Naoki Hiroshima’s recent loss of his single-letter Twitter handle @N to hijackers who socially engineered their way across multiple services was a stark reminder that there’s a human element to security on the internet: without touching a line of code, the perpetrators allegedly took four digits of a credit card provided by a PayPal customer service representative and gave them to another rep at hosting company GoDaddy as proof of identification.