> It's worth noting the client is Cloudhopper: that has been compromised before.
Looking up the hashtag the attackers used, I came across this blog post alleging the problem being AT&T's: https://www.treyexgaming.com/index.php/2019/08/26/how-the-sa...
Food for thought.
Regardless of whether the alleged source of insecurity is what happened here, SMS-based authentication was a mistake.
Notice, for example, that bank accounts are hacked much less frequently than twitter accounts.
Heck, you could make it a static website.
This is wholly possible with the use of ActivityPub:
I think before going to war with a super power, a country will check with various diplomatic channels if that was really what was said. In addition, if war could be triggered by a tweet, stuff isn't going so well anyway. With the possible exception of North Korea, I can't think of a single country that would go to war with the United States over any possible tweet by the President or anyone else, even if the tweet was real.
Imagine such exploit taking place at a moment of greater tension, and consider the fact that the President is already prone to erratic behavior online which his staff then attempts (or not) to conform to existing policy.
EDIT: right after reading this thread I glanced at the headlines, only to discover that intel analysts are (allegedly) upset that the following Presidential tweet included a snapshot of a till-then classified surveillance image. I offer this as an example of why traditional diplomatic and security norms may be more fragile than you suspect.
If that tweet happened to drop at the same time as something like https://en.wikipedia.org/wiki/1983_Soviet_nuclear_false_alar..., who knows?
I miss the shared understanding of sticks, stones, and words.
I doubt it would actually start a war, but it could definitely cause problems, especially if they believe the tweet may have actually been a "testing of the waters" rather than a result of a compromised account.
Buying or selling a stock is a low effort action explicitly a predicting the future.
Am I the old man yelling at the kids to get off my server yet?
Who ever believes any of the random sewage that pours forth from that overgrown child's Twitter account, anyway?
Big if true!
PGP is not. https://latacora.singles/2019/07/16/the-pgp-problem.html