Hacker News Reader

Seems more likely to me that it was a Twitter employee or someone with access to an employee's PC to reset passwords.

But wouldn't that be evident very, very quickly, from just looking at a relevant account's audit log, and shut down right away?

But it was shut down right away...

I think it only stopped in the last few minutes. It lasted hours

I also think the exploit wasn't stopped, they just stopped all verified accounts from tweeting.

They also shipped a block on tweeting the address: https://twitter.com/_akavi/status/1283524504866586624

A senior engineer (juniors would not have this level of access) risking their job and facing prosecution for an amount that would certainly be far less than their salary? That doesn't seem likely.

Reply on news.ycombinator.com