Has Twitter account of Jon Matonis been cracked?

[ihsotas]

Funny. @octal is a friend of mine, was at BTC2013.

Twitter has 2FA now -- really unforgivable for a visible frontman of the BTC world.

[tvbcof]

Funny. @octal is a friend of mine, was at BTC2013.

Twitter has 2FA now -- really unforgivable for a visible frontman of the BTC world.

I should be more clear that the attacker who had control of Jon's account was communicating with @octal.

Hey attacker?  Tell us if Jon's Yahoo! password was some permutation of 'liberty', 'rand', 'atlas', etc and I'll send you a few bucks.

[ihsotas]

Funny. @octal is a friend of mine, was at BTC2013.

Twitter has 2FA now -- really unforgivable for a visible frontman of the BTC world.

I should be more clear that the attacker who had control of Jon's account was communicating with @octal.

Hey attacker?  Tell us if Jon's Yahoo! password was some permutation of 'liberty', 'rand', 'atlas', etc and I'll send you a few bucks.

Right. @octal was just asking the hacker a bunch of questions through twitter, and that was one of the responses. You can still see the questions on @octal's account, but @jonmatonis has been purged to 0 tweets and just a handful of followers.

It's surprising how much schadenfreude there's been around this. I don't know much about Matonis, but is seems like a lot of people had very little respect for him.

[tvbcof]

...
It's surprising how much schadenfreude there's been around this. I don't know much about Matonis, but is seems like a lot of people had very little respect for him.

I'd derive amusement about something like this no matter who it happened to.  Even if it were myself!  No harm, no foul.  OTOH, it becomes a bit criminal depending on what that binary does.  I assume that the attacker would stay out of the kitchen if he (most likely 'he') cannot stand the heat, and I'll enjoy it even more if he get's caught.

---

FWIW, this is IMO yet another somewhat valuable illustration of just how difficult it can be to maintain control of one's data these days, and that really needs to be a factor in being realistic about crypto-currency design.

[Arto]

Yes but how the f- does the man who ceo'd Hushmail get his Twitter 'hacked'?

Twitter doesn't exactly have a stellar track record on system security:

http://mashable.com/2013/02/01/twitter-security-breach/

[Stunna]

Well.. this certainly must be a very embarrassing situation for him, poor guy. Most people are smart enough to  immediately realize he has been hacked though.


EDIT: They appeared to have deleted his account..

[ihsotas]

Well.. this certainly must be a very embarrassing situation for him, poor guy. Most people are smart enough to  immediately realize he has been hacked though.


EDIT: They appeared to have deleted his account..

Twitter usually deactivates or locks out compromised accounts if the victim can prove their identity; that doesn't seem to be the case here. The hacker is still tweeting under @jonmatonis. As I write this, there are two tweets:


Jon Matonis ‏@jonmatonis 1h
Good luck getting your Twitter back now Jon. Shouldn't have ignored me, GG.

Jon Matonis ‏@jonmatonis 1h
@octal He got his other stuff back...

[Stunna]

Well.. this certainly must be a very embarrassing situation for him, poor guy. Most people are smart enough to  immediately realize he has been hacked though.


EDIT: They appeared to have deleted his account..

Twitter usually deactivates or locks out compromised accounts if the victim can prove their identity; that doesn't seem to be the case here. The hacker is still tweeting under @jonmatonis. As I write this, there are two tweets:


Jon Matonis ‏@jonmatonis 1h
Good luck getting your Twitter back now Jon. Shouldn't have ignored me, GG.

Jon Matonis ‏@jonmatonis 1h
@octal He got his other stuff back...

Ah, very true my mistake. It seems they managed to steal his twitter handle though. At least they no longer have access to his followers.

[dave111223]

http://www.forbes.com/sites/jonmatonis/2013/05/27/donations/

Donate Bitcoins
Comment Now
Follow Comments

If you would like to donate Bitcoins my address is: 14yMcPkqUVYrXFLwxJdSS34ae7reFmg5PJ

Thanks.

[Vycid]

Offtopic sort of but I find it neccessary to be said:

Anyone having Facebook, Twitter, MySpace, Google+ or similar account or is using any of services provided by (major) corporations or other service providers who are heavily backed
by the system and is involved with cryptocoins at the same time is an idiot, period.

Jon has done a lot for the progression of Bitcoin over the past years.

Not a nice thing to say mate!

He is working on disruptive technology threatening established (monetary) systems and uses Twitter.

Oh, please. Bitcoin is not currently a threat to any established monetary system. Don't be delusional.

He's a guy who didn't take appropriate steps to secure his accounts, they got hacked, and now someone else has control of them. This happens to celebrities all the time.

[bg002h]

Offtopic sort of but I find it neccessary to be said:

Anyone having Facebook, Twitter, MySpace, Google+ or similar account or is using any of services provided by (major) corporations or other service providers who are heavily backed
by the system and is involved with cryptocoins at the same time is an idiot, period.

You really think so? What sets crypto apart? Is it just the ease of fraud?

[tvbcof]

The fun continues into Monday.  For posterity:

-----
Jon Matonis ‏@jonmatonis 33m
Exploit I used to compromise Mr. Matonis's Yahoo, leading to all his accounts being jacked: http://goo.gl/TAfzA  Enjoy.
-----

Now all of Jon's tweets are back, but he is down to zero followers and followings.  I'm kinda wondering if Jon either has control, or is leaving control in the hands of the attacker to gain information.  But I have no idea how Twitter and it's support structures work.

As always, it would likely be monumentally stupid to simply execute the downloaded program (which, like the one yesterday, I have a copy of if anyone wants it.)

[charleshoskinson]

This is very sad. Jon Matonis is a wonderful guy and I really hope that this incident can be resolved soon.

[ihsotas]

Offtopic sort of but I find it neccessary to be said:

Anyone having Facebook, Twitter, MySpace, Google+ or similar account or is using any of services provided by (major) corporations or other service providers who are heavily backed
by the system and is involved with cryptocoins at the same time is an idiot, period.

Jon has done a lot for the progression of Bitcoin over the past years.

Not a nice thing to say mate!

He is working on disruptive technology threatening established (monetary) systems and uses Twitter.

Oh, please. Bitcoin is not currently a threat to any established monetary system. Don't be delusional.

He's a guy who didn't take appropriate steps to secure his accounts, they got hacked, and now someone else has control of them. This happens to celebrities all the time.

Well said. Anyone who uses Twitter and doesn't even bother to active two factor auth deserves to get hacked, hard. If you're a columnist, you should be especially cautious.

[octal]

I don't think Twitter's new 2FA is actually all that beneficial.

Long random-string passwords, either with a password manager or in a secure client, and your twitter email address being a secret/unpublished "secure" email address, rather than something like your main yahoo (mm, XSS) and itself with 2FA or equivalent security, is probably twitter account best practice.

Email accounts are the skeleton key to the Internet.

[nimda]

I also have a copy of Yahoo Exploit.exe if someone wants it. It's a 1,030,693 byte file.

[Kluge]

I also have a copy of Yahoo Exploit.exe if someone wants it. It's a 1,030,693 byte file.

Should probably be sent to Yahoo if not already.

[maco]

As of right now: his twitter account does not exist.

So I went to researching stages, and I couldn't find much history of his previous tweets with the site: allmytweets.net which displays all tweets.

Here is a cached version of his twitter account (This cache was last collected on May 21, 2013)
so.. we are a few days behind, and now the account is gone.
http://webcache.googleusercontent.com/search?q=cache:o_2Nke32zr0J:https://twitter.com/jonmatonis+%40jonmatonis&cd=1&hl=en&ct=clnk&gl=us