1/ Twitter account update

- Yesterday I got locked out of my account. Triple-checked the URL was twitter.com (it was from the mobile app, too) and followed the restore access flow. Went to sleep.

- Woke up to account hacked. Lots of inbound messages (ty!). Pinged someone who was ble to get account locked down.

2/

- I've had a passsword manager password that I don't know and 2FA via TOTP. Also usually good about auditing my OAuth connected apps. Google Fi for mobile to reduce likelihood of SIM swap.

- After @vitalik.eth's hack, I removed my phone number from Twitter as a precautionary step.

- More updates to come...

So you didn't have a Security Key setup with X?

𝓵𝓲𝓿𝓲𝓷𝓰 𝓽𝓱𝓮 𝓮𝓷𝓭𝓵𝓮𝓼𝓼 𝓼𝓾𝓶𝓶𝓮𝓻 • building @buoy 🛟 • pfista.com

Nomad Rural LLG, Western Province, Papua New Guinea