Feeds

Oi, journos. Try NOT to get hacked again. Lots of love, Twitter

Hackers have painted a bullseye on hacks' heads, chat site warns

High performance access to file storage

Twitter has warned news agencies that hackers could strike again unless journalists take basic precautions - like using a decent password.

The micro-blogging site wrote to a number of news outlets warning that hackers consider them "high value" targets.

Their note of caution comes as the Syrian Electronic Army continued their online assault by hacking into Twitter accounts owned by the Guardian.

The infiltration follows the dramatic hacking of the Associated Press' Twitter account by the same group, which the hackers used to send a fake tweet claiming President Obama was injured in a bomb attack. Traders on the Dow Jones stock market panicked, apparently as a result of the tweet, and sent the index plummeting by 143 points.

Twitter's letter to news organisations said:

Please help us keep your accounts secure. There have been several recent incidents of high-profile news and media Twitter handles being compromised. We believe that these attacks will continue, and that news and media organizations will continue to be high value targets to hackers.

The briefing note claimed the hacking incidents were spear phishing attacks, which target corporate email.

Twitter's security bods suggested setting passwords and never sending them by email. One hard to remember password Twitter could be a nonsense word like "LauH6maicaza1Neez3zi" or a random string of words like "hewn cloths titles yachts refine". According to Twitter, "Very difficult passwords will discourage memorization, which will greatly reduce the chances of being phished".

Journalists should designate one computer for Twitter use to avoid spreading the password around, according to the letter. This computer should NOT be used to surf the web or do anything but tweet, which definitely overestimates the IT resources available to most news outlets in the digital age.

The number of people given access to key Twitter accounts should be kept to a minimum, Twitter advises.

The email continued: "Strong security practices will reduce your vulnerability to phishing."

There's no word on whether these security suggestions might limit journos' ability to actually use their computers or send tweets - two things Twitter might like to encourage. ®

SANS - Survey on application security programs

More from The Register

next story
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
Audio fans, prepare yourself for the Second Coming ... of Blu-ray
High Fidelity Pure Audio – is this what your ears have been waiting for?
MtGox chief Karpelès refuses to come to US for g-men's grilling
Bitcoin baron says he needs another lawyer for FinCEN chat
Record labels sue Pandora over vintage song royalties
Companies want payout on recordings made before 1972
Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
Up, up and away in my beautiful balloon flying broadband-bot
Apple DOMINATES the Valley, rakes in more profit than Google, HP, Intel, Cisco COMBINED
Cook & Co. also pay more taxes than those four worthies PLUS eBay and Oracle
Number crunching suggests Yahoo! US is worth less than nothing
China and Japan holdings worth more than entire company
prev story

Whitepapers

SANS - Survey on application security programs
In this whitepaper learn about the state of application security programs and practices of 488 surveyed respondents, and discover how mature and effective these programs are.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.