TechDigits

Tech news
Friday, Mar 31, 2023

Twitter whistleblower raises security concerns before US Congress

Twitter whistleblower raises security concerns before US Congress

‘I am here today because Twitter leadership is misleading the public,’ company’s former security chief tells lawmakers.

The former security chief at Twitter has told the United States Congress that the social media platform is plagued by weak cyber-defences that make it vulnerable to exploitation by “teenagers, thieves and spies” and put the privacy of its users at risk.

“I am here today because Twitter leadership is misleading the public, lawmakers, regulators and even its own board of directors,” Peiter “Mudge” Zatko, a respected cybersecurity expert, said before the Senate Judiciary Committee on Tuesday.

“They don’t know what data they have, where it lives and where it came from and so, unsurprisingly, they can’t protect it,” Zatko added. “It doesn’t matter who has keys if there are no locks.”

His message echoed one brought to Congress against another social media giant last year, but unlike that Facebook whistleblower, Frances Haugen, Zatko did not bring troves of internal documents to back up his claims.

His testimony comes as US lawmakers attempt to crack down on disinformation campaigns that risk skewing elections and public health campaigns.

Zatko was the head of security for the influential platform until he was sacked early this year.

The 51-year-old first gained prominence in the 1990s as a pioneer in the ethical hacking movement and later worked in senior positions at an elite Department of Defense research unit and at Google. He joined Twitter in late 2020 at the urging of then-CEO Jack Dorsey.




He filed a whistleblower complaint in July with Congress, the US Department of Justice, the Federal Trade Commission (FTC) and the Securities and Exchange Commission.

Among his most serious accusations is that Twitter violated the terms of a 2011 FTC settlement by falsely claiming that it had put stronger measures in place to protect the security and privacy of its users.

US Senator Dick Durbin, an Illinois Democrat who heads the Judiciary Committee, said Zatko has detailed flaws “that may pose a direct threat to Twitter’s hundreds of millions of users as well as to American democracy”.

“Twitter is an immensely powerful platform and can’t afford gaping vulnerabilities,” he said.

Unknown to Twitter users, there’s far more personal information disclosed than they — or sometimes even Twitter itself — realise, Zatko testified. He said that “basic systemic failures” that were brought forward by company engineers were not addressed.

The FTC has been “a little over its head”, and far behind European counterparts, in policing the sort of privacy violations that have occurred at Twitter, Zatko also said.

Many of Zatko’s claims are uncorroborated and appear to have little documentary support.

Twitter has called Zatko’s description of events “a false narrative … riddled with inconsistencies and inaccuracies” and lacking important context.


Spam accounts


Zatko has also accused the company of deception in its handling of automated “spam bots” or fake accounts.

That allegation is at the core of billionaire tycoon Elon Musk’s attempt to back out of his $44bn deal to buy Twitter. Musk and Twitter are locked in a bitter legal battle, with Twitter having sued Musk to force him to complete the agreement.

The Delaware judge overseeing the case ruled last week that Musk can include new evidence related to Zatko’s allegations in the high-stakes trial, which is set to start on October 17.

Senator Charles Grassley, the committee’s ranking Republican, said on Tuesday that Twitter CEO Parag Agrawal declined to testify at the hearing, citing the ongoing legal proceedings with Musk.

But the hearing is “more important that Twitter’s civil litigation in Delaware”, Grassley said. Twitter declined to comment on Grassley’s remarks.

In his complaint, Zatko accused Agrawal as well as other senior executives and board members of numerous violations, including making “false and misleading statements to users and the FTC about the Twitter platform’s security, privacy and integrity”.

Twitter has said Zatko was fired for “ineffective leadership and poor performance”, and that his allegations appeared designed to harm the company.

Zatko testified before the Senate Judiciary Committee in Washington on Tuesday


India, China connection


Among the assertions from Zatko that drew attention from US lawmakers on Tuesday was that Twitter knowingly allowed the government of India to place its agents on the company payroll, where they had access to highly sensitive data on users.

Twitter’s lack of ability to log how employees accessed user accounts made it hard for the company to detect when employees were abusing their access, Zatko said.

India has not commented on that assertion.

The whistleblower disclosures had also noted that the US Federal Bureau of Investigation had informed Twitter of at least one Chinese agent inside the company, Senator Grassley said in his opening statement.

Zatko said on Tuesday that in the week before he was sacked, he learned an agent of China’s Ministry of State Security, or MSS, an agency comparable to the US Central Intelligence Agency, was on the payroll at Twitter.

It was not immediately clear if the alleged Chinese agent was still working at the company.

Twitter has said Zatko was fired for ‘ineffective leadership and poor performance’ and that his allegations appeared designed to harm the company

Newsletter

Related Articles

TechDigits
Close
0:00
0:00
China and Brazil have signed a new deal that will allow them to trade in their own currencies, bypassing the US dollar as an intermediary
Elon Musk and Others Call for Pause on A.I., Citing ‘Profound Risks to Society’
U.S. charges FTX's Bankman-Fried with paying $40 million bribe
Fallen 'Crypto King' Who Owes Millions to Investors Was Kidnapped and Tortured
Regulators blame social media for SVB's rapid collapse: 'Complete game changer'
AOC explains why she opposes banning TikTok
Gordon Moore, a co-founder of Intel Corporation, died at 94
Donald Trump arrested – Twitter goes wild with doctored pictures
Credit Suisse's Scandalous History Resulted in an Obvious Collapse - It's time for regulators who fail to do their job to be held accountable and serve as an example by being behind bars.
Russian Hackers Preparing New Cyber Assault Against Ukraine
A brief banking situation report
Elon Musk Is Planning To Build A Town In Texas For His Employees
The Silicon Valley Bank’s collapse effect is spreading around the world, affecting startup companies across the globe
Market Chaos as USDC Loses Peg to USD after $3.3 Billion Reserves Held by Silicon Valley Bank Closed.
Banking regulators close SVB, the largest bank failure since the financial crisis
In a major snub to Downing Street's Silicon Valley dreams, UK chip giant Arm has dealt a serious blow to the government's economic strategy by opting for a US listing
It's the question on everyone's lips: could a four-day workweek be the future of employment?
Corruption and Influence Buying Uncovered in International Mainstream Media: Investigation Reveals Growing Disinformation Mercenaries
Being a Tiktoker might be expensive…
China's top tech firms, including Alibaba, Tencent, Baidu, NetEase, and JD.com, are developing their own versions of Open AI's AI-powered chatbot, ChatGPT
This shocking picture, showing how terrible is the results of the earthquake in Turkey
The desk of King Carlos Alberto of Sardinia has many secret compartments
Charlie Munger, calls for a ban on cryptocurrencies in the US, following China's lead
First generation unopened iPhone set to fetch more than $50,000 at auction.
Almost 30% of professionals say they've tried ChatGPT at work
Interpol seeks woman who ran elaborate exam cheating scam in Singapore
What is ChatGPT?
Tesla reported record profits and record revenues for 2022
Microsoft is finalising plans to become the latest technology giant to reduce its workforce during a global economic slowdown
Tesla slashes prices globally by as much as 20 percent
After Failing To Pay Office Rent, Twitter May Sell User Names
FTX fraud investigators are digging deeper into Sam Bankman-Fried's inner circle – and reportedly have ex-engineer Nishad Singh in their sights
TikTok CEO Plans to Meet European Union Regulators
U.S. Moves to Seize Robinhood Shares, Silvergate Accounts Tied to FTX
Coinbase to Pay $100 Million in Settlement With New York Regulator
FTX assets worth $3.5bn held by Bahamas securities regulator
Former FTX CEO Bankman-Fried finally arrested in Bahamas after U.S. files charges
Corruption works: House Financial Services Chair Waters doesn't plan to subpoena her donor, Sam Bankman-Fried, to testify at hearing on FTX collapse
Yellen hints at ‘national security’ probe into Twitter purchase
Elon Musk reinstates Donald Trump's Twitter account.
George W. Bush and Barack Obama will hold back-to-back disinformation conferences
Solar + Powerwall ensures you never lose power, even if the grid goes down
This man paid for strangers' grocery and it moved them to tears
Meta introduces a new version of Mark Zuckerberg
Virtual Reality on billboards: BMW advertisement on Times Square
Apple CEO Tim Cook says coding should be taught as early as elementary school: 'It's the most important language you can learn'
Apple Executive Resigns After Viral TikTok Shows Him Making Crude Jokes
Huawei is not only better technology, but also protecting users better: Apple Warns Of Security Flaw For Iphones, Ipads And Macs
Mark Zuckerberg warns many teams will ‘shrink’ as Meta revenue drops
Elon Musk reportedly begged for forgiveness after his affair with Google co-founder Sergey Brin's wife
×