly. You could effectively use the data on Twitter to control the leaders of the US. "Hey, remember that congressman who didn't like us and then accidentally tweeted his own sexts? That was hilarious. Anyway, we'd really like you to increase funds and be more permissive about what our agency can do." Apropos of nothing, here's an interesting interesting website: https://votesmart.org/candidate/key-votes/23162/anthony-weiner/13/civil-liberties-and-civil-rights#.XWnKPxhlD3A https://votesmart.org/candidate/key-votes/23162/anthony-wein...
- vageli 7y ago
  > Imagine if you were an intelligence agency and you were permitted to surveil American communications, and there was this pesky congressman who didn't want to support your organization, so you collect lewd photos of him from his phone and post them on his Twitter repeatedly. > You could effectively use the data on Twitter to control the leaders of the US. "Hey, remember that congressman who didn't like us and then accidentally tweeted his own sexts? That was hilarious. Anyway, we'd really like you to increase funds and be more permissive about what our agency can do." > Apropos of nothing, here's an interesting interesting website: https://votesmart.org/candidate/key-votes/23162/anthony-wein.. https://votesmart.org/candidate/key-votes/23162/anthony-wein.... I may be dense but it was not clear to me what the point in linking to the votesmart site was? Is it the change between pro/against for patriot act?
  - AdamJacobMuller 7y ago
    > collect lewd photos of him from his phone and post them on his Twitter repeatedly He's suggesting that anthony weiner was "framed" by some 3-letter agency.

xeromal 7y ago

Is it worth considering advanced protection as a normal person? Would it make life a pain in the butt?