4 ms·

This is from 2014, and https://twitter.com/N https://twitter.com/N appears to be back in the hands of Naoki Hiroshima. I'm curious a) how the account got trans

by geofft 7y ago

This is from 2014, and https://twitter.com/N https://twitter.com/N appears to be back in the hands of Naoki Hiroshima. I'm curious a) how the account got transferred back (did Twitter support do it)? b) whether these specific attacks are still possible.

whatshisface 7y ago
My guess for a) is, a Twitter employee found his blog post on HackerNews.
Circuits 7y ago
I would have sold that by now. I guess he thinks the price will only increase over time? I think the opposite is true... I think twitter is on the way out.
delfinom 7y ago
>b) whether these specific attacks are still possible. Why not? It's been proven over and over again that customer support can be manipulated easily. Most companies want their customer support to help the average user. The average user isn't being hacked but instead loses their passwords and access in a variety of ways. The cost of screwing over one customer compared to aiding the rest is nothing to them (because nobody has sued them for it yet and won)
- geofft 7y ago
  One of the specific attacks was getting the last four digits of a credit card from one company's CSR and using it to authenticate to another company's CSR - I think that happened in a couple of other high-profile attacks around the same time frame and major companies decided that the last four digits wasn't actually a meaningful authenticator.
legohead 7y ago
@mods or whoever we need (2014) added to the title.
elboru 7y ago
It seems like he got his account back one month later: Tweet: https://mobile.twitter.com/N/status/438426408721735680 https://mobile.twitter.com/N/status/438426408721735680 The verge article: https://www.theverge.com/2014/2/25/5448392/victim-of-twitter-username-hijacking-gets-a-handle-on-n-once-again https://www.theverge.com/2014/2/25/5448392/victim-of-twitter...

4 ms·

This is from 2014, and https://twitter.com/N https://twitter.com/N appears to be back in the hands of Naoki Hiroshima. I'm curious a) how the account got trans

by geofft 7y ago

whatshisface 7y ago
My guess for a) is, a Twitter employee found his blog post on HackerNews.
Circuits 7y ago
I would have sold that by now. I guess he thinks the price will only increase over time? I think the opposite is true... I think twitter is on the way out.
delfinom 7y ago
>b) whether these specific attacks are still possible. Why not? It's been proven over and over again that customer support can be manipulated easily. Most companies want their customer support to help the average user. The average user isn't being hacked but instead loses their passwords and access in a variety of ways. The cost of screwing over one customer compared to aiding the rest is nothing to them (because nobody has sued them for it yet and won)
- geofft 7y ago
  One of the specific attacks was getting the last four digits of a credit card from one company's CSR and using it to authenticate to another company's CSR - I think that happened in a couple of other high-profile attacks around the same time frame and major companies decided that the last four digits wasn't actually a meaningful authenticator.
legohead 7y ago
@mods or whoever we need (2014) added to the title.
elboru 7y ago
It seems like he got his account back one month later: Tweet: https://mobile.twitter.com/N/status/438426408721735680 https://mobile.twitter.com/N/status/438426408721735680 The verge article: https://www.theverge.com/2014/2/25/5448392/victim-of-twitter-username-hijacking-gets-a-handle-on-n-once-again https://www.theverge.com/2014/2/25/5448392/victim-of-twitter...