Twitter halts tweeting via SMS after CEO Dorsey's account hack
What's the story
In a new development, Twitter has disabled the option to tweet using SMS. The capability has been useful for some people, but the microblogging site has noted that certain bad actors have been exploiting it to hijack accounts. They have compromised a number of celebrity accounts using the technique, including that of Twitter's co-founder and CEO Jack Dorsey. Here's all about Twitter's response action.
Loophole
'Security oversight' from Dorsey's carrier compromised his account
When Dorsey's account got hacked, hijackers were able to send out tweets from his account. The issue raised major alarms, prompting Twitter to clarify that there was no breach in its systems and that the account was compromised by mobile number hijacking. It had noted that 'security oversight' at the end of Dorsey's carrier allowed hijackers to swap his SIM and send out tweets via text.
Solution
Now, Twitter is halting text-based tweeting to fix loopholes
In order to prevent any further attacks the same way, Twitter has halted tweeting from SMS temporarily. The company says it won't resume the feature until the system of SMS-based tweeting is fully secure. Notably, it claimed that mobile carriers have to fix certain vulnerabilities at their end, while they have to reduce reliance on having a linked phone number for two-factor authentication.
Reactivation
Markets depending on this feature will get it soon
Having said that, Twitter did note that it will reactivate this feature pretty soon for all those markets that still rely on SMS for reliable communication. The company didn't name specific markets but there's no denying that a large number of Twitter users, including Dorsey, still use the option to tweet via SMS - even with all the apps/website at their disposal.
Upgrade
Of late, Twitter has been improving its product
The action from Twitter comes just as it continues to revamp its app and website with interesting features. The company recently gave its website a new look as well as started testing the ability to hide abusive direct messages. Not to mention, it has also introduced the ability to follow topics, like actual Twitter accounts, for certain users.