3 ms·
In most cases, I do consider gaining authorized access via social engineering to be a hack. I guess this probably qualifies, but just barely. If it turns out it
by caymanjim 6y ago
In most cases, I do consider gaining authorized access via social engineering to be a hack. I guess this probably qualifies, but just barely. If it turns out it was just a rogue engineer then it doesn't qualify at all. It's not clear that external "hackers" gained ongoing access. If someone leveraged an insecure remote worker's PC to gain access, that counts as hacking too. I'll wait and see if we find out what the root cause was.
- manquer 6y agoThe hack is exploiting weak internal security controls that twitter has. Reset of email for so many high profile users requiring only one person to click a button is weak design. No Review / no approval etc . Also the amount of time for them to identify it, they had blocked tweeting the address and blocked all verified users from posting before they could find the rogue account indicates logging and analysis of their admin tool actions is also not robust. Exploiting these two vulnerabilities whether by blackmail, bribe or RAT should not make a difference to consider it a hack