3 ms·
Based on the "large network of fake accounts", I'm guessing the attackers were doing something to effectively query every possible phone number and associate an
by rcthompson 7y ago
Based on the "large network of fake accounts", I'm guessing the attackers were doing something to effectively query every possible phone number and associate an account to each one.
- ramses0 7y ago@fake_twitter_account_212_111_xxxx w/ a phonebook contact list of "212-111-0000" => "212-111-9999". Lather, rinse, repeat. You'd need ~10M accounts w/ ~1000 phone numbers in each, and that can be reduced by some percentage if you know how U.S. phone numbers are assigned (ie: don't check for xxx_555_xxxx numbers, prefer highly populated prefixes, etc.) Good thing they SUSPENDED those accounts! /s
- rcthompson 7y agoYou can probably narrow down the list to just existing mobile numbers by sending a text message to each one, and then just do this for ones where the text message actually goes through.
- codedokode 7y agoMaybe you can upload lists several times from same account? Then you don't need 10M accounts.