45
ComputingAnyone else following the Twitter binfire? !!NOT the partisan politics crap!
Posted December 13, 2022 by m0RT_1 in STEM

Just the incredibly bad way it was run in terms of basic security. Holy doly!

Twitter didn't monitor employee computers at all, it was not uncommon for employees to install spyware on work devices

Twitter had security incidents serious enough they had to be reported to the federal government on an almost weekly basis.

Twitter did not keep backups of employee computers. They used to, but then the system broke, was never fixed, and execs decided this was good because it meant they couldn't comply with regulators.

Twitter knowingly allowed itself to be infiltrated by, or otherwise a tool of, many governments.

Practically all employees had access to sensitive data such as passwords, phone numbers, identification, DMs

some 4000+ Twitter engineers had access to user data like geolocation and engineers could potentially "tweet as anybody."

God it just goes on and on

https://twitter.com/avidhalaby/status/1602127460677844993?s=61&t=4Cr9mLvkTHPSfuJpBewqFQ

No comments