For dissidents around the globe,?? ?? ??? Twitter remains the tool of choice for speaking out against their repressive governments.
With that in mind, it's easy to see why today's announcement from the social media company is so troubling. Twitter, in a Monday blog post and corresponding statement, announced it had discovered that "bad actors" with possible state-sponsored connections had found a way to tie phone numbers to Twitter accounts en masse.
In other words, a hacker using this exploit could potentially reveal the identity of a person tweeting under a pseudonym who has their account tied to a phone number. Or, alternatively, it's worth remembering that determining the phone number connected to an account is often a crucial step in hacking it.
"On December 24, 2019 we became aware that someone was using a large network of fake accounts to exploit our API and match usernames to phone numbers," reads the Twitter blog post. "While we identified accounts located in a wide range of countries engaging in these behaviors, we observed a particularly high volume of requests coming from individual IP addresses located within Iran, Israel, and Malaysia."
With Saudi Arabia's documented real-world harassment of dissidents, for example, it's easy to see how such exploits could lead to real-world harm.
"It is possible that some of these IP addresses may have ties to state-sponsored actors," continued the blog post.
We've reached out to Twitter to determine how many users were affected and if the company planned to notify users whose phone numbers were tied to accounts in the manner described. We've received no immediate response at present.
Importantly, not everyone was vulnerable to this specific exploit. According to Twitter, the bad actors in question could only tie your account to a phone number ifyour account met two specific criteria.
SEE ALSO: Jeff Bezos tweets reminder that Saudi government murdered a journalist
First, you had to have added a phone number to your account. However, with many people doing that very thing to enable two-factor authentication, a lot of folks fall into that bucket. Secondly, and this should narrow things down a bit, you must have selected the "Let people who have your phone number find you on Twitter" option.
Now would be a good time to make sure you don'thave that setting enabled. It would also be a great time for Twitter to consider removing it altogether.
UPDATE: Feb. 3, 2020, 2:27 p.m. PST: A Twitter spokesperson responded to our request for comment with the following statement:
As explained in our Privacy Center blog, we recently became aware that someone was using a large network of fake accounts to exploit our API and match usernames to phone numbers. After our investigation, we immediately fixed the issue by making a number of changes to the specific API endpoint that was being exploited. We also suspended any account we believe to have been engaged in this behaviour. Protecting the privacy and safety of the people who use Twitter is a top priority and we remain focused on stopping any abuse of Twitter’s features as quickly as possible.
Topics Cybersecurity Privacy X/Twitter
L.A. Times Publisher Blocks Endorsement of Harris; Editorial Board Members ResignTeeing Up for CharityBloFin Impresses at TOKEN2049 SingaporeStakeholders Debate Merits of Fourth & Central ProjectMANAA Demands KFI Suspend Bill Handel for Perpetuating StereotypesAAPI Candidates Elected to State Senate, AssemblyTransformational Karate Master Takayuki Kubota Dies at 89Summer Farewell at Evergreen: A Magical Day of Japanese TaleGate.io Releases October 2024 Proof of Reserves ReportAnyone Protocol Launches ‘Bandwidth Mining’ Rewards Buccaneers vs. Cowboys 2024 livestream: How to watch NFL online New York Knicks vs. New Orleans Pelicans 2024 livestream: Watch NBA online Best free AI and ChatGPT courses Best Amazon deals of the day: Sony WH Best pet deals in August Browns vs. Bengals 2024 livestream: How to watch NFL online Amazon stocking stuffer deals: Shop items that will arrive by Christmas NYT Strands hints, answers for December 22 Images of Lenovo's rollable laptop have appeared online NYT Strands hints, answers for December 21
0.14s , 9861.484375 kb
Copyright © 2025 Powered by 【?? ?? ???】Enter to watch online.Twitter exploit let 'bad actors' match phone numbers to accounts,Global Perspective Monitoring