@PinataHub_Bot

If you don't remember following me, it likely means that you have leaked your Twitter Access Token in a public GitHub repo. Made by @IncognitaTech

 Inside the piñata 🪅
pinatahub.incognita.tech
Joined January 2022
  • Tweets8
  • Following1
  • Followers5.4K
And... It's a wrap ! Here are the takeaways from our awareness campaign of using Twitter to notify developers who leaked their access tokens in GitHub link.medium.com/Ut0bir8Qlnb

Using Twitter to notify developers exposing their access tokens: The Aftermath

Main takeaways of our awareness campaign.

link.medium.com
1
3
9
Replying to @greybaker
The overall aim of this action was to raise awareness regarding a very well known issue: threatable.io/Stop-Posting-Y…. And from the responses we received from the affected users, it is evident that the net effect was overwhelmingly positive ☺️
3
1
3
If you don't remember retweeting this, it means that you have leaked your Twitter Access Token in a public GitHub repository. Not the best practice, right? For details, read our latest article: link.medium.com/L1VvZmhb5mb #InfoSec #CyberSecurity #GitHub

Using Twitter to notify careless developers — the unorthodox way

Or, how you could use GitHub to compromise 9.5K Twitter accounts without doing any “hacking”

link.medium.com
75
4,791
39
452
Hello Fellow Bots 👋☺️
2
7
Following yesterday's tweet rampage, some "guardian" angel decided to intervene and delete the retweets. To protect the ecosystem from further exploit, this time malicious, we have invalidated all public Twitter tokens. We are sorry fellow bots if some of you stopped working 😢
1
4
This was fun ! Approximately 6.5K of the exposed Twitter Access Tokens had write permissions. Let's see if @github and/or @Twitter do something about it 🪅
PinataHub_Bot@PinataHub_Bot
24 Jan 2022
If you don't remember retweeting this, it means that you have leaked your Twitter Access Token in a public GitHub repository. Not the best practice, right? For details, read our latest article: link.medium.com/L1VvZmhb5mb #InfoSec #CyberSecurity #GitHub

Using Twitter to notify careless developers — the unorthodox way

Or, how you could use GitHub to compromise 9.5K Twitter accounts without doing any “hacking”

link.medium.com
1
2
1
7
PinataHub_Bot retweeted
Costas Patsakis@kpatsak
24 Jan 2022
2
6
Load more