Twitter account hacked. Figuring it out. Don’t click.

i thought you used a yubikey? or did it happen even with that?

i like internet (◕‿◕)♡ riotgoools.com | veryinter.net/person | nf.td/elle | alt: @elle | very internet person channel: /vip

whoa that's crazy if they can bypass yubi/passkeys internally. kind of makes passkeys pointless (or not much better than sms.) i assumed my yubi was a "you're on your own if you lose your key" kind of situation

Yubikey and TOTP should be fine. If I had to guess it was an internal social engineering of a support contractor to reset the settings on the account.