3 ms·

I do trust that you have better opsec than 99%+ of users and that you didn't write this tweet. But it seems incredible that an adversary would burn a Twitter vu

I do trust that you have better opsec than 99%+ of users and that you didn't write this tweet. But it seems incredible that an adversary would burn a Twitter vulnerability to post a near incoherent message from your account (which isn't particularly influential, as far as these things go). Even social engineering Twitter support seems like a really crappy effort/reward ratio. What you're doing here makes sense, and if I were at Twitter I'd be trying to help you figure out exactly what happened, on the chance that there was a deeper compromise.

jacquesm 5y ago
Yes, that is the thing that really gets me: if this isn't widespread - and I have no indication so far that it is - then either this was a trial balloon and it backfired because I'm the wrong target to do that to or someone got supremely stupid and tipped their hand. One HN user below had a good idea on how to figure out if the password was unchanged and as far as I can see that is the case, which only makes this more of a puzzle.