Space News from SpaceDaily.com
Twitter nixes tweets by text after CEO account hack
ADVERTISEMENT

Washington, Sept 4 (AFP) Sep 04, 2019
Twitter on Wednesday halted users' ability to fire off tweets via text messages as it seeks to fix a vulnerability that led to CEO Jack Dorsey's account being hijacked.

Dorsey last week was the target of so-called "SIM swap" fraud, which enables a hacker to trick a mobile carrier into transferring a number -- potentially causing people to lose control not only of social media, but bank accounts and other sensitive information.

This type of attack targets a weakness in the use of "two-factor authentication" via text message to validate access to an account, a break-in method that has grown popular in recent years.

"We're temporarily turning off the ability to Tweet via SMS, or text message, to protect people's accounts," the Twitter support team wrote on the platform.

"We're taking this step because of vulnerabilities that need to be addressed by mobile carriers and our reliance on having a linked phone number for two-factor authentication."

The San Francisco-based service added that as it works on a long-term solution to the problem, tweeting via text message eventually will be turned back on in markets where users rely on that technique.

Even with considerable security precautions in place, Dorsey became the victim of the embarrassing compromise when attackers hijacked his phone number and took control of his Twitter account.

Dorsey's account was restored after a brief period during which the attackers posted a series of offensive tweets.

Some analysts say hackers have found ways to easily get enough information to convince a telecom carrier to transfer a number to a fraudster's account, especially after hacks of large databases that result in personal data sold on the so-called "dark web."

"Mobile accounts' text messages can be hijacked by sophisticated hardware techniques, but also by so-called 'social engineering' -- convincing a mobile provider to migrate your account to another, unauthorized phone," said R. David Edelman, a former White House adviser who heads a cybersecurity research center at the Massachusetts Institute of Technology.

"It only takes a few minutes of confusion to make mischief like Dorsey experienced."


ADVERTISEMENT




Space News from SpaceDaily.com
China launches new crew to Tiangong space station as lunar plans progress
Flight equipment for China's manned moon mission progresses: CMSA
Japan's SLIM survives 3rd lunar night, surprising designers

24/7 Energy News Coverage
Human impact on Earth's deep subsurface fluid dynamics revealed
Shanghai Ocean University unveils manta ray-inspired bionic fish
Efficient DC power converter enhances microgrid sustainability

Military Space News, Nuclear Weapons, Missile Defense
China warns US military support for Taiwan increases 'risk of conflict'
China slams US claims it is fuelling Ukraine war
'China is the winner' in Maldives election

24/7 News Coverage
China advances its earth observation capabilities with new satellite launch
Oldest evidence of Earth's magnetic field discovered by researchers
Satellite Monitoring Highlights Soil Sealing Challenges in the Mediterranean


All rights reserved. Copyright Agence France-Presse. Sections of the information displayed on this page (dispatches, photographs, logos) are protected by intellectual property rights owned by Agence France-Presse. As a consequence, you may not copy, reproduce, modify, transmit, publish, display or in any way commercially exploit any of the content of this section without the prior written consent of Agence France-Presse.