Trump Twitter Was Hacked

https://www.bbc.co.uk/news/technology-55337192

by ksajadi • 6 years ago

22 28 6 years ago

bbc.co.uk

Pick-A-Hill2019• 6 years ago

For reference: HN thread from 55 days ago when this story first broke. Nice to find out for sure that it was/is true.

https://news.ycombinator.com/item?id=24859217

pmoriarty3• 6 years ago

"Twitter has refused to answer direct questions from BBC News, including whether the account had extra security or logs that would have shown an unknown login."

No matter what answer they gave, they'd look incompetent.

albertgoeswoof2• 6 years ago

Why? He literally guessed the password. The only fools here are trump, his administration and the American population that voted him in.

pmoriarty3• 6 years ago

Why didn't Twitter refuse to let him (and any of their other users, but especially him) use a stupid password?

Why didn't they require 2FA (especially from him)?

Why didn't they have even more security precautions for his account that wouldn't have let just anyone even with his pw and 2FA log in?

Why didn't they have some way to detect and prevent a login from an unexpected location?

And if they did have these, it shows they were incompetent in devising or using these precautions.

Of course, if this intrusion actually happened, it's not just Twitter to blame. Whoever's on Trump's cybersecurity team also messed up, as they should have had extra precautions way above and beyond anything Twitter had.

NicoJuicy3• 6 years ago

This does not mean he hacked Trump!

They checked that, according to his actions, he was within the bounds of the "coordinated vulnerability disclosure". A protective legal measure for whitehat hackers.

If he wasn't, then he could be sued for "hacking" and with malicious intent.

Source of my info was a dutch article ( the hacker is also dutch): https://tweakers.net/nieuws/175822/ethisch-hacker-wordt-niet...

jsnell3• 6 years ago

Thanks for finding a better source. Something along these lines was kind of my suspicion. Given Twitter is claiming this didn't happen, it's hard to see what kind of evidence he would have that would convince the police. All the stuff like alleged screenshots from inside the account are fakeable and unverifiable without the cooperation of Twitter.

NicoJuicy3• 6 years ago

True, but the hacker himselve is not just "a wannabe" though. He found and disclosed more than 5400 online vulnerabilities, so I would just say that the article doesn't prove any point ( if it's true or false).

( https://tweakers.net/partners/meet-up2020privacysecurity/127... )

More information about some of his findings are listed here https://gdi.foundation/#/news/README

Small extract:

WeWork’s weak Wi-Fi security leaves sensitive documents exposed
A huge database of Facebook users’ phone numbers found online
China Intercepts WeChat Texts From U.S. And Abroad
Over 90 Million Records Leaked by Chinese Public Security Department
Unsecured MongoDB databases expose Kremlin’s backdoor into Russian businesses

derision2• 6 years ago

The screenshot proves nothing. Anyone could grab the same images and set the same name and bio

iamnotarobotman• 6 years ago

Exactly. A screenshot is not convincing enough as they can 'inspect element' this 'hack'.

Simply show me a video logging into the account in real time with the given password and the 'hacker' can eliminate this skepticism.

Quite funny how people can quickly believe this stuff on the internet without thinking again, especially from...

BBC online news... sigh.

derision2• 6 years ago

It's even simpler than that, both of the fields in the screenshot are editable fields, so they had to do nothing more than create a new account, upload the same banner and profile picture, and put the text in the boxes

jxramos• 6 years ago

hey inspect element tricks and developer tools have been put to great effect in the realm of scammers transferring excess refund funds into folks bank accounts.

anoonmoose• 6 years ago

Mr Gevers had told officers he had substantially more evidence of the "hack".

It is very possible that this is just an article with limited info and not much has been released publicly because of privacy/security concerns.

JohnBooty• 6 years ago

Hmmm, yeah. From the linked article,

    Mr Gevers had told officers he had substantially 
    more evidence of the "hack".

An earlier article gives a little more detail, but nothing substantial. From https://www.bbc.com/news/technology-55019858 --

    He did not post any tweets or change any settings, but 
    said he took screenshots of some parts of the 
    president's account.

If he has screenshots of private messages, etc, that would certainly prove he had access... but only if Trump or somebody with legit access to Trump's account was able and willing to verify them.

Of course, I don't blame this researcher for lacking more concrete proof. He could easily have proved his access by changing something in Trump's account, sending a tweet/DM, etc. But by doing so he likely would have brought some serious legal issues down onto himself.

jsnell3• 6 years ago

But by doing so he likely would have brought some serious legal issues down onto himself.

The problem with that theory is that he did heavily insinuate having posted a tweet from Trump's account.

notacoward• 6 years ago

only if Trump or somebody with legit access to Trump's account

...or the sender.

albertgoeswoof2• 6 years ago

By that logic anyone could impersonate anything. Dutch prosecutors have accepted it, the bbc are a reputable organisation, it almost certainly happened.

the_arun• 6 years ago

And MFA was not enabled?

wavefunction• 6 years ago

Too complicated for people like Trump, who doesn't even read email but instead has them printed out for example, annotates them and sends a reply as a pdf.

https://www.politico.com/story/2016/12/donald-trump-technolo...

ASalazarMX• 6 years ago

AMLO, our Mexican President, for some time had a picture of him working at his desk in the official presidency's website. Zooming in on the papers it was evident that they were printed Facebook pages. I couldn't find the image now, this was a year ago.

Zaheer• 6 years ago

Quite pathetic that our head of state's password was as simple as "MAGA2020!. Twitter should impose complexity requirements for passwords of verified accounts.

nodesocket• 6 years ago

I’m sorry I am not buying this story. No way his password was that and guarantee the presidents account has two-factor. Congratulations Victor on getting world wide press coverage but I am calling BS.

hertzrat• 6 years ago

“Hacked” seems like a strong word. A security researcher guessed the password and notified people of his findings

binarymax• 6 years ago

How is this even possible. How can twitter not force MFA for arguably the most important social attack vector of our time.

paledot• 6 years ago

First thought: Scary, lucky someone more malicious didn't get there first.

Second thought: But then, it's hard to think of something that an attacker could do with Trump's account that's worse than what he already does on a daily basis.

Trump Twitter Was Hacked

Related Stories