<story><title>PayPal Denies Providing Payment Information to Twitter Username Hacker</title><url>http://thenextweb.com/insider/2014/01/29/paypal-denies-providing-payment-information-hacker-hijacked-50000-twitter-username/#!tXHD5</url></story><parent_chain><item><author>lipanski</author><text>In my opinion, the hacker who hijacked this guy&amp;#x27;s Twitter account didn&amp;#x27;t have had ANY interest in explaining how he got to it, besides creating a hoax to confuse and divert attention. Just think about it, in just one email he puts the blame on both GoDaddy, for doing phone validation over unsecure criteria (like credit card numbers), and PayPal (for giving out the last digits of the card number to a complete stranger). There might be some truth to it (GoDaddy&amp;#x27;s phone validation sucks and GoDaddy sucks altogether), but I&amp;#x27;ve read the original HN thread and the majority of comments are directed against GoDaddy or PayPal, rather than the real perpetrator. There are a million ways to hijack someone&amp;#x27;s account - including but not necessary by exploiting flaws of GoDaddy &amp;#x2F; PayPal - but I wouldn&amp;#x27;t trust the hijacker to kindly explain to me how he &lt;i&gt;actually&lt;/i&gt; did it.</text></item></parent_chain><comment><author>jader201</author><text>&lt;i&gt;&amp;gt; didn&amp;#x27;t have had ANY interest in explaining how he got to it, besides creating a hoax to confuse and divert attention.&lt;/i&gt;&lt;p&gt;Would the story have gone viral, though, had he just said, &amp;quot;I&amp;#x27;m not going to say anything about how I did it.&amp;quot;? The story would have just been another &amp;quot;I got hacked&amp;quot; story.&lt;p&gt;If the hacker were really clever enough to fabricate such an elaborate hoax, I think he would have been clever enough to realize the best way to divert attention from the story, would have been to just keep quiet.</text></comment>
<story><title>PayPal Denies Providing Payment Information to Twitter Username Hacker</title><url>http://thenextweb.com/insider/2014/01/29/paypal-denies-providing-payment-information-hacker-hijacked-50000-twitter-username/#!tXHD5</url></story><parent_chain><item><author>lipanski</author><text>In my opinion, the hacker who hijacked this guy&amp;#x27;s Twitter account didn&amp;#x27;t have had ANY interest in explaining how he got to it, besides creating a hoax to confuse and divert attention. Just think about it, in just one email he puts the blame on both GoDaddy, for doing phone validation over unsecure criteria (like credit card numbers), and PayPal (for giving out the last digits of the card number to a complete stranger). There might be some truth to it (GoDaddy&amp;#x27;s phone validation sucks and GoDaddy sucks altogether), but I&amp;#x27;ve read the original HN thread and the majority of comments are directed against GoDaddy or PayPal, rather than the real perpetrator. There are a million ways to hijack someone&amp;#x27;s account - including but not necessary by exploiting flaws of GoDaddy &amp;#x2F; PayPal - but I wouldn&amp;#x27;t trust the hijacker to kindly explain to me how he &lt;i&gt;actually&lt;/i&gt; did it.</text></item></parent_chain><comment><author>rickyc091</author><text>I could be wrong, but wasn&amp;#x27;t there a story a while back where someone explained how they could hack into any apple ID account with a similar process? Didn&amp;#x27;t linode&amp;#x27;s servers get hacked and the hacker explained the whole process?</text></comment>