My bet is that some Tweet posting API is missing a critical authentication check... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		cryptica on July 15, 2020 \| parent \| context \| favorite \| on: Hackers take over prominent Twitter accounts in si... My bet is that some Tweet posting API is missing a critical authentication check or the hackers found a way to bypass this check. I doubt someone could individually hack all these accounts.

andy_ppp on July 15, 2020 [–]

I mean why can they not stop the api? Why not just switch it off for a few minutes and figure out what is happening?

cryptica on July 15, 2020 | [–]

They would need time to figure out which API endpoint is affected. Twitter is not going to shut down everything just because one endpoint has a possible issue.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact