Phil

Hallam Infosec
#Hackerx01

[Phil @philmpire]

@SCsupport Hi, i am unable to go back further than 1 month to listen to older tracks in my stream. This never used to be the case. Have you made changes that now prevent this?

[Phil @philmpire]

Yeh. It's bad...

[MI6 ROGUE @mi6rogue]

Twitch has experienced a major data breach

[Phil @philmpire]

In addition, rumour is that part 2 could be on its way. Potentially containing user emails and passwords. Passwords may be exposed due to weak hashing algorithm. SHA-1 or bcrypt, depending on when the account was created.

[Phil @philmpire]

Huge breach @Twitch. Twitch source code, streamer earnings and possibly stream keys leaked. Would highly advise users to change password,reset stream key and enable 2fA as a precaution.

[Troy Hunt @troyhunt]

Twitch stored passwords in a pretty familiar fashion. Plenty of other services have taken the same approach (such as Dropbox, which we know from their breach), but it leaves a huge number of passwords exposed with the weak hashing algorithm. Wonder if we’ll see how many…

[Tom Warren @tomwarren]

BREAKING: Twitch confirms it has suffered a major data breach after its source code and secrets leak out. Details: https://t.co/afA56jOU20

[Marian Petruk @marianpetruk]

@evacide https://t.co/4czprGTLm6

[Alec Muffett @AlecMuffett]

I am seeing a regrettable amount of conspiracy-mongering regarding #facebookdown, so I would like to offer this juicy story; link attached.

https://t.co/jPWRAz042J

[Tabletop Scenarios @badthingsdaily]

The networking gear involved in an outage is access controlled by locks that are dependent on the network gear that is involved in the outage that is access controlled by locks that are dependent on network gear that is involved in the outage that is access controlled by the...

[Cloudflare @Cloudflare]

“Facebook can't be down, can it?”, we thought, for a second. Well it can, and here's how. https://t.co/V0fW2n0a4I

[Phil @philmpire]

@LisaForteUK Awesome! You'll do great 😊

[iain @ipb]

'Extremely sophisticated cyber attack'
1) We got phished.
2) They browsed our open S3 bucket.

[Richard Devine @RichardDevine]

DIMΣПƧIӨПΛᄂ ƧPΛᄃΣ-ƬIMΣ VӨЯƬΣX-👁‍🗨

[hacker.house @hackerfantastic]

Dear @zoom_us & @NCSC - well that escalated quickly.... Thanks to @AppSecBloke & @SeanWrightSec for letting me use their Zoom meeting to test. You can exploit UNC path injection to run arbitrary code, Windows does warn you with an alert box however.

[Brad Knowles @bradknowles]

FBI Issues Warning, NY Attorney General Makes Inquiry After Wave of Zoom Hijackings https://t.co/mVnamSYMVJ

[BleepingComputer @BleepinComputer]

Zoom Client Leaks Windows Login Credentials to Attackers - by @LawrenceAbrams
https://t.co/POhsJ8O19w

[Ben Sadeghipour @NahamSec]

Just pushed another update to "Resources for Beginner Bug Bounty Hunters" on GitHub! This month we added some resources for mobile hacking, smart contracts, recon, and more! https://t.co/AkG6IihgCN

[nixCraft 🐧 @nixcraft]

Wait what?