BELUGA

either two things are happening imo. 1) there's a critical security vulnerability in X backend systems that they haven't found or 2) its an inside job. why do i think this? 1. We had a passkey on the account, arguably one of the most secure 2FA mechanisms. 2. This is the screen we got when trying to sign in to the bankrbot X account. clicking the start button took us to a page to appeal a suspended account. 3. The attackers were still able to sign into the account to push malicious links -- the latest being long after we were already locked out of the account. Why was it that the attackers had full access to log in and post, but we were blocked by this screen? Why weren't the attackers blocked? 4. We started getting 503 (service unavailable) errors from the X api, but the attackers had full access to sign in and post. If all sessions and keys lost access, how did the attacker still have access? there has been a string of high profile account takeovers recently including the CEO of robinhood and even the spacex account and others who apparently also had MFA enabled on their X accounts. i would love to see this blow up and for the X team to have to be accountable for this.

我在罗宾汉官方发现的唯一中国元素，是中国黄山的迎客松，这应该是创始人最喜欢的中国元素。 The only Chinese element I discovered on the official Robinhood platform is the "Guest-Greeting Pine" from Mount Huangshan; this is likely the founder's favorite Chinese element.