You're viewing the aleph.land public feed.

bojkotiMalbonabojkotiMalbona@infosec.exchange
Jul 24, 2022, 6:14 AM
Of the 5.4 million Twitter users, it would be interesting to know how many of them were aware that Twitter abused their phone number but decided to keep their account anyway.
💬 1🔄 0⭐ 0

Replies

bojkotiMalbonabojkotiMalbona@infosec.exchange
Jul 24, 2022, 6:20 AM
The min price for the data was $30k, so each user’s record was worth at least ½ a penny.
💬 1🔄 0⭐ 0
bojkotiMalbonabojkotiMalbona@infosec.exchange
Jul 24, 2022, 6:23 AM
If a #Mastodon node were breached in the same way as #Twitter, there would be no phone numbers to be had. Probably just a shit ton of disposable email addresses.
💬 1🔄 0⭐ 0
Merry Jerry 🎄 ⛄ ❄️jerry@infosec.exchange
Jul 24, 2022, 3:19 PM
@bojkotiMalbona they could get email addresses, hashed passwords, IP addresses, and DMs. The rest is already public. The other advantage, I suppose, is that it’s not all or nothing in the mastodon world. There is no instance that has more than a few hundred thousand accounts, and most instances (I hypothesize) only have in the hundreds of accounts.
💬 0🔄 0⭐ 0