Webapp Sign-in Security Re: Twitter Happiness-gate

Last week’s Twitter snafu involving the hacking of several celebrity Twitter accounts and posting commercial and lewd remarks was found to come from an individual hacking into a Twitter support person’s account. The gist of the story is that an individual wrote a script to automatically try every word in the dictionary to break into an online account. It turns out that the password was ‘happiness’ and was found relatively quickly. 

For programmers and online entrepreneurs, the moral of the story is to only allow a few login attempts before the account is automatically locked. How is the account unlocked? The account can be unlocked by contacting support, if applicable, or by going through a forgot password sequence that involves answering a question or having a link emailed and clicked.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.