Ben Popken

Ben Popken @bpopken

Asked SeeSaw about the vulnerability, they said, “The specific concerns that were raised in this report are not related to this week's incident and steps were taken to address them…we consulted an outside firm who was able to confirm we exercised all due diligence at the time…” — PolitiTweet.org

Ben Popken @bpopken

SeeSaw saw most of the hacked accounts had credentials that appear in breaches listed on https://t.co/Zt7o0X9OCd — PolitiTweet.org

Ben Popken @bpopken

Sorry, they say they talked to SeeSaw in 2020, and posted on Medium in 2021. Because over a year later some of the issues they raised they say weren't fixed. — PolitiTweet.org

Ben Popken @bpopken

Ed tech by its nature is a difficult market, you're dealing with limited budgets and capabilities all around, but families and schools deserve better. — PolitiTweet.org

Ben Popken @bpopken

After all, SeeSaw told @arstechnica they would be adding "refinements to our rate limiting, alerting, blocking, content detection, and login systems." — PolitiTweet.org

Ben Popken @bpopken

The attacker would have had to been blasting the login page to get in, and never get locked out, which is a major security oversight. — PolitiTweet.org

Ben Popken @bpopken

They said they told SeeSaw, who made authorization links longer. This attack wouldn't explain individual accounts accessed, and SeeSaw said it was credential stuffing, but could point to underlying backend weaknesses. — PolitiTweet.org

Ben Popken @bpopken

In 2020 SeeSaw user @IrishJP who id's as parent and a penetration tester posted on Mediium of how SeeSaw's API could be manipulated to send graphic images. https://t.co/5vhNQE6K7P — PolitiTweet.org

Ben Popken @bpopken

More to the SeeSaw messaging app story. SeeSaw told parents who were hacked and accounts used to send a graphic picture that they were "accessed from a suspicious IP address" 🤔 — PolitiTweet.org

Ben Popken @bpopken

RT @MalwareTechBlog: The Uber hack looks really bad. Someone posted a bunch of screenshots from what appears to be an account with Admin ac… — PolitiTweet.org

Ben Popken @bpopken

@IrishJP love to chat with you about the school messaging app issue you raised. Can you dm me your contact info? — PolitiTweet.org

Ben Popken @bpopken

@SusquCyclist 🤣I gotta say, I was about to apologize and then I read fully. Ya got me! lol. — PolitiTweet.org

Ben Popken @bpopken

Next we'll hear about daycares getting rickrolled — PolitiTweet.org

Ben Popken @bpopken

RT @kevincollier: NEW: Somebody hacked the school messaging service Seesaw this morning, forcing accounts to post goatse in parent-teacher… — PolitiTweet.org

Ben Popken @bpopken

RT @mhmck: On September 12, on the battlefront between temporarily-occupied Horlivka and Lysychans'k, the Russian fascist invaders attacked… — PolitiTweet.org

Ben Popken @bpopken

RT @WarMonitor3: Zaporizhzhia frontline👀 — PolitiTweet.org

Ben Popken @bpopken

RT @DefenceHQ: Latest Defence Intelligence update on the situation in Ukraine - 13 September 2022 Find out more about the UK government's… — PolitiTweet.org

Ben Popken @bpopken

RT @KyivIndependent: ⚡️ ISW: Ukraine’s recapture of Izyum puts stop to Russia’s plans in Donetsk Oblast. The U.S. think tank said that Ru… — PolitiTweet.org

Ben Popken @bpopken

RT @WarMonitor3: “Spokesperson of Operation command "South": some Russian units at Kherson frontline negotiating surrendering their weapons… — PolitiTweet.org

Ben Popken @bpopken

@BravoKilo6464 @Official_NAFO Have any design firms volunteered to help with the backlog? — PolitiTweet.org

Ben Popken @bpopken

RT @senrobportman: If we give the Ukrainians the weapons they need, they can win this war. Ukraine’s bold counteroffensive has shown that f… — PolitiTweet.org

Ben Popken @bpopken

"The arguments against providing [more advanced weapons to Ukraine] rest on 2 flawed assumptions. 1st is that this will cross a red line and provoke Putin into risking nuclear war. 2nd is that West needs to maintain a workable relationship with Russia." https://t.co/5xkbOXAllm — PolitiTweet.org

Ben Popken @bpopken

RT @ELINTNews: #BREAKING: Large parts of Ukraine in blackouts including Dnipropetrovsk, Sumy, Kharkiv and Poltava after Russian cruise miss… — PolitiTweet.org

Ben Popken @bpopken

Ukraine’s multi-pronged offensive adroitly exploits Russia’s centralized military command structure, which struggles to respond to multidirectional assaults. Authoritarianism is powerful, up until it chokes on its own bottleneck. War this week is truly a triumph of free thinking. — PolitiTweet.org

Ben Popken @bpopken

RT @MarkGaleotti: Amazed to see how so many replying to my thread on Russian state propaganda, w 'oh, it's just the same in the UK/US/etc'… — PolitiTweet.org

Ben Popken @bpopken

RT @bpopken: Signature on "Donetsk People's Republic" Denys Pushylin's purported resignation letter matches that on earlier document from h… — PolitiTweet.org

Ben Popken @bpopken

@MichaelKuz Fitting for Ukraine that the word comes from Hebrew for part of a plant containing the grain. — PolitiTweet.org

Ben Popken @bpopken

Signature on "Donetsk People's Republic" Denys Pushylin's purported resignation letter matches that on earlier document from him establishing an administration in Mariupol. https://t.co/zkWTpt64Sq — PolitiTweet.org

Ben Popken @bpopken

Fun fact: Ukrainians can quickly check if someone is a disguised Russian invader by making them say the "palianytsia" (паляниця), a type of round bread which Russians can't pronounce correctly. https://t.co/LXrSMadDQQ https://t.co/dQ13AKSpZv https://t.co/qo8vhhtb3g — PolitiTweet.org

Ben Popken @bpopken

It’s a rout. Russian-installed head of so-called “Donetsk People’s Republic” Denys Pushylin made a video as he fled east. This morning an unverified document purporting to be his resignation letter began circulating online. — PolitiTweet.org