Daniel Stenberg's (badger) Twitter account seems to have been compromised

[sinstein]

https://twitter.com/bagder/status/1328584882482769920

[bagder]

While I am disconnected from twitter, you can always reach me at:

Mastodon: @bagder@mastodon.social

Keybase: https://keybase.io/bagder

IRC: #curl on freenode

Email: daniel@haxx.se

website: https://daniel.haxx.se/

[RobIII → bagder]

Do you have / did you have 2FA enabled? And, if not, why not?

[sangeeth96 → RobIII]

I doubt it. If it is enabled, I don't see how the hacker could've circumvented it. I wonder if @bagder uses 1Password or something similar for 2FAs. Would love to know once this gets resolved.

[Jamie9912]

He posted a blog post about it here https://daniel.haxx.se/blog/2020/11/16/i-lost-my-twitter-acc...

[sangeeth96]

I've seen (and reported) a lot of such verified accounts that pose as Elon Musk. I don't get one thing—why can't Twitter set up a system that alerts to such changes to verified accounts? Can't they do a match on the name/profile image that could alert them of a possible hack? I'm stumped as to why they don't have such a system in place already considering not everyone has a verified account.

[bagder]

can I just mention that my twitter handle is 'bagder' - as in a dyslexic animal! =)

[ratsmack → bagder]

Care to elaborate on how it might have been compromised?

[bagder → ratsmack]

I rather refrain from speculating as I truly have no idea! As I describe in my blog post, I just got an email saying "someone" had logged into my account from a new device and then I was kicked out (as that user then changed password and email presumably).

[flurdy → bagder]

You still have access to your phone number? So not been sim-swapped hacked?

I guess we will find out (I hope) how it happened.

But surely there should be some automatic red flags with Twitter if an account changes name, email and starts spamming... Especially if verified!

[bagder]

Account restored!