From 'minimaxir: <a href="https://news.ycombinator.com/item?id=20842045" rel="nofollow">https://news.ycombinator.com/item?id=20842045</a><p>> It's worth noting the client is Cloudhopper: that has been compromised before.<p>> <a href="https://twitter.com/gruber/status/859857475146854402" rel="nofollow">https://twitter.com/gruber/status/859857475146854402</a><p>Looking up the hashtag the attackers used, I came across this blog post alleging the problem being AT&T's: <a href="https://www.treyexgaming.com/index.php/2019/08/26/how-the-same-hacker-has-hacked-over-10-content-creators/" rel="nofollow">https://www.treyexgaming.com/index.php/2019/08/26/how-the-sa...</a><p>Food for thought.<p>Regardless of whether the alleged source of insecurity is what happened here, SMS-based authentication was a mistake.