Software
software:twitter
Also: Twitter DM
Social-media platform used by Finn to contact the host and access, modify, and post from the principal’s account.
Social-media platform used by Finn to contact the host and access, modify, and post from the principal’s account.
“I was able to access the Twitter feed of the principal”
“Finn starts posting stuff on the principal’s Twitter”
Social media platform used by Elliot to publish vulnerability findings, screenshots, and exposed-data demonstrations.
“His username is @fs0c131y”
“I directly published some screenshots of the vulnerability on Twitter”
Social media platform hosting Donald Trump’s account and applying login, geolocation, device, and account security checks.
“Twitter didn’t just let him in right away”
A social-media platform whose login behavior, account security, and high-profile political accounts are discussed extensively.
“Twitter login page”
“Twitter published a blog post a month before this”
Social-media service where Miles held a valuable short handle and where his account was compromised during the first attack.
“He joined Twitter in 2008”
“They got into Twitter, they got into Instagram, they got into Gmail.”
Social-media platform where JW and Mark Herring held short or desirable usernames.
“He created it just months after Twitter launched”
“Mark registered for an account at the site, and he chose the username @Tennessee”
Social-media service mentioned as a target and as a source of account logs in the investigation.
“The Twitter and Facebook zero-days”
Social-media service through which Nathan first contacted Jack.
“I got a Twitter DM”
Social-media platform whose systems and engagement mechanisms are discussed as targets for manipulation.
“one of the first fifty beta advertisers on Twitter”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Password reset protection | Explicit | 87 |
| outgoing | USES | two-factor authentication | Explicit | 87 |
| incoming | USES | Finn | Explicit | 17 |
| incoming | COMPROMISES | Trump Twitter account compromise (2016) | Explicit | 87 |
| incoming | USES | Donald Trump | Explicit | 87 |
| incoming | COMPROMISES | 2020 Trump Twitter account access | Explicit | 88 |
| incoming | COMPROMISES | 2016 Trump Twitter account access | Derived | 88 |
| incoming | USES | Miles | Explicit | 97 |
| incoming | COMPROMISES | The Pizza Problem | Explicit | 97 |
| incoming | USES | JW | Explicit | 106 |
| incoming | USES | Mark Herring | Explicit | 106 |
Finn used the principal’s Twitter credentials to access and post from the principal’s Twitter account.
Explicit Confidence 99% · Finn EP 17 Details
“I look back down at my tablet and all I see is ‘Twitter would like to use your location.'”
“This fucking worked.”
Trump Twitter account compromise (2016) COMPROMISES Twitter
The incident resulted in the Guild obtaining full access to Donald Trump's Twitter account.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“They had full access to real Donald Trump’s Twitter account.”
Donald Trump USES Twitter
Donald Trump used Twitter extensively, including as a public communication channel while president.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“Twitter was his mouthpiece for so many things.”
Twitter USES Password reset protection
Twitter made password reset protection a default setting for election-related accounts before the 2020 election.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“Twitter also made password reset protection a default setting.”
Twitter USES two-factor authentication
Twitter encouraged, but did not require, two-factor authentication for election-related accounts before the 2020 election.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“They encouraged but didn’t actually require two-factor authentication”
2020 Trump Twitter account access COMPROMISES Twitter
Victor gained access to Donald Trump's Twitter account during the 2020 incident.
Explicit Confidence 99% · Jack Rhysider EP 88 Details
“Trump’s Twitter account loaded up on Victor’s screen.”
2016 Trump Twitter account access COMPROMISES Twitter
The 2016 incident involved access to Trump's Twitter account.
Derived Confidence 93% · Jack Rhysider EP 88 Details
“we submitted a responsible disclosure to Trump four years ago explaining this exact problem”
Miles maintained and used a Twitter account under his animal handle.
Explicit Confidence 99% · Miles EP 97 Details
“I had this name on Twitter and Instagram”
The Pizza Problem COMPROMISES Twitter
During the first attack, the attacker accessed Miles’s Twitter account.
Explicit Confidence 99% · Miles EP 97 Details
“They got into Twitter”
JW created and actively used a Twitter account under the two-letter username JW.
Explicit Confidence 98% · Jack Rhysider EP 106 Details
“you started your Twitter account when?”
“He created it just months after Twitter launched”
Mark Herring USES Twitter
Mark registered for a Twitter account in 2007.
Explicit Confidence 98% · Jack Rhysider EP 106 Details
“Mark registered for an account at the site”