Please Ignore My Last 577 Tweets

Can anyone explain why the verified status isn't tied to key account information, such as the password and email address associated with it? Seems that hacking a twitter account for this sort of thing would become immensely less valuable if the account would effectively automatically lose the verified status upon being taken over.

I’m surprised becoming verified doesn’t require something akin to Google’s enhanced protection program (e.g. requiring 2FA not including SMS, delaying password reset notifications, etc). I don’t think the average Twitter user needs to be subjected to that, but verified accounts being taken over have a bigger blast radius than just the individual losing their account; the scammers get notoriety and legitimacy with that blue check.

Detecting impersonation on Twitter is hard for users, but trivial for Twitter to do at Name/photo change time. They just don't care.

Name changes shouldn't even be atomic, at least for Blue Checks. Twitter UI should show "recently changed name" for a week. (And yes, I've thought about this is not unfair deadnaming. Celebrities shouldn't get to hide their name changes.)

Account was hacked for yet another NFT scam.

> The hackers immediately reset the password and changed the associated email address,

There is no legitimate reason to allow this on an active account. This only happens on a hacked account or an ownership dispute. Freeze the account.

Especially a "verified" account.

Funny how i got NFT ads on this article.