Two former Twitter employees say more than 1,000 staff and contractors had access to internal tools to change account settings and ownership as of early 2020
the bathroom is over there, and here's the admin rights to start a nuclear war https://www.reuters.com/... Mike Murphy / @mcwm : 1,000 seems like... a lot https://www.reuters.com/... Tiffany C. Li / @tiffanycli : There's an important concept in privacy and infosec called “role-based access control” (RBAC). With RBAC, you restrict data access to only those employee roles that actually need access. Why did 1,000 employees and contractors have this much unguarded access at Twitter? https://twitter.com/... Rachel Tobac / @racheltobac : “The former employees familiar with Twitter security practices said that too many people could have done the same thing, more than 1,000 as of earlier in 2020, including some at contractors like Cognizant.” Contractor admin privileges are especially risky. https://www.reuters.com/... @hankgreen : Twitter has fewer than 5000 employees. https://twitter.com/... Antifa / @karoli : Damn. I'm not a techie but even I know that's too many people with the keys to the kingdom https://twitter.com/... Matthew Green / @matthew_d_green : Twitter's access controls are too sophisticated for ordinary people to understand. https://www.reuters.com/... Neeraj K. Agrawal / @neerajka : Over 1000 people had the access that those hackers had https://www.reuters.com/... @jaraparilla : Years ago Julian Assange warned @jack to “stay out of the censorship game.” Now @Twitter has given hundreds of people - including 3rd party contractors like @cognizant - access to their “god panel” to enforce censorship rules. The results are predictable. https://www.reuters.com/... Idrees Ali / @idreesali114 : “More than a thousand Twitter employees and contractors as of earlier this year had access to internal tools that could change user account settings and hand control to others, two former employees said."https://www.reuters.com/ ... Riana Pfefferkorn / @riana_crypto : E2EE for DMs is overdue. 2019: Saudi agents at Twitter got caught spying on 1000s of users 2020: Twitter employees got socially engineered, leading to this hack If Biden's DMs weren't hit, we avoided a Podesta moment by DUMB LUCK. Insider threat is why other tech cos. use E2EE. https://twitter.com/... Leo Kelion / @leokelion : Dutch far-right politician Geert Wilders confirms Twitter has told him that DMs were sent from his hacked account, and that he has concerns for the safety of some of those who messaged him https://www.bbc.co.uk/...
I am not an expert in enterprise software security, but I will go out on a limb and suggested that this if this is true it suggests pretty profound management problems at Twitter. https://www.reuters.com/... https://twitter.com/...
We suggest that @Twitter @Policy resumes its end-to-end encryption trial for direct messages. This will mitigate risks and harms associated with any future compromise of accounts on the platform 🔑 https://twitter.com/... https://twitter.com/...
This is bad: “Dutch anti-Islam politician Geert Wilders said in an email to The Wall Street Journal that he was a victim of the attack and that Twitter had notified him that his private messages were accessed.” (1/3) https://www.wsj.com/...
The fact that this story's been out for a day without a rebuttal from Twitter implies that it's true which is mind blowing. Especially since the company recently dealt with employees hacking people's accounts for the Saudi Arabian government. It's wild.😱 https://www.reuters.com/.…
Almost 1 in 4 twitter employees had the same level of access needed to execute the recent twitter hack. They definitely need to take a look at their privileges and implement least privilege access across the company https://www.reuters.com/...
There's an important concept in privacy and infosec called “role-based access control” (RBAC). With RBAC, you restrict data access to only those employee roles that actually need access. Why did 1,000 employees and contractors have this much unguarded access at Twitter? https://t…
“The former employees familiar with Twitter security practices said that too many people could have done the same thing, more than 1,000 as of earlier in 2020, including some at contractors like Cognizant.” Contractor admin privileges are especially risky. https://www.reuters.com…
Years ago Julian Assange warned @jack to “stay out of the censorship game.” Now @Twitter has given hundreds of people - including 3rd party contractors like @cognizant - access to their “god panel” to enforce censorship rules. The results are predictable. https://www.reuters.com/…
“More than a thousand Twitter employees and contractors as of earlier this year had access to internal tools that could change user account settings and hand control to others, two former employees said."https://www.reuters.com/ ...
E2EE for DMs is overdue. 2019: Saudi agents at Twitter got caught spying on 1000s of users 2020: Twitter employees got socially engineered, leading to this hack If Biden's DMs weren't hit, we avoided a Podesta moment by DUMB LUCK. Insider threat is why other tech cos. use E2EE. h…
Dutch far-right politician Geert Wilders confirms Twitter has told him that DMs were sent from his hacked account, and that he has concerns for the safety of some of those who messaged him https://www.bbc.co.uk/...