Twitter Had Yet Another Data Breach

[@Tommy-T448]

Tried to go to Nitter right when this video uploaded, I think we crashed the site.

[@MentalOutlaw]

There are many instances of nitter and you can run your own github.com/xnaas/nitter-instances

[@therealb888]

@@MentalOutlaw Definitely running my own right now! Thanks.

[@comradesusiwolf1599]

@@MentalOutlaw Mastodon User

[@WMan37]

I use the privacy redirect extension, not just because of stuff like this, but because nitter is a website that loads legitimately faster than actual twitter and you can browse it without an account. It just seems like a no brainer to have. Anyone using Nitter redirect should switch to privacy redirect since privacy redirect can use other instances of nitter that actually do work.

[@Falin1989]

Guys, the site is running fine, its just most likely your browser trying to access it via https by default, while the site is http.

[@aurorastudios5955]

Hackers: "Wait its all bots?" Twitter: "Always has been."

[@denis2381]

GayAnalDildo

[@mattv18930]

Lmfao

[@galenmarek4117]

@@denis2381 speaking of bots...

[@denis2381]

@@galenmarek4117 you have gay

[@aurorastudios5955]

@@galenmarek4117 Its not a bot! Its a battle droid!

[@theWebmasterify]

Pretty sure that Twitter broke GPDR by waiting that long for not disclosing the vulnerability / breach. FYI Facebook is currently being sued for a very similar breach in Europe (it was possible to scrape mail & phone numbers even though they were set to private)

[@Frog_Scooper]

Consumer protection laws don't matter and normally don't apply to these big porpreitary companies

[@atarumoroboshi527]

Wouldn't be the first time. If you get suspended, you can't delete your account or remove your phone number.

[@Andrew-bl8eq]

@@atarumoroboshi527 I actually had 2 of my accounts being suspended, even tho I never twitted anything, but Twitter unsuspended me when I emailed them

[@Quasarii]

you can see it in facebook lite 😂😂😂😂

[@Gigachad-mc5qz]

I hope those shit platforms get banned and we get a public, free and open source platform

[@Dethflash]

Thank you so much for showing us Nitter. I dont have a twitter account, so its always been a pain in the ass when i go to twitter to look at some post, and its spamming me to sign up. So nitter is exactly what im looking for. A way to occasionally go on twitter to look at the few people i like to follow and not have to sign up.

[@nunomaltez804]

id like an alternative to truth social... i wanted to follow donald trump, but im not from USA, so i cant even make an account... nor see donald truths... if anyone knows any way.. please tell, id appreciate

[@wishub]

I've been using nitter for a while and it's very slow

[@wishub]

@@nunomaltez804 use VPN

[@fnym9rdsavsffdik9a25]

they should have called it nutter, a lot of the people there are nuts

[@drifter402]

I love nitter. Lets you go on profiels that they don't usually let you on.

[@0xhades]

This kind of data breaches done by exploiting the “Discover people by linking your contact list” feature that can be found in all social media like Facebook, twitter, instagram, etc.. Extracting the API of this feature then simulating a phone by sending random emails and phone numbers as contact list of this phone. If the programs found a match, it will log the username of that random email or phone number.

[@interstellarsurfer]

👌

[@ezshroom]

The thing here though is that it also applies to users who don't allow that to happen. That's not standard across all social media.

[@Ammonium-ow6pd]

99% of breaches are made by exploiting features like this, very rarely hackers actually gain access to the source databases. So yes, it is a data breach, because most of them are like this

[@Mordecrox]

That's just breaching with extra words

[@Tetemovies4]

So does that mean you can dox your contacts list’s twitter account simply by sharing your contacts or is it more complicated than that?

[@haveyouseenchefplis932]

Jeez, who would have thought that linking your phone number into online service would be a bad idea.

[@billfarley9015]

What could possibly go wrong there? Titter takes security seriously.

[@wayland7150]

2FA is extra secure. No way can hackers get you if you provide more details to be held online.

[@energeticyellow1637]

Back in my day, putting your real name on the internet was a serious no no.

[@meltedWax169]

It's sad that we have to break into the company to make sure they admit to their wrondoings. It's depressing.

[@jwadaow]

welcome to the 2020s

[@_Bran]

Would tweeting about the twitter hack count as breaking into the company lmao

[@hollymolly518]

it's ok 99% are bots

[@justinbeam4233]

You must've been the first ever YT user. Everyone on the internet tried balls as a username, but it was already taken.

[@Real_MisterSir]

They've just learned to practice damage control as an alternative to damage prevention. All big social platforms do this now and it's incredibly anti-user.

[@fotoschopro1230]

The phone numbers are even worse than passwords... The social engineering potential is huge.

[@MsHojat]

Well with passwords you can frequently get phone numbers too; although maybe many services have wisened up to this and partially hid the numbers just like with Credit Cards. Still in some cases having passwords might allow one to get contact information of other accounts (friends/contacts), or spread malware from private messages, so it's certainly very problematic on its own as well.

[@fotoschopro1230]

@@MsHojat This leak is basically a golden list for sim swappers

[@lemonheins2720]

nitter is great it's funny how simple of a design twitter is and yet to function it has to load large js files. like what.

[@angryteapod1765]

i mean from the ceos mouth themself they dont want to aim to proffit and employ soydevs.

[@randomblock1_]

Well, it has automatically updating like counters, infinite scrolling, hover popups, auto refresh, messaging, and oh yeah it's written in React so it looks good. I mean, from a business perspective, the longer you get people to browse, the more ads you can show. The average Joe isn't going to complain about a few KB of JS.

[@St0RM33]

fb is even worse lol

[@randomblock1_]

@Watcher Oh yeah, once you install adblock you can never go back. I mean, you ever TRY to just read a news article with ads on? It's hell.

[@UwUnamous]

Funny how they are trying to sue Elon Musk for not going through with his purchase and now this happens, ill laugh if they find some way to use this breach in court.

[@mobiuscoreindustries]

Well, the leaked information could potentially be used to reveal the bot problem IF the scalped accounts weren't "filtered" to remove bots from the list. But it definitely shows that Twitter fails to uphold a level of technical expertise required to actually handle problems and vulnerabilities on their site

[@txorimorea3869]

That information can be used to estimate the true percentage of bots for sure.

[@eupi9098]

Nah he can't, he agreed to buy Twitter at an inflated cost and agreed to all terms and bots/vulnerabilities that came with it. What a stupid "business man".

[@ghoulbuster1]

BRAKING NEWS! Hackers find out that 50% of the users in the data breach did NOT actually exist!

[@EdiValentin]

*I m p o s s i b l e*

[@prettyboyjeremy]

Damn did Elon dodge a bullet

[@sarkybugger5009]

BRAKING NEWS: Carbon discs are better than cast iron.

[@synexiasaturnds727yearsago7]

@@sarkybugger5009 no fucking way

[@ghoulbuster1]

@@sarkybugger5009 holy shit! for real?

[@zeliph]

Thanks for the suggestion of Nitter. I'll delete my Twitter account now. I only used it to reach out to one of the Original Xbox developers, who wanted to contact me back in 2019.

[@yashmjj]

I love the fact that Twitter's UI design becomes more and more generic as each year passes by just like it's depleting reputation. For loading 300 characters of text it sure occupies a lot of my internet

[@tirtel1]

Twitter then: Verify account with phone number to show us you're not a bot! Twitter now: You know what, you're not a bot, but now your phone number belongs to a bot, you're welcome

[@barreiros5077]

Twitter spain has sereval bugs ...more

[@barreiros5077]

@Maerii Naa twiter ist a very extractive datadealer even with vnp or proxy...Makes a hard fingerprinting even bronwser ...

[@ltxr9973]

It puzzling how many sites seem to put restrictions on their front ends but their APIs are either totally open or restricted but still too open. I can see why people are too lazy to do it right in a stateless world but that's not really an excuse. Some companies would rather sue someone for being able to count than fixing stuff like IDs that can be guessed.

[@xlerb1637]

Wait this is a really obvious bug, difficult to believe it wouldn't have been caught. That combined with the time it took to fix it tells me it was deliberate, that it looks like it was a way to let their friends get info on users while the people at Twitter have their hands clean. Unless they were getting paid by some advertiser to let them get user info without anyone getting in trouble.

[@666chapelofblood]

It isn't fixed, this isn't even a bug it's just how the API works.

[@xlerb1637]

@@666chapelofblood Then why did anyone report it?

[@pi4795]

Call it bug or call it huge design flaw doesn't matter, it's a data breach

[@anon_y_mousse]

I'd say it's a feature, not a bug, and no one should use twitter because that's what all the social media companies do.

[@pi4795]

@@anon_y_mousse Yeah, the problem is that anyone can add your phone number to your contacts, that doesn't mean that you know them and you gave it to them. It should work the other way around, if you have their number, you can accept to appear as a suggestion to them, NOT them as a suggestion to you

[@ABQSentinel]

How to protect yourself on Twitter: Step 1: Don't use Twitter Step 2: DON'T USE TWITTER Step 3: If you are using Twitter, STOP USING TWITTER

[@EdiValentin]

Seems like a good and solid list of steps. Thank you very much random user ;D

[@bytecorner123]

Just use a fake name and a burner phone if you really want to use any platform.

[@Frog_Scooper]

Serioulsy, anyone who uses platforms like these are full on idiots. Even KZbin is still very, very stupid.

[@JimboJuice]

@@bytecorner123 and then they take your hardware info Cookie data IP Location Other apps on mobile and all that other cool advertiser info.

[@Soandnb]

A solid start, but if I were to add to the list: 4. DO. NOT. USE. TWITTER 5. Engage in a distinctive lack of Twitter usage 6. Practice a noticeable absence of Twitter

[@UU-dp9th]

My favorite part is when they said not to use your real phone number

[@axbtcnold5847]

I see you comment will be high in this video So I write that to make people see me 𝘽𝙄𝙂 𝘽𝙍𝘼𝙄𝙉

[@denis2381]

GayAnalDildo

[@amaze2n]

I tried and they rejected every single virtual number I gave them. They locked me out a couple years ago for no apparent reason and would not give me access without a number.

[@Demian1]

@@denis2381 sentient bot

[@supermasterfighter]

@@Demian1 absolutely hilarious bot tbh, the pfp is the cherry on top, especially on mobile lmao

[@DarkGT]

Nothing to worry about, just your boy Musky trying to short Twitter value before he buys.

[@denis2381]

GayAnalDildo

[@kaywee]

@@denis2381 fr

[@kaywee]

@fatui harbingers. ratio

[@fadingsignal7185]

@@denis2381 Damn bro you spittin facts

[@xXx_Regulus_xXx]

@@kaywee don't ratio bots, doofus. report and move on.

[@johannesviljoen9656]

Anonymity teir list: S. Anime profile picture A. Signal, Homemade OS's B. The browser that quacks, ubuntu, Firefox C. Telegram D. Snapchat F. Twitter, Facebook, Reddit, KZbin, etc, etc

[@taureon_]

>anonymity >snapchat isnt the lowest somehow

[@Adrastus_]

"the browser that quacks" do you mean the duckduckgo browser or something? just use firefox, like you mentioned. and just lol at ubuntu for anonymity

[@johannesviljoen9656]

Im just memeing tbh

[@johannesviljoen9656]

Snapchat is good at locking out the account holder

[@Auditing102]

Ubuntu isn't anonymous, it just so happens that neither is windows

[@jer1776]

Just shows how important using a burner email is.

[@R1ch4rd]

And burner phone number.

[@lonec1777]

Thank you so much for mentioning Nitter. Never knew it existed, there are times where I have to go on twitter to see someones account and Twitter forces me to sign in with an account I don't want to make. I always love it when you mention software or services that kill the corporate bloat and scams.

[@dealloc]

You say that Twitter devs are smart enough to not expose passwords through their API. But a little known fact is that back in 2018, Twitter had to reset passwords of some accounts (330+ million) due to an internal leak. It would print out the password to a log, before the hashing (likely printing out the parameters sent through the form when registering an account or logging in).

[@TaoCroatia]

That is hilarious

[@peachery2k2]

i only use twitter to look at touhou art (i know, sounds weird) and recently got my account suspended for god knows why, i don't know why but i can't even open up the website anymore since then. this helped so much to me, thanks for showing it.

[@lifelover69]

If you're a Firefox user, I recommend the LibRedirect extension. It enables you to redirect twitter URLs to nitter URLs automatically and also auto-switch to currently online instances.

[@Jonathan-qs6eh]

Filo is a bird. Twitter is a bird. Coincidence? I think not.

[@billcorp6739]

This kind of data breaches, aren’t actually “breaches”, It’s exploiting the “Discover people by linking your contact list” feature that can be found in all social media like Facebook, twitter, instagram, etc.. Extracting the API of this feature then simulating a phone by sending random emails and phone numbers as contact list of this phone. If the programs found a match, it will log the username of that random email or phone number.

[@balllord3546]

Ok so exploiting a vulnerability to steal information on a platform from users meant to be private is not a data breach?

[@robertpaulson8790]

@@balllord3546 A breach isn't programmed by design.... this was

[@neoqwerty]

@@balllord3546 It's not a bug though, it's literally a feature and sockpuppeting. Is phishing considered a data breach, or is it considered phishing?

[@Seeker_of_F1r3]

Bot detected?

[@MsHojat]

Yes, this was the cause of one of the huge Facebook data "breaches". People blame Facebook for it -which is maybe partially fair- but it's really mostly the _users'_ fault for having that setting enabled on their account, or even potentially providing their phone number in the first place (unlike Apple, or to a lesser degree Steam or Discord, Facebook doesn't require a phone number)

[@dekuparadox5972]

Cool! Thanks for telling us about Nitter! :D I don't really use Twitter anymore, but I hate having to log in to some really old alt just to see like one specific post! xD

[@Alexbl100]

Hello, sir... SIR please pay attention, It's not just twitter it's any app that can search through your phonebook so you can add them as friends. Phones are wonderful

[@izimsi]

sounds like a really good and simple idea, never thought of it

[@Maleko48]

also, think about anyone in your day to day real life who either has your number saved in their phone already or who you might need to call and who will save your real phone number in their phone for future use such as co-workers.... if you're here reading this, there is a good chance your IQ > their IQ and that becomes an even more concerning vector for yourself

[@PASTRAMIKick]

twitter is pretty good for looking at Blender stuff, there's a ton of guys on there who give such good tips and also show you how to do stuff in a multi thread tweet.

[@Comrieion]

Just go on KZbin or Reddit

[@haveyouseenchefplis932]

@@Comrieion ah yes! recommends me more shitty platform for graphic designer related stuff fellow redditors!

[@neoqwerty]

@@haveyouseenchefplis932 At least he didn't say DeviantArt?

[@haveyouseenchefplis932]

@@neoqwerty DevianArt at least were meant to be the place you use to share visual artwork. Reddit? it's a shithole, no arguments needed. KZbin? unless you're planning on a long term "impress the faang/employer with my thought process and manifesting it in a documentary manner", it's not so much of a place for you to share your artwork isn't it?

[@My_Old_YT_Account]

@@haveyouseenchefplis932 Reddit works on TOR with temp emails at least

[@toast1655]

wanna know the funny part? Twitter asked me to check my number yesterday but never mentioned this 👍

[@CoolBH]

Same here, I was screensharing via discord and Twitter decided to show that for no reason and leak my number to the gc I was in 💀

[@diboc741]

man I love this channel. thanks for all the great content and suggestions.

[@JswahSwitch]

Holy shit, Nitter is a godsend this is beautiful, thank you I and over a half dozen friends had no idea this existed.

[@Veshremy]

noo!! what the flip man!

[@duccr]

first

[@denis2381]

GayAnalDildo

[@anime4evershiny]

That's why our number we are getting bots calling us nooo!!

[@victorjo7918]

Asking for a phone number to register on a social site.... what can go wrong?

[@dogwithhat947]

So that’s why I got so many spam emails in the last few days

[@roboedar]

You make some great videos broseph. Thank you.

[@mx9695]

Can also help sim swappers because now they got the persons phone number and email, which could result in stolen accounts

[@imhidingasecret]

I dont think anyone uses twitter for its privacy features but still funny ngl

[@Real_MisterSir]

Lots of big social platforms have simply grown accustomed to practicing damage control as an alternative to damage prevention. It's highly anti-user behavior, but it makes the platform easier to manage and thus it relates to their own profit. Big surprise. This will continue to be the trend among these companies forever.

[@mudskie4394]

Thanks Mental, will definitely use this when I have a PC and a job after 3 years

[@LilacMonarch]

"You don't need a twitter account unless you're a politician" Artists: Am I a joke to you?

[@sleepyguy4237]

Artists should choose another website that's meant for art cause twitter is garbage.

[@LilacMonarch]

@@sleepyguy4237 That's the thing...every art site available is also garbage

[@Frank451Martin]

@@LilacMonarch newgrounds used to be good to submit artwork until they decided to change the site again which became difficult to navigate along eye straining.

[@ZdrmonsterProductions]

They should make a website to host their art.

[@LilacMonarch]

@@ZdrmonsterProductions That would be nice, most artists don't have the resources to do that though and those that do don't seem to be interested in doing it

[@Afraaz]

i legit just got notified by twitter yesterday that i was in the data leak

[@PearceYT]

The thing is social media accounts don't really need all your information. They don't need your real cell phone number. They should go back to 2000 when they only needed an email account, any email account.

[@thepuzzlemaster64]

And this is why I never put my phone number on any social media account.

[@GhostSamaritan]

Tangentially related: Liberdon is one of the less moderated Mastodon instances that don't suck.

[@Vermino]

Oh 5.4 million users? So pretty much all of twitter real users?

[@draken5379]

Funny how it matches up with the estimates people have had about the % of users on Twitter that are bots. Most came to around 4-5million real users. lol.

[@Ethorbit]

Nitter is awesome, thanks for sharing.

[@pablo.gonzales945]

Another banger! Tech really suits you drizzy!

[@jasonmasr]

big ups for the nitter info, hadn't heard of it before.

[@nooblangpoo]

Don't forget that they're in the middle of the Elon Twitter deal in that few months. So any issues is gonna be bad for them.

[@karlkastor]

This is why I hate when websites require phone numbers. If you want to require a second factor, let me choose an authenticator app or just e-mail.

[@neopabo]

I didn't know nitter was a thing. I'll probably use that from now on, sounds like a great way to save time rather than get stuck in some BS recommendations

[@LaCr34tura]

I did get a random scam call this morning I should've made a throwaway email instead of using my phone number

[@hehe42069-k]

yeah i was wondering why i got a rando text with some big boobad bimbo asking for fuck the other day, this explains it lol. I havent even had a twitter account in months. Goes to show they really do permanently store all data they recieve.

[@redtomik3852]

Thanks for letting me know about nitter!

[@Jose04537]

I was hesitant to use two factor authentication (2FA) apps because, what if you lost the phone or deleted the app by accident? That was until someone told me, you can save the QR codes or Codes and use introduce them in another app's phone, and you get the exact same keys for your accounts.

[@Kenichitr]

- Babe, it is monday. Your weekly big data breach is here. - Okay honey.

[@愛]

1:53 LMFAOOO very dangerous individual

[@SupersuMC]

Been getting spam calls and texts from health insurance scammers thinking I'm someone named Karrie (which is neither my real name nor any of my historical aliases). I wonder if it has something to do with this?

[@SelassieEye]

Started using twitter more actively a few weeks ago, and have been dealing with more smishing than I ever have. I wonder if it’s connected….

[@Falin1989]

Thats what I call a useful content. Thanks!

[@VadimCool]

LMAO 😂 How did we go from a less than 5% bots to a 50%+ of bots? That video is so totally legit!!! Great info. 🤣

[@ttby]

need a class action lawsuit twitter just started emailing users that are affected including me

[@nopenoperson9118]

feeling extra vindicated in never having given twitter even a fake number or a legitimate e-mail address, now can't wait to see if i can get banned even faster than within two seconds of submitting a comment on my next burner

[@galenmarek4117]

Imagine using twitter in (current year)

[@GhostSamaritan]

(any year)

[@EdiValentin]

@@GhostSamaritan That's better

[@Bowhunter1987]

Everyone (with twitter): Our information, now it’s not just for advertising, but possibly doxing or blackmail! Me (don’t have twitter): Aw, sad Filo.

[@user-bkey]

huh, so that's why i've been getting so many spam calls i don't think my phone number is connected to any accounts at the moment but it has in the past which is interesting to think about

[@jokroast6912]

Thanks for telling me about Nitter.

[@AbdulHannanAbdulMatheen]

👏😅 That sucks for the victims.

[@EnmityEDM]

Hi, what hosting platform do you recommend for ecommerce website?

[@antonmeleshkov3200]

Dude, I don't really care about the main topic of video, but thank you for showing me Nitter. I'm from Russia, & it used to be a problem with Twitter. So now I can go back to watch holoarts without any troubles and VPN

[@MKULTRA_Victim_]

My ears were not ready for those first 10 seconds

[@derram0k]

"You can solve this problem by not giving us the things we demand. Sure, your account will be locked, but at least your data is safe! "

[@-alan--]

4:57 How are SMS 2 factor weaker now?

[@Alex-tx5ku]

Mental: u gain nothing on Twitter Me: what about my parasocial relationships

[@thexg0d833]

Me enjoying my day not having any social media except KZbin

[@Nogardtist]

the problem with some sites and especially browsers im looking at you chrome that they use too much resources for no reason they need to make software lighter and less resource demanding whats the point of having powerful component if they eat a lot of resources and barely do anything old games on modern PC would run so well its quiet meanwhile they make overpriced toaster that you probably can run an industrial power washer with same wattage

[@rusty9287]

Does this explain why I've been getting a shitton of spam texts/emails recently??? I wonder

[@anonz]

Kenny I will name my child after you if you heart this post

[@MentalOutlaw]

Better get started on having that child, don't let me down

[@denis2381]

@@MentalOutlaw GayAnalDildo

[@anonz]

@@MentalOutlaw thy will be done…

[@fatitigilo825]

Fritter can also be of use to some of us.

[@amnottabs]

1:56 "we're dealing with a very dangerous individual here" *shows pic of a dumb bird*

[@LukeJohnstone]

For other grey hat purposes, I have used MitM proxy with a tool called "APK-MitM", which patches and disables SSL (or something) allowing you to read the HTTPS requests in plain text. It's super simple to gain knowledge of the anatomy of requests being sent by particular android clients.

[@el7440]

alot of streaming or just plain ol sites have a similar bug and refuse to fix it

[@d-tank3843]

you make my life better everytime you post

[@leoriso]

ooh no my data I might get scammed, wait i live in a third world countrie we chilling

[@mackthenight]

One man's "data breech" is another man's wholesale sale of user information.

[@j2simpso]

Twitter is the number one open source social network according to Richard Stallman!

[@Rooot-username]

My twitter was having problems yesterday. Didnt know if it was a hack or not.

[@wister8528]

i remember trying to make an account on twitter and i ended up not talking to anyone or posting anything because it was too cancer

[@UnknownGuest220]

When you tell the next crime you know when you're going to do it

[@MisterLobb]

I wonder if the breach shows the percentage of bots or spam accounts…

[@minineji7050]

Twitter in indeed the cesspool of the internet

[@Slugbunny]

As is the way of all social media. 🙏🏻

[@disgustedluigi]

Ok but does Nitter allow me to set up notifications for certain users? I doubt it. The reason I have Twitter is so I’m alerted for limited edition items that are listed or various sales that are happening that I’d miss otherwise.

[@Nyworin]

I love your thumbnails

[@ベース-l1f]

I've tried Nitter in the past, but the issue is that I follow dozens of Twitter accounts, not just one. Plus, tweets cannot be liked. The only equivalent would be to bookmark tweets that you like.

[@xYamakaze]

Oh no, I hope they don't expose my 0 followed, 0 followers, 0 tweets, and 0 likes account! Edit: Thank you four eyed cat for recommending Nitter, very cool!

[@randomdamian]

Deleting now Twitter, Facebook and Instagram... fucking done with this shit... they fucking "breach" it 10 times a year... what fucking bullshit is this.

[@SnipingIsAGoodJobMate]

Can't stop winning from not having a Twitter account