4 ms·
We now know it wasn't a 0 day. It was socially engineered access to internal tools. That's still a tricky one to lockdown.
by anonu 6y ago
We now know it wasn't a 0 day. It was socially engineered access to internal tools. That's still a tricky one to lockdown.
- johnnyfaehell 6y agoMore info on this https://techcrunch.com/2020/07/15/twitter-hacker-admin-scam/ https://techcrunch.com/2020/07/15/twitter-hacker-admin-scam/
- AustinDev 6y agoInteresting looks like a moderation tool form the screenshots. You can block a user from timelines and searches or a tweet.
- mschuster91 6y agoSo the infamous "shadow ban" actually does exist on Twitter, based on this screenshot. I remember them actively denying this two years ago when a wave of shadow ban incidents hit German news.
- jonathanstrange 6y agoWhere do you see a shadowban option on that screenshot?
- mschuster91 6y ago"Search blacklist" is one of the things that indicates a shadow ban (per https://shadowban.eu/ https://shadowban.eu/). Lower left corner in the screenshot.
- Already__Taken 6y agothat's nothing controversial surely, like your bank doesn't explain the anti fraud mechanisms even if you posted "this is exactly how it works"
- mschuster91 6y agoShadowbanning people is a form of psychological abuse. To be honest it should be banned by law.
- tripzilch 6y agoI just vouched for yet another HN user who had been posting insightful but [dead] comments for at least a month, and I couldn't even find the bad comment that triggered this. It just makes me sad that I see people spending their energy on good comments, unaware they're not being read by most people.
- mschuster91 6y agoMight want to email the mods if you come across such stuff...
- tripzilch 6y agoIsn't this literally what the "vouch" button is intended for, though?
- samstave 6y agoReddit mods are truly overly censor-friendly and ban-happy - and a bit bemused with the power that being a mod gives them over others.
- metafunctor 6y agoIt's tricky to fully prevent (considering conspiracies of multiple people) but not that tricky to ensure the responsible internal parties will be identified and brought to justice. Working from home of course always leaves open the question if a person was willingly participating in a crime or was forced at gunpoint. However, in this case, looks like Twitter's internal tools simply give too much access to people to control access to Twitter accounts. Probably no gunpoint required, just a single compromised employee. It remains to be seen how willingly they have participated.