3 ms·
With the info we have it looks like hackers changed the email id of the accounts and then used forgot password to reset the password. What’s concerning is that
by dsr12 6y ago
With the info we have it looks like hackers changed the email id of the accounts and then used forgot password to reset the password. What’s concerning is that they were able to do it for accounts with 2FA enabled. I think disabling 2FA should be extremely privileged actions and should not accessible to most employees.
- minxomat 6y agoThey apparently have another level of auth, used for at least Trump's account. And probably the CEO's considering past events.
- flywheel 6y agoDidn't Twitter buy "Moxie Marlinspike"'s company specifically to get him to fix their security? I guess they didn't really get much out of that. Now I'm starting to get nervous about the security of Signal.
- agloeregrets 6y agoYep. After the one employee deleted Trumps account. This is why I thought it might have been an internal tool; why wouldn’t they hack “THE” account?