Defense Dept didn’t protect social media accounts, left stream keys out in public

‘The practice… has since been fixed,’ Pentagon official tells The Reg

The US Department of Defense, up until this week, routinely left its social media accounts wide open to hijackers via stream keys – unique, confidential identifiers generated by streaming platforms for broadcasting content. If exposed, these keys can allow attackers to output anything they want from someone else’s channel.…