{"id":457663,"date":"2022-08-24T07:43:50","date_gmt":"2022-08-24T05:43:50","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=457663"},"modified":"2022-08-24T08:01:23","modified_gmt":"2022-08-24T06:01:23","slug":"former-twitter-executive-blows-lid-off-egregious-security-problems","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/457663-former-twitter-executive-blows-lid-off-egregious-security-problems.html","title":{"rendered":"Former Twitter executive blows lid off &#8220;egregious&#8221; security problems"},"content":{"rendered":"<p>A whistleblower complaint from Twitter Inc.\u2019s former head of security, claiming severe shortcomings in the social media company\u2019s handling of users\u2019 personal data, will have wide ramifications for the business.<\/p>\n<p>US lawmakers vowed to investigate, and the legal team for Elon Musk, who is seeking to abandon his agreement to acquire Twitter, was emboldened by the claims. Twitter shares fell as much as 5% on Tuesday, the biggest intraday drop in more than a month.<\/p>\n<p>The former executive, Peiter Zatko, alleged \u201cegregious deficiencies\u201d in Twitter\u2019s defences against hackers and other lax approaches to security, according to a copy of the complaint reviewed by Bloomberg.<\/p>\n<p>Zatko said he had warned colleagues that some of Twitter\u2019s servers were running out-of-date software and that executives had withheld information about breaches and lack of protections for user data.<\/p>\n<p>US House representatives confirmed the whistleblower complaint in a joint statement from Frank Pallone and Cathy McMorris Rodgers, the top Democrat and Republican on a House panel that received the report.<\/p>\n<p>\u201cThe Energy and Commerce Committee is actively reviewing the Twitter whistleblower disclosure and assessing next steps,\u201d they wrote.<\/p>\n<p>\u201cThere are still a lot of unknowns and questions that need to be answered. Many of these allegations, if true, are alarming and reaffirm the need for Congress to pass comprehensive national consumer privacy legislation to protect Americans\u2019 online data.\u201d<\/p>\n<p>Thousands of employees also had access to core company software, which led to hacks of high-profile users, according to the report.<\/p>\n<p>The Washington Post, which\u00a0<strong><a href=\"https:\/\/www.washingtonpost.com\/technology\/interactive\/2022\/twitter-whistleblower-sec-spam\/?utm_source=alert&amp;utm_medium=email&amp;utm_campaign=wp_news_alert_revere&amp;location=alert\" target=\"_blank\" rel=\"noopener noreferrer\">first reported<\/a><\/strong>\u00a0on the complaint along with CNN, said it was sent to the US Securities and Exchange Commission, the Justice Department and the Federal Trade Commission.<\/p>\n<p>The DOJ, FTC and SEC declined to comment.<\/p>\n<p>The whistle-blower document also alleged that Twitter prioritized growth over reducing the number of spam accounts, offering executives cash bonuses of as much as $10 million tied to increasing the number of daily users.<\/p>\n<p>Spam and \u201cbots\u201d on Twitter have been a key flash point in the company\u2019s dispute with Musk.<\/p>\n<p>Musk\u2019s lawyers also said Tuesday that they have issued a subpoena for Zatko to testify in the court battle. Legal experts said<strong>\u00a0<a href=\"https:\/\/www.bloomberg.com\/news\/articles\/2022-08-23\/twitter-whistle-blower-s-claims-buoy-musk-s-case-experts-say\" target=\"_blank\" rel=\"noopener noreferrer\">Zatko\u2019s complaint bolsters Musk\u2019s case<\/a><\/strong>.<\/p>\n<p>Twitter pushed back. \u201cWhat we\u2019ve seen so far is a false narrative about Twitter and our privacy and data security practices that is riddled with inconsistencies and inaccuracies and lacks important context,\u201d a Twitter spokesman said when contacted for comment by Bloomberg.<\/p>\n<p>\u201cZatko\u2019s allegations and opportunistic timing appear designed to capture attention and inflict harm on Twitter, its customers and its shareholders. Security and privacy have long been company-wide priorities at Twitter and will continue to be.\u201d<\/p>\n<p>Twitter said Zatko was fired in January for \u201cineffective leadership and poor performance.\u201d Bloomberg was unable to reach Zatko for comment. Whistleblower Aid, which represents him, said he stands by his disclosures.<\/p>\n<p>\u201cHis career of ethical and effective leadership speaks for itself,\u201d John Tye, chief disclosure officer of Whistleblower Aid, said in an emailed statement.<\/p>\n<p>\u201cThe focus should be on the facts laid out in the disclosure, not ad hominem attacks against the whistle blower.\u201d<\/p>\n<p>In a memo reviewed by Bloomberg, Chief Executive Officer Parag Agrawal told employees it was likely \u201cfrustrating and confusing to read\u201d the complaint, \u201cgiven Mudge was accountable for many aspects of this work that he is now inaccurately portraying more than six months after his termination.\u201d<\/p>\n<p>Agrawal warned of further distractions and said he will address employees at a meeting Wednesday.<\/p>\n<h3 class=\"my-4\">\u2018Serious Concerns\u2019<\/h3>\n<p>Musk made a reference to the claims\u00a0<a href=\"https:\/\/twitter.com\/elonmusk\/status\/1562105413977493504\" target=\"_blank\" rel=\"noopener noreferrer\">via Twitter<\/a>, with an image of the \u201cPinocchio\u201d character Jiminy Cricket saying \u201cgive a little whistle,\u201d a line from his signature song about listening to your conscience.<\/p>\n<div class=\"news-social-embedded\" data-social-media-type=\"twitter\" data-original-url=\"http:\/\/twitter.com\/elonmusk\/statuses\/1562105413977493504\">\n<blockquote class=\"twitter-tweet\" data-dnt=\"true\">\n<p dir=\"ltr\" lang=\"zxx\"><a href=\"https:\/\/t.co\/KsWiazActx\" target=\"_blank\" rel=\"noopener noreferrer\">pic.twitter.com\/KsWiazActx<\/a><\/p>\n<p>\u2014 Elon Musk (@elonmusk)\u00a0<a href=\"https:\/\/twitter.com\/elonmusk\/status\/1562105413977493504?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener noreferrer\">August 23, 2022<\/a><\/p><\/blockquote>\n<\/div>\n<p>If Zatko\u2019s claims are verified, Twitter would be in violation of a\u00a0<a href=\"https:\/\/www.bloomberg.com\/news\/articles\/2011-03-11\/ftc-accepts-settlement-with-twitter-over-security-breach\" target=\"_blank\" rel=\"noopener noreferrer\">2011 agreement with the FTC<\/a>. Members of the Senate Judiciary and Intelligence Committees said the report presents serious claims that could impact user privacy and national security.<\/p>\n<p>The budding investigation is reminiscent of congressional probe of whistle-blower allegations against Facebook, owned by Meta Platforms Inc., that first appeared in the Wall Street Journal last year.<\/p>\n<p>Meta has lost more than half of its market value since that complaint was published and earnings reports suggested that the level of Facebook\u2019s US users has plateaued.<\/p>\n<p>Despite bipartisan anger at Facebook, Congress hasn\u2019t passed any meaningful legislation to set stricter rules for internet companies.<\/p>\n<p>Tech-focused antitrust bills under consideration would only apply to a handful of platforms that are larger than Twitter.<\/p>\n<p>Twitter had largely escaped the ire of lawmakers in this Congress who have called representatives from TikTok, Snap and Meta-owned Instagram to testify.<\/p>\n<p>But Judiciary Chair Dick Durbin on Tuesday said the reports \u201craise serious concerns,\u201d and he promised to \u201ccontinue investigating this issue and take further steps as needed to get to the bottom of these alarming allegations.\u201d<\/p>\n<p>\u201cIf these claims are accurate, they may show dangerous data privacy and security risks for Twitter users around the world,\u201d said Durbin, a Democrat from Illinois.<\/p>\n<p>Iowa Senator Chuck Grassley, the ranking Republican on the Senate Judiciary Committee, is one of the lawmakers who has reviewed the complaint and is working with Zatko.<\/p>\n<p>Grassley said the whistle-blower claims \u201craise serious national security concerns as well as privacy issues, and they must be investigated further.\u201d The Senate Intelligence Committee is also looking into Zatko\u2019s claims, said spokesperson Rachel Cohen.<\/p>\n<p>Florida Senator Marco Rubio, the ranking Republican on the Intelligence Committee, said he and his colleagues are \u201ctreating the complaint with the seriousness it deserves and look forward to learning more.\u201d<\/p>\n<p>\u201cTwitter has a long track record of making really bad decisions on everything from censorship to security practice,\u201d Rubio said in a statement. \u201cThat\u2019s a huge concern given the company\u2019s ability to influence the national discourse and global events.\u201d<\/p>\n<h3 class=\"my-4\">\u2018Misleading Consumers\u2019<\/h3>\n<p>Twitter\u2019s 2011 settlement with the FTC barred the company for 20 years from \u201cmisleading consumers about the extent to which it protects the security, privacy, and confidentiality of nonpublic consumer information.\u201d<\/p>\n<p>That agreement sprang from a 2009 hack of the social media platform that allowed intruders to send out phony messages from any account, among other issues.<\/p>\n<p>In May, Twitter paid $150 million to the FTC for misusing user phone numbers uploaded for security purposes to target advertising.<\/p>\n<p>The use of the phone numbers breached the social media company\u2019s 2011 consent decree where it agreed to better protect users\u2019 personal data.<\/p>\n<p>Zatko\u2019s complaint alleges further violations of the 2011 settlement, which could open Twitter to additional potential fines.<\/p>\n<p>A federal judge accepted the $150 million settlement in May, but the FTC could opt to reopen the case or file another complaint.<\/p>\n<p>In his complaint, Zatko alleges that Twitter sales teams have continued to misuse phone numbers collected for security purposes for targeted advertising, that the data from users who deactivated their accounts wasn\u2019t properly deleted and that executives misrepresented information to the FTC about the company\u2019s privacy policies.<\/p>\n<p>His complaint also alleged that Twitter didn\u2019t properly monitor potential threats from insiders or take corrective actions when needed.<\/p>\n<p>Earlier this month, a former Twitter employee was convicted of spying for Saudi Arabia, using his access to obtain personal information about the government\u2019s critics.<\/p>\n<h3 class=\"my-4\">Now read: <a href=\"https:\/\/mybroadband.co.za\/news\/security\/457523-facebook-ad-tracking-script-exposes-1-36-million-patients-healthcare-data.html\" rel=\"bookmark\">Facebook ad-tracking script exposes 1.36 million patients\u2019 healthcare data<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>A whistle-blower complaint from Twitter&#8217;s former head of security, claiming severe shortcomings in the social media company\u2019s handling of users\u2019 personal data, will have wide ramifications for the business.<\/p>\n","protected":false},"author":341034,"featured_media":457665,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[15227,11373,80847,405],"class_list":["post-457663","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-cybersecurity","tag-elon-musk","tag-peiter-zatko","tag-twitter"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/457663"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341034"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=457663"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/457663\/revisions"}],"predecessor-version":[{"id":457667,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/457663\/revisions\/457667"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/457665"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=457663"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=457663"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=457663"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}