I am worried that newbies hackers managed to do all of this, leaving tons of mistakes that leads to them.
True. When a careless 17 year old manages to break in to a
huge tech company like Twitter, it goes to show just how lax their security practices are. We often see hacks and breaches of crypto companies being made a big deal of on this forum - Ledger's data breach, Binance's data breach, various exchanges and web wallets being hacked for funds, lists of email addresses from ICOs and airdrops being sold, and so on. What a lot of people forget is that such data breaches are commonplace throughout the entire internet, and that even massive tech companies often have terrible security. Google stored passwords in plain text for
14 years. 50 million Facebook accounts were compromised in 2018. Just today an unpatchable exploit to Apple's Secure Enclave has been revealed, meaning an attacker can potentially decrypt and steal all your information and data.
This is why it is so important that people take their privacy and security seriously.
Its all just to monetize their access to twitter, they could have just got away with it if they just continue to sell accounts than aiming for this giveaway scam thru those high profile accounts.
It seems Twitter only picked up on it after they flooded many famous accounts with their bitcoin scam. Given that, it could have been much worse. They could have read or sent private messages to and from world leaders, or tweeted as various CEOs. Remember how much TSLA stock fell when Musk tweeted he thought it was overpriced?
This is a nice point, it goes to show why distributed services like bitcoin (twister etc) should be preferred. Instead of someone being able to "hack into Bitcoin Inc" they would need to hack into each individual's account. Without a centralized point like Twitter, this becomes much harder - presuming no one finds P=NP and/or breaks PKE.
Everything should be handled using on-device encryption and not sent off whatever device is being used without being encrypted.
One thing that concerns me about things like Solid is that they may be making the same error with regard to http and https (and others) again. I haven't checked in about 6-9 months, but the pods are not encrypted on the device.
