Feeds

Oi, journos. Try NOT to get hacked again. Lots of love, Twitter

Hackers have painted a bullseye on hacks' heads, chat site warns

High performance access to file storage

Twitter has warned news agencies that hackers could strike again unless journalists take basic precautions - like using a decent password.

The micro-blogging site wrote to a number of news outlets warning that hackers consider them "high value" targets.

Their note of caution comes as the Syrian Electronic Army continued their online assault by hacking into Twitter accounts owned by the Guardian.

The infiltration follows the dramatic hacking of the Associated Press' Twitter account by the same group, which the hackers used to send a fake tweet claiming President Obama was injured in a bomb attack. Traders on the Dow Jones stock market panicked, apparently as a result of the tweet, and sent the index plummeting by 143 points.

Twitter's letter to news organisations said:

Please help us keep your accounts secure. There have been several recent incidents of high-profile news and media Twitter handles being compromised. We believe that these attacks will continue, and that news and media organizations will continue to be high value targets to hackers.

The briefing note claimed the hacking incidents were spear phishing attacks, which target corporate email.

Twitter's security bods suggested setting passwords and never sending them by email. One hard to remember password Twitter could be a nonsense word like "LauH6maicaza1Neez3zi" or a random string of words like "hewn cloths titles yachts refine". According to Twitter, "Very difficult passwords will discourage memorization, which will greatly reduce the chances of being phished".

Journalists should designate one computer for Twitter use to avoid spreading the password around, according to the letter. This computer should NOT be used to surf the web or do anything but tweet, which definitely overestimates the IT resources available to most news outlets in the digital age.

The number of people given access to key Twitter accounts should be kept to a minimum, Twitter advises.

The email continued: "Strong security practices will reduce your vulnerability to phishing."

There's no word on whether these security suggestions might limit journos' ability to actually use their computers or send tweets - two things Twitter might like to encourage. ®

High performance access to file storage

More from The Register

next story
Audio fans, prepare yourself for the Second Coming ... of Blu-ray
High Fidelity Pure Audio – is this what your ears have been waiting for?
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
MtGox chief Karpelès refuses to come to US for g-men's grilling
Bitcoin baron says he needs another lawyer for FinCEN chat
Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
Up, up and away in my beautiful balloon flying broadband-bot
Nokia offers 'voluntary retirement' to 6,000+ Indian employees
India's 'predictability and stability' cited as mobe-maker's tax payment deadline nears
Apple DOMINATES the Valley, rakes in more profit than Google, HP, Intel, Cisco COMBINED
Cook & Co. also pay more taxes than those four worthies PLUS eBay and Oracle
It may be ILLEGAL to run Heartbleed health checks – IT lawyer
Do the right thing, earn up to 10 years in clink
France bans managers from contacting workers outside business hours
«Email? Mais non ... il est plus tard que six heures du soir!»
Adrian Mole author Sue Townsend dies at 68
RIP Blighty's best-selling author of the 1980s
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.