4 ms·
5,000,000 seconds is about two months. The attackers simply might not have had enough time to check more numbers than that. (Assumption: They were checking onl
by munchler 4y ago
5,000,000 seconds is about two months. The attackers simply might not have had enough time to check more numbers than that.
(Assumption: They were checking only one number per second, either to avoid detection or because they were rate-limited.)
- onionisafruit 4y agoWhat percent of mobile numbers do you think are associated with twitter accounts? I don’t know, but it wouldn’t surprise me to find out they had to try 500M or more numbers to find 5M accounts.
- herbst 4y agoWe'd need to actually test it. But I believe the finding ratio would be even lower than 1 in 100.
- rolivercoffee 4y agoAs of Dec 2020 only 2.3% of active accounts had any form of 2FA enabled [1] [1] https://www.bleepingcomputer.com/news/security/twitter-reveals-surprisingly-low-two-factor-auth-2fa-adoption-rate/ https://www.bleepingcomputer.com/news/security/twitter-revea...