3 ms·

I'm one of the 250k accounts that were compromised. Seeing as they are saying the attackers got the salted hashed passwords, not the originals, I'm wondering i

by dotBen 14y ago

I'm one of the 250k accounts that were compromised. Seeing as they are saying the attackers got the salted hashed passwords, not the originals, I'm wondering if that means it was Twitter's systems that were compromised as where else would those be obtainable from? I'm wording the above to refrain (yet) from declaring "Twitter was hacked" but I guess that is what it is looking like :(

devindotcom 14y ago
Did they sent you your email yet? Would you mind pasting here if you do, for posterity if nothing else?
- dotBen 14y ago
  Yep I got it before they even posted the blog post, and my friend in security @ Twitter couldn't yet reveal why. Here's the email: Hi, dotBen Twitter believes that your account may have been compromised by a website or service not associated with Twitter. We've reset your password to prevent others from accessing your account. You'll need to create a new password for your Twitter account. You can select a new password at this link: https://twitter.com/pw_rst/[redacted] https://twitter.com/pw_rst/[redacted] As always, you can also request a new password from our password-resend page: https://twitter.com/account/resend_password https://twitter.com/account/resend_password Please don't reuse your old password and be sure to choose a strong password (such as one with a combination of letters, numbers, and symbols). In general, be sure to: Always check that your browser's address bar is on a https://twitter.com https://twitter.com website before entering your password. Phishing sites often look just like Twitter, so check the URL before entering your login information! Avoid using websites or services that promise to get you lots of followers. These sites have been known to send spam updates and damage user accounts. Review your approved connections on your Applications page at https://twitter.com/settings/applications https://twitter.com/settings/applications. If you see any applications that you don't recognize, click the Revoke Access button. For more information, visit our help page for hacked or compromised accounts. The Twitter Team
meh01 14y ago
There's no way this only hit 250k users. I have a bunch of Twitter accounts for testing and whatever, created over many years, and they all received this email.

by dotBen 14y ago

devindotcom 14y ago

Did they sent you your email yet? Would you mind pasting here if you do, for posterity if nothing else?

dotBen 14y ago
Yep I got it before they even posted the blog post, and my friend in security @ Twitter couldn't yet reveal why. Here's the email: Hi, dotBen Twitter believes that your account may have been compromised by a website or service not associated with Twitter. We've reset your password to prevent others from accessing your account. You'll need to create a new password for your Twitter account. You can select a new password at this link: https://twitter.com/pw_rst/[redacted] https://twitter.com/pw_rst/[redacted] As always, you can also request a new password from our password-resend page: https://twitter.com/account/resend_password https://twitter.com/account/resend_password Please don't reuse your old password and be sure to choose a strong password (such as one with a combination of letters, numbers, and symbols). In general, be sure to: Always check that your browser's address bar is on a https://twitter.com https://twitter.com website before entering your password. Phishing sites often look just like Twitter, so check the URL before entering your login information! Avoid using websites or services that promise to get you lots of followers. These sites have been known to send spam updates and damage user accounts. Review your approved connections on your Applications page at https://twitter.com/settings/applications https://twitter.com/settings/applications. If you see any applications that you don't recognize, click the Revoke Access button. For more information, visit our help page for hacked or compromised accounts. The Twitter Team

meh01 14y ago

There's no way this only hit 250k users. I have a bunch of Twitter accounts for testing and whatever, created over many years, and they all received this email.