I caught this one over at Mashable, another sad example of a hacked Twitter account.

The Twitter account for Andi Arief, who is the disaster management adviser to Indonesia’s president, was hacked and then sent out a fake tsunami warning. The article also goes on to say that he quickly regained control of the account. The author points out, rightly so, that this a danger of Twitter. I have to agree. Perhaps not as much as when it is a celebrity but certainly when it is someone associated with disaster response.

While I agree with the author that this is another example of “high profile” account being hacked, and it shows the potential danger of the service, I wonder about something else. The author mentions several other examples of being hacked. I am always curious as to how the account was hacked in the first place.

That is the part that scares me. I was one of the many who fell victim to that recent JavaScript mouse over XXS exploit; the ease of which that exploit hit users was scary. High profile people are simply going to be hacker targets. I also wonder how often these high profile users change their passwords and how secure a password they use. That is often even more frightening.

I have worked at establishments that would never change security codes and/or passwords. Just because they are a business, government agency, or high profile figure should not imply that they know much about such matters. I also hope that hacker attempts as simple as a dictionary attack are not going to work on any password for a high profile account.

I recall that being a real mess for Twitter, apparently the hacked account back in 2009 was a staffer. The password was “happiness,” the hacker had access to the back end, and, soon after, then President-elect Obama’s account. I do worry more about that type of hack than any one individual’s account. I don’t know much about Twitter security. I like the service, I use the service, and I hope that it continually improves its security.