A ridiculous situation is developing at Quora. Three situations actually. The first is that Sundar Pichai’s (CEO of Google) Quora account has being hacked. The second situation concerns the hacker’s claim a vulnerability was found on Quora. And the third is Quora denying it.
Sundar Pichai’s Quora Account Hacked
It is now the trending news on online media. After the Mark Zuckerberg saga in which several of his social media accounts were hacked, you’ d think a high profile person like Pichai working for a tech giant would find a way to secure all his accounts. After all, there are so many smart engineers that could do it for him if he is too busy to do it himself. Even interns working there could use this as an opportunity to impress the top honcho of the firm if given the chance.
But it seems Pichai did not do all that or did he? Anyway, the group that hacked his Quora account call themselves OurMine. They released this statement on their website concerning the hack:
We got access to Sundar Pichai Accounts!
Today , we checked Sundar Pichai Security , and we got access to his twitter & Quora accounts , his security was really weak
You can also check or upgrade your accounts security , by buying our services ( https://ourmine.org/services )
if you have any other questions , you can contact us ( https://ourmine.org/news/contact-us/ )
Sundar Pichai Twitter: https://twitter.com/SundarPichai”
And since Pichai’s Twitter details were also linked to his Quora account, the group were able to access his Twitter account and post the message of the hack to hundreds of thousands of Pichai’s followers to see.
OurMine and a Hacking Spree
OurMine is a 3-man hacking concern that is determined to hack the online accounts of as many top shots as possible to prove that no account is safe from hacking and to make money of course. Because in the final analysis, that is what this is all about.
If you read the message they posted on their website over the hacking of Sundar Pichai’s account, a link is provided where you can buy a product from them to help secure your online account. I wonder who would buy a security software from a hacking group notorious for hacking accounts of people like Pichai and Daniel EK of Spotify.
OurMine though would do well to rebrand themselves as a security firm of repute. And the rebranding is what they seem to be trying when they told The Next Web that they did not actually hacked into Pichai’s Quora account but rather used a vulnerability in Quora to get Pichai’s account details.
And acting like all decent white hat hackers, OurMine claimed they reported the issue to Quora but got no response from them. Situations like this was why all bug bounty programs are created. And Quora do have a bug bounty service. Perhaps, they are still trying to verify it.
Quora Denied Presence of Vulnerability
This is the third part of the situation. Quora denied an exploit in their system led to the hacking of Pichai’s account. Here is the full statement they released to The Next Web:
We are confident that Sundar Pichai’s account was not accessed via a vulnerability in Quora’s systems. This is consistent with past reports where OurMine exploited previous password leaks on other services to gain access to accounts on Twitter or Facebook. We also have no record of a report by OurMine pointing to a vulnerability. We recommend that people use unique passwords for accounts on different services, so that a security breach on one service does not lead to attackers gaining access to accounts on other services. Safeguarding our users is very important to us, which makes security at Quora one of our highest priorities.”
But these facts are undeniable though, Pichai’s Quora’s account was hacked. His Twitter details were accessed through the Quora hack. The hacking group responsible is known as OurMine.
What all this proved is that no matter what we do, no account is safe from determined hackers. Which is what we have being saying all along. Our best bet is to make it difficult for them to hack our accounts.
photo credit: konklone.com; Twitter; thenextweb.com;