Twitter ‘over a decade behind’ industry standards for cybersecurity: Whistleblower
A Twitter whistleblower says the social media platform is a decade behind security standards, and that its cybersecurity failures cause real harm to real people.
Former Twitter chief security officer Peiter "Mudge" Zatko, who testified before the Senate Judiciary Committee on Tuesday, noted company executives turned a blind eye to the problem while focusing on profits.
Zatko noted that after the Federal Trade Commission (FTC) ordered the firm to protect users’ private data, it failed to do so.
"What I discovered when I joined Twitter was that this enormously influential company was over a decade behind industry security standards," he said. "The company's cybersecurity failures make it vulnerable to exploitation, causing real harm to real people."
"When I brought concrete evidence of these fundamental problems to the executive team and repeatedly sounded the alarm of the real risks associated with them -- and these were problems brought to me by the engineers and employees of the company themselves — the executive team chose instead to mislead its board, shareholders, lawmakers, and the public instead of addressing them."
The reason why this happened was that "key parts of leadership lacked the competency to understand the scope of the problem," he said, noting, on top of this, "executive incentives led them to prioritize profits over security."
Zatko said that one part of the problem is that the firm has so much information that it is hard to keep a track of what data the company has, “where it lives, or where it came from," and consequently, they "can’t protect it."
The other part is that too many Twitter employees access too much information, he stated, adding, the firm lacked a solid infrastructure for detecting who accessed what information or when.
He then elaborated on what a person could do with a Twitter user's information, saying, "This is the information that you need in order to start taking over other people's accounts."
"With your phone number and an email address, I can hijack your phone number. I can then change your Gmail, your Coinbase, your Ameritrade, your other accounts. I can cause financial harm that way. I can then assume your identity."
Israeli-US estate tycoon brothers charged with decade-long sex trafficking
US, Canadian universities hire Israeli firms to curb pro-Palestinian protests, report says
US nuclear spending cause for concern
FM: Protecting political borders of regional countries Iran’s red line
Iran: Terrorism threatens peace, security and human rights
Iran manufacturing its own version of Boeing, Airbus engine parts: Official
Israel expands urbicide as tool of genocide in Gaza: Euro-Med
Iran’s semi-finished steel output down 4.3% y/y in Apr-Nov
VIDEO | Press TV's news headlines
Israeli snipers fire at patients, staff at northern Gaza hospital: Director
Gaza ceasefire deal within reach if Israel stops setting new conditions: Hamas
PressTV NEWSLETTER
now
This makes it easy to access the Press TV website
