Video of Twitter being hacked: tweets without Captcha

Here is the video of Twitter being hacked by GMZ:

Apparently GMZ (the hacker and a 18 student) used a dictionary attack to login in into a Admin account. How was this possible? Well if you try to log in into Gmail or Hotmail and failed for x number of time, then you are ask to confirm that you are human using captcha. Twitter didn’t have this feature, therefore anybody (in this case GMZ) ran a script overnight and guessed the password by brute force.

Like I said it before, twitter needs to go back to beta. By the way, if your site doesn’t have something from preventing this attack, you know now what can happened.

Want to read more about the topic, here are some links to:

The Register and Wired