Discussion

• Vox Theodore Schleifer on x

  Jack Dorsey's hack encapsulates Twitter's struggle with problematic content

• @twittercomms @twittercomms on x

  We're aware that @jack was compromised and investigating what happened.

• @twittercomms @twittercomms on x

  @jack The phone number associated with the account was compromised due to a security oversight by the mobile provider. This allowed an unauthorized person to compose and send tweets via text message from the phone number. That issue is now resolved.

• @twittercomms @twittercomms on x

  @jack The account is now secure, and there is no indication that Twitter's systems have been compromised.

• @psythor James O'Malley on x

  .@jack's hacked tweets are being posted from an app called Cloudhopper, which is apparently an app Twitter acquired previously that had something to do with SMS. So his account appears not breached - but rather Jack's account is still hooked up to an old service that got hacked. …

• @rmac18 Ryan Mac on x

  Twitter statement on @jack: “The phone number associated with the account was compromised due to a security oversight by the mobile provider. This allowed an unauthorized person to compose and send tweets via text message from the phone number. That issue is now resolved.”

• @danielnazer Daniel Nazer on x

  Twitter's promise vs. Twitter's reality. https://twitter.com/...

• @mat Mat Honan on x

  We got confirmation Dorsey was SIM jacked. Amazing the carriers haven't set up better protections against this https://www.buzzfeed.com/...

• @daveleebbc Dave Lee on x

  Twitter tells BBC it is urgently investigating what has happened to @jack's account, would not say why the account hasn't been suspended or deactivated yet as still looking into it. Looks like tweets have stopped, many of the offending tweets seem to be disappearing now.

• @rjcc Richard Lawler on x

  Unfortunately, 2FA or checking your connected apps won't protect you from whoever hijacked @Jack. It looks like he was the victim of the increasingly common (and potentially devastating) SIM-swap, then the attackers just texted 40404 from his number. https://www.engadget.com/... …

• @rmac18 Ryan Mac on x

  @jack A source familiar now confirms: @jack had his sim swapped. There it is. That's the tweet.

• @malwarejake Jake Williams on x

  Twitter founder @jack had his account hacked. I'm not laughing at all, but if there's any justice in this world, he'll have to engage with @TwitterSupport like a normal victim and get a chance to see first hand how horrible the experience is. Hopefully this leads to some change. …

• @alexstamos Alex Stamos on x

  So they get control of the phone number of a billionaire (who is also the CEO of a massive payment processor) and they use it to send racist tweets? This is like pulling off a heist of a McLaren F1, taking it for a joyride and crashing into the median in three minutes. https://tw…

• @rmac18 Ryan Mac on x

  Spoke with a former Twitter employee who said Dorsey's hack should be embarrassing for the CEO. That person says Dorsey, who is known to work only on his iPhone, was told to use a more secure laptop in the past but refused. Twitter declined to comment. https://www.buzzfeednews.co…

• @tomgara Tom Gara on x

  I feel bad for Jack Dorsey but this is what happens when your entire staff goes to Burning Man

• @rmac18 Ryan Mac on x

  I'm having flashbacks to the day that Twitter contractor nuked Trump's account

• @tomwarren Tom Warren on x

  AT&T fucked up again and let someone SIM swap Twitter CEO's number. Carriers don't do enough to protect against this. https://twitter.com/...

• @wbm312 Whitney Merrill on x

  Ha knew it. It's always sim jacking. Our mobile service providers are the weakest link. https://twitter.com/...

• @kimzetter Kim Zetter on x

  Let's hope that this becomes the SIM-jacking case that sufficiently shames the mobile carriers into finally doing something about this security problem. https://twitter.com/...

• @robprovince EducatdHillbilly on x

  Was it? Are we sure of this? https://twitter.com/...

• @rmac18 Ryan Mac on x

  @jack Our updated story has this: -Twitter won't confirm if @jack had his SIM card hijacked -Twitter declined to comment on if hackers had access to DMs -New comments from former employees who talked about lax account security for execs https://www.buzzfeednews.com/ ...

• @benedictevans Benedict Evans on x

  It's 2019 and Twitter still obliges you to use SMS 2FA. Come on. 🤦🏻‍♂ ️

• @mslopatto Elizabeth Lopatto on x

  I see Twitter is responding to this with its typical competence https://twitter.com/...

• @moelleithee Mo Elleithee on x

  If the Twitter CEO's account can be hacked, so can the unsecured account of the President of the United States. Just saying. https://www.axios.com/...

• @chillmage @chillmage on x

  well it's official now: nobody is safe on Twitter https://twitter.com/...

• @josephfcox Joseph Cox on x

  Yes, @jack apparently had 2FA on his account. At least judging by answers he gave here https://www.intelligence.senate.gov/ ... pic.twitter.com/Zaz6mZUzKf

• @dakami Dan Kaminsky on x

  Not everyone wants to be a drug dealer. Not everyone wants to rob a billionaire. Some people just want to watch the world point and laugh. https://twitter.com/...

• @gcluley Graham Cluley on x

  So @jack has had his Twitter account hijacked. Everyone should ensure they have 2FA enabled, use unique password, and double check what apps they've linked to their accounts. Hard to say at moment how he was compromised, but one of those reasons most likely.

• @tomwarren Tom Warren on x

  Everyone will say “make sure you use a secure password and enable 2FA” on Twitter but neither of those things matter if you auth third-party apps to your account. The source of the bad tweets was via cloud hopper, which jack has used before. Check your apps people 👋 https://twitt…

• @lolacoaster Kristin Chirico on x

  i did my own investigation and what happened is that there are nazis on the platform https://twitter.com/...

• @zackwhittaker Zack Whittaker on x

  Welp. Reads like @jack got SIM swapped. https://twitter.com/...

• @thefurlinator @thefurlinator on x

  feral hogs, bedbug stephens, jack being hacked. august 2019 is the easily the greatest month in twitter history. we may never get as pure a time as this ever again https://twitter.com/...

• @robrousseau Rob Rousseau on x

  lol I was so busy toiling in the content mines today that I missed @jack's account getting stolen by the very people he refuses to remove from this cursed website https://twitter.com/...

• @pocarles Pierre-Olivier Carles on x

  It's a shame he doesn't know anyone at Twitter to fix it, and get his account back. I would try Burning Man to reach someone if I was him. Half of Twitter must be there as we talk... https://twitter.com/...

• @whatleydude James Whatley on x

  Jack: 'We're committing Twitter to help increase the collective health, openness, and civility of public conversation' Users: BUT WHAT ABOUT THE NAZIS? Jack: pic.twitter.com/NXEVHgLclF

• @anildash Anil Dash on x

  Important context, because it means a linked app was compromised, but they likely had no access to DMs, no copy of his password, and Twitter itself (including, presumably, 2-factor authentication) wasn't the vulnerability. https://twitter.com/...

• @digiphile Alex Howard on x

  Fast-twitch reporting by @BuzzFeed on the @jack hack https://www.buzzfeednews.com/ ... Looks like they amplified a Discord thread & a racial epithet, too. Lovely.

• @joshraby Josh Raby on x

  why would you hack someone's account just to tweet the things they already think https://twitter.com/...

• @jamestodaromd James Todaro on x

  Jack Dorsey got SIM swapped today giving the hacker access to his twitter account. If the CEO of twitter can get SIM swapped, you better believe that it can happen to you. If you use your real name on social media (eg Crypto Twitter), do NOT use SMS text as your 2FA. https://twit…

• @justeric Eric Spencer on x

  Or he needed to get some things off his chest and obfuscated it with a bunch of other stuff that sounded “hacky.” https://twitter.com/...

• @elizabeth_joh Elizabeth Joh on x

  Watching the hacked account of this website's CEO and feeling not too keen about the POTUS tweeting about important Article II type stuff here

• @verge @verge on x

  After @jack's hack, it might be a good time to protect your Twitter account against application hijacks. Here's how: https://www.theverge.com/...

• @rmac18 Ryan Mac on x

  Among the apparent reasons Dorsey refused the laptop: He didn't like carrying things on his long walks.

• @jebus911 Jeremy Ross on x

  Smart enough to hack Jack's account, not smart enough to use it to pump a shitcoin.

• @oneunderscore__ Ben Collins on x

  After a horrifying 20 minutes of n-words and actual Nazi propaganda being pushed from the CEO's hacked account, maybe Twitter will take the gamification of harassment and racism as seriously as its victims have been for years.

• @tomwarren Tom Warren on x

  Amazing that it has taken 20+ mins for anyone at Twitter to even notice that their CEO's account has been hacked 🙄 https://twitter.com/...

• @willoremus Will Oremus on x

  Twitter CEO @jack's account has been hacked, apparently by an entity called Chuckling Squad, which also recently hacked the accounts of YouTube stars James Charles and Shane Dawson, among others. https://www.insider.com/... https://twitter.com/...

• @bhaggs Bryan Haggerty on x

  Cloudhopper was the name of the company we acquired eons ago to help bolster our SMS service. Apparently we still use the name as the client ID.

• @itsnicolenguyen Nic Nguyen on x

  EVEN JACK was sim-hijacked. Put a pin # on your mobile accounts y'all https://twitter.com/...

• @oneunderscore__ Ben Collins on x

  Some reporting from me from within the Discord of Jack's hackers. —Hackers tried to rifle through Jack's private messages, but open DMs made it too hard to tell what was important —Users in the chat had spelled out “DONALD TRUMP” in reaction emojis https://www.nbcnews.com/...

• @kenli729 Kenneth Li on x

  Jack Dorsey's twitter hack is ...Sauvage.

• @gcluley Graham Cluley on x

  Four years ago Twitter's CFO has his account breached. He wasn't using 2FA. https://www.grahamcluley.com/ ... I find it hard to think Twitter's security team would let @jack make the same mistake. My hunch would be third party app compromised, but we will see.

• @tomwarren Tom Warren on x

  Cloudhopper is used by Twitter to let you tweet via SMS. It's likely the culprits either spoofed an SMS or gained access to something at Cloudhopper's end. Either way, I'd doubt they had full access to his account. We'll likely never know exactly what happened, though

• @zabbadab Lard Shmoopy on x

  Considering he still alows Trump to have an account it's clear he was compromised long ago

• @tomwarren Tom Warren on x

  SIM swapping Jack is probably the most likely scenario. It's surprisingly easy to get carriers to give up your SIM with just a few account details. Also very hard to protect against