Aaron Parecki

7/ Implement notifications (ideally both email and phone push notifications) for every critical operation in the account lifecycle (email change, password reset, turn off second-factor, account linking)

NEW: @ACLU_OR has sued the feds in Portland on behalf of legal observers & local journalists.

"This is a fight to save our democracy."

https://aclu-or.org/en/press-releases/aclu-sues-federal-agents-portland

How @robertoblake ? 😂

here are all the ffmpeg tricks i know for turning video, audio, and pictures into each other https://www.are.na/tom-macwright/ffmpeg-cookbook

in past years this would've been a github repo but http://are.na is way better for this kind of thing

Curious about what's possible in the world of virtual events? Keep an eye on what @TonyRobbins is doing right now on Day 1 of his sold-out 3-day virtual UPW event.

🙋22,500 participants
🌎143 countries
📹360-degree studio
🤳Private Facebook Community

https://www.instagram.com/tonyrobbins

Allegedly.

The following 3 companies improve your image quality when you are filming with their new products: Black magic, Sony, Canon..

The following 3 companies improve your image quality when you are filming with any product: Aputure, Lupo, Intellytech...

Also, it's impossible to describe the chaos inherent in dealing with the account lifecycle issues of the general public. The breadth of ways people lock themselves out of services that are critical to their lives is breathtaking, and we can't just ignore those folks.

There are many changes that Twitter can make to reduce the risk from customer service functions, such as creating two-person flows and performing risk-based auth.

No coverage of this issue should ignore that major mobile providers are still struggling with stopping SIM swaps.

interesting screenshot of the Twitter tool that was compromised/used for the hack yesterday.

search and trends blacklisting. seems shadowbanning is quite real here even though Twitter has denied this in the past. 👀

via @motherboard

#twitterhacked

Insider threats are the biggest threat.

Internally, we’ve taken significant steps to limit access to internal systems and tools while our investigation is ongoing. More updates to come as our investigation continues.

We also limited functionality for a much larger group of accounts, like all verified accounts (even those with no evidence of being compromised), while we continue to fully investigate this.

We know they used this access to take control of many highly-visible (including verified) accounts and Tweet on their behalf. We’re looking into what other malicious activity they may have conducted or information they may have accessed and will share more here as we have it.

We detected what we believe to be a coordinated social engineering attack by people who successfully targeted some of our employees with access to internal systems and tools.

I did, but I made too much money 😅

Please remember that anyone telling you to change your password after this is gaslighting you (or, if you're the one doing the telling, you're victim blaming someone). The tech industry has better approaches to security than passwords, and 2FA/passwords didn't help here.

Haha... @aaronpk

Hello verified users, you can't tweet, but you CAN retweet, so I'll help you out