I did not fall for the recent Phishing scheme so one of three things has happened, my password was hacked through a flaw in Twitter, one of the many services (NOT twply) that I gave my credentials to has hijacked it, or someone guessed the password.
- Leo Laporte
Yep, spam and mlm are going to be a massive problem for Twitter mainly because spammers have a business model and twitter does not, here's an article I wrote on this topic just before Christmas http://experiencecurve.com/archive...
- karl
I figured there would be some good conversation on TWiT regarding the hacks, now even more so.
- Matt Mutz
This is not about pfishing.. this is something else
- Ian D. Nock
i'll assume you put a strong password on somehow, yes? So that would mean something gave away your password or there was a bored hacker somewhere that zapped you...sorry to hear that....
- Live4Emma (L4S)
That's Harsh. It had to have been Kevin Rose. He knew you were on to him
- Marcus Beagley
@Leo - Maybe one of those third party services isn't securely storing your credentials and it was stolen from them. I'm saying that maybe the third party isn't malicious, just careless.
- Mitch
Leo, the Twitter official blog says they reset the passwords on your behalf
- David Lloyd
Was Leo using Power Twitter at the time? New App new problem, coincidence?
- SkiCat56
Get on the Red Phone and get @ev on the line. I've always knew giving out login credentials to 3rd party apps would lead to this. I like ping.fm and FF's use of an API key a lot better.
- Dave Senior
Twitter needs to say more about what it was.. but my feeling this is something in the infrastructure or through people ... after all, Obama has not used his account for sometime.
- Ian D. Nock
And you can bet that no-one messes around with all the apps using that account
- Ian D. Nock
Well let's hope they don't make any horrible statements on your behalf about your sexual orientation or organs. :-)
- Dave Winer
Twitter should use also something like apikey like ff, password for controlling your account and apikey for getting your content... or something like that :)
- tanel
I heard from a reliable twitter account that Bill O'Reily is hot for manflesh....
- Mitch
No self-respecting gay man wants Bill O'Reilly. Not. A. One.
- Derrick
Twitter may have reset my password but they haven't told me yet. Maybe they need my email?
- Leo Laporte
I bet they wished they had followed Dave's advice about the authentication key thingy xx
- David Lloyd
I'm not a celebrity so probably no need to worry, but I changed my password nonetheless.
- Herb Hernandez
That's why I don't use 3rd party web services, don't trust any. Also Log-in on twitter.com using https.
- Jay Barcelo
I think Leo put his fingers on the possible hacker routes. Pretty ugly.
- Chris Baskind
Is Power Twitter one of the culprits??? I might have to uninstall it.
- Roberto Bonini
New official blog post says "These accounts were compromised by an individual who hacked into some of the tools our support team uses to help people do things like edit the email address associated with their Twitter account when they can't remember or get stuck"
- David Lloyd
Good grief! This is getting ridiculous.
- Bill Sodeman
Hey now.. that's not cool. What did Leo ever do to you? Albrecht voices/suspects a hack on Diggnation podcast and now this?
- Jamie Wareham
Geez Leo what a pain. I am sorry to hear....
- Rob Cairns
Is nothing sacred anymore? Seriously, Leo's Twitter!
- Mike Syrek
is there second email facility for twitter, like gmail does?
- marx
Same here, actually. I haven't been able to log in or to reset my password since about 11am today. I did not fall for the phishing attack either. I was using Power Twitter, which I installed yesterday. I can still update Twitter and get my DMs via SMS, but otherwise I'm locked out. Thankfully, there are no stray posts yet on my timeline. I sent Twitter a bug report through their help screen earlier today, but haven't heard back from them yet.
- alex de carvalho
Power twitter did NOT affect my account at all. That's just a Firefox add on and it does NOT ask for your password, so I doubt that would be an issue. I think this is more of a pointed attack to go for twitter's management; PR attack. Notice how pointed the accounts are that were hacked -- many *high profile* accounts...that's not a mistake, that was done on purpose. Leo was a victim and I hope they catch that / those jerks!
- Susan Beebe