News for hackers. Stuff that matters.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by purpleblue on Tuesday August 23, 2022 @10:08AM (#32565136)
Millenials and GenZ may have no idea who Mudge is. I, however, almost lost my first job out of college at a bank because I ran l0phtcrack against our Windows NT 4 server to see if it could crack passwords. I showed my boss, and he pulled me aside into another room and tore my head off for irresponsibly running this tool against a production server. He said I could have been fired if this got out, but he covered my ass, sent out an email requesting everyone reset their passwords, and let me continue working. I learned a good lesson because even though my intentions were good, and it did expose security issues, it was a bit immature and should have been done in a more controlled manner along with the proper clearances.

Mudge knows the implications of "whistleblowing". He has been a security consultant and even testified to Congress. He's not some noob that doesn't understand security or how systems work together to provide services like disclosure to FTC. The idea that Twitter PR can pooh-pooh away his concerns is shockingly stupid.

I think Twitter is in real trouble here.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by zeruch on Tuesday August 23, 2022 @01:53PM (#32568551)
I met Mudge once in my career early on (I was at VA Linux systems circa 1999ish) and I found him intense, an apex intellect, but absolutely affable and self-aware.

He never struck me then, or in any interview or write up since, that he's impulsive, or prone to taking actions like what he's done to Twitter, in a cavalier way. He saw something bad and thinks something should be done to address it.

He likely made that decision because the culture at Twitter is as bolloxed as he states (maybe worse), and that it's one thing to fire a guy, but to do so to hide damning truths, and expect that person to just accept their fate AND let you get away with it without a cost is in this day and age, a farcical hope. Your "Mudge knows the implications of "whistleblowing". He has been a security consultant and even testified to Congress. He's not some noob that doesn't understand security or how systems work together to provide services like disclosure to FTC. The idea that Twitter PR can pooh-pooh away his concerns is shockingly stupid." is spot-on.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by fossuser on Tuesday August 23, 2022 @02:30PM (#32569097)
Yeah - comparing mudge's history with the email the Twitter CEO sent to internal employees and the situation seems crazy? Always hard to know from the outside, but this paired with Jack leaving seemingly frustrated with the board looks really bad.

I know people have thought Twitter was mismanaged for a while, but seems like it's a lot worse than I thought it was (and the CEO seems more vindictively bad than I would have guessed).

Plus the total lack of principles around speech and just doing whatever Russia, India, or KSA wants? Including hiring foreign agents? Also covering up bad security issues in reporting? It'll be interesting to see what happens from here as more comes out.

The internal Twitter email: https://twitter.com/austen/status/1562150058727919616?s=21&t...

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by zeruch on Tuesday August 23, 2022 @02:49PM (#32569421)
Yeah, I think we're in lockstep here.

I'm no fan of Musk (he's truly worked very hard to be the most provacatively pustulent punkass of tech) but that doesn't mean that Twitter leadership is any better. Just not as well PR'd.

Dorsey himself was mostly an imbecile who drank too much of his own Kool Aid. Twitter has for years been the standard bearer for the most opaque, and incoherent content management; from user feedback to bots, just a village with only idiots. It was eventually going to catch up to them, the question now is to whom does the bulk of the suffering land on, not whether it lands or not.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by fossuser on Tuesday August 23, 2022 @02:55PM (#32569529)
I’m a huge musk fan, but I still think his trying to get out of the Twitter deal is lame buyer's remorse and his arguments are weak. I see it as mostly unrelated to this mudge issue.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by titzer on Tuesday August 23, 2022 @06:08PM (#32572242)
Never been a "fan" of a personality, but I used to really like Tesla and SpaceX, but after hearing a little about how their critical software is...not developed like critical software...I am very wary of what kind of engineering is going over there. With Musk deciding to amp up his celebrity with Twitter antics, I just can't respect him any more.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by galangalalgol on Tuesday August 23, 2022 @09:01PM (#32573754)
Can you elaborate? I'm very curious how they develop software.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by titzer on Tuesday August 23, 2022 @09:38PM (#32574005)
Without getting into details, AFAICT they do not use any typical high-assurance software stacks, such as Ada or Spark or such that might be typical in avionics, like Airbus software. The use off-the-shelf tools like C++ and LLVM.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by mlindner on Thursday September 01, 2022 @08:03PM (#32685005)
You don't know what kind of tools they've developed internally and Ada/Spark is far from the end-all be-all of high assurance programming.

High assurance comes from the overall systems design and testing, not the software itself. Afterall, radiation can cause any piece of software, including those written in Ada, to completely skip instructions.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by fshr on Tuesday August 23, 2022 @10:35PM (#32574348)
There's obviously a lot of legacy Ada out there, but would you say it's 'typical' for new code being written? I don't have that sense. There's probably more MISRA C/++ code floating around at this point. I have no idea how compliant SX is, but I've heard mentions of Power of 10 rules and JPL standards. For what it's worth, their track record doesn't seem concerning nowadays.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by galangalalgol on Tuesday August 23, 2022 @11:31PM (#32574683)
I think commercial avionics is the only place you still find ada. Cars have been c or c++ even for safety critical for many years. Even defense abandoned ada well over a decade ago, and they invented it right? And medical jumped right on the windows ce bandwagon as soon as it popped up... I feel like a good pipelene with lots of static analysis asan, and really good tests is probably the best you can expect out of safety critical stuff these days. The days of provably safe software, and certified compilers are probably gone. And if you told me tesla was using folders with dates in the names for version control, and they preferred to test in production, I wouldn't ne surprised. Horrified, but not surprised.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by p_l on Thursday August 25, 2022 @04:11AM (#32590972)
Well, US defense industry got a waiver for C++ in JSF but I'm not sure if call it a success story.

A lot of stuff is still going on legacy stacks that Ada was created to replace

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by carlmr on Wednesday August 24, 2022 @07:40AM (#32578008)
Not to rain on your parade, but neither do any of the other automotive companies. Ada and SPARK is amazing, but I don't think I've seen it used outside aerospace/defence.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by zeruch on Tuesday August 23, 2022 @03:16PM (#32569891)
Oh they are unrelated, but he will leverage the Mudge moment for all it can be.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by raarts on Tuesday August 23, 2022 @03:09PM (#32569771)
Musk posted a meme explaining why he pulled out.

https://twitter.com/elonmusk/status/1546344529460174849

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by fossuser on Tuesday August 23, 2022 @03:26PM (#32570080)
Yeah - but that's dumb bullshit. He can't legally pull out because of that.

He waived all of that to force Twitter to agree to the deal (because it'd be basically impossible for the board to reject it). This made sense at the time, because the board was looking for ways to weasel out of it because (imo) they politically don't like Musk. Then the market crashed and suddenly he was overpaying a ton for Twitter, then he complains about bots (this isn't new information from when he made the deal).

Whether or not the bots thing is true isn't even relevant based on the deal he put forward.

I think he earnestly wanted to buy Twitter for principled reasons around speech which I agree with. He structured the deal in such a way where Twitter's board couldn't reject it (because it was so favorable to shareholders). Then when the market tanked the deal way overpriced Twitter, but he had already committed to it so he's trying everything to get out of it. I suspect he actually believes the things he's arguing (he's always seemed pretty earnest to me), I just think he's wrong in this case and it's mostly driven by motivated reasoning.

That doesn't mean Twitter isn't a disaster, just that they're in the right with regard to him having to close the deal.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by hammock on Tuesday August 23, 2022 @04:49PM (#32571273)
>I think he earnestly wanted to buy Twitter for principled reasons around speech which I agree with. He structured the deal in such a way where Twitter's board couldn't reject it (because it was so favorable to shareholders). Then when the market tanked the deal way overpriced Twitter, but he had already committed to it so he's trying everything to get out of it.

That's not how business valuations work (it's how speculation works). If Twitter was fairly valued by Elon Musk before the crash then it would be fairly valued now - the fundamentals of the business haven't changed.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by aetherson on Tuesday August 23, 2022 @09:14PM (#32573858)
I mean, okay. But it's not like he had $44B in cash lying around.

Implicitly, this was always, "I'm going to trade X% of Tesla for 100% of Twitter." Then the valuation of both Twitter and Tesla dropped, so to the extent that you think the "value" of a business is wholly determined by its fundamentals, then okay, they're both still the same "value" but now have lower prices.

Except that he hadn't sold the Tesla yet, so he was trading Tesla (at new lower price) for Twitter (at old higher price), and if you previously thought that X% of Tesla was worth Twitter, and Twitter is still worth the same thing, it's now X+Y% of Tesla.

Of course, it's not like the fundamentals of Twitter didn't change. Twitter's revenue comes from advertising, and it's entirely reasonable to believe that it was actually materially affected by the economic downturn, not just in terms of the speculation of the stock, but by how the business functions.

(None of this is to take the position that Musk ought to be able to back out of the deal: if the market had gone even hotter and now Musk could've traded less than X% of Tesla for the agreed upon, now conservative price for Twitter, it's not like the deal would've been renegotiated.)

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by szundi on Tuesday August 23, 2022 @05:47PM (#32572000)
One could argue that the value of a company is the sum of net present value of the future free cash flows it can produce. If the market crash is because of peope realizing there is a recession coming for example, it makes sense to update your expectations about the net present value of future cash flows - probably in sum a bit lower than before probably.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by colinmhayes on Tuesday August 23, 2022 @09:26PM (#32573932)
Valuation involves imperfect information. As the information changes so does the valuation.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by fossuser on Tuesday August 23, 2022 @05:55PM (#32572079)
"If Twitter was fairly valued by Elon Musk before the crash then it would be fairly valued now"

That's a big if - I think a lot of this stuff is more speculation than any sort of fundamental cash flow valuation. A lot Twitter's actual value (its network effect and influence) is hard to measure anyway.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by TheDong on Tuesday August 23, 2022 @05:56PM (#32572090)
> That's not how business valuations work (it's how speculation works). If Twitter was fairly valued by Elon Musk before the crash then it would be fairly valued now - the fundamentals of the business haven't changed.

Some "fundamentals" of a business like twitter's value are:

1. Product/market fit, finances, etc. What you mean by "fundamentals" I think.

2. How easy it is for them to raise money (i.e. the "public sentiment" of VC towards their company and the industry)

3. How likely it is for regulation to stifle their growth, which is a derivative of public sentiment.

4. How much shares can be sold for, i.e. the public sentiment about how much it's worth.

5. Predicted future sentiment of their users and of advertisers, both of which impact expected future revenue.

2-5 all change with public sentiment, and a market crash changes public sentiment of many companies at once.

It's self-evident that elon musk is overpaying more now than before unless you insist that twitter's value is not actually related to 2-5 above, or 2-5 above should have been trivially predictable 100% accurately already as part of its "fundamentals", both of which seem obviously silly.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by colinmhayes on Tuesday August 23, 2022 @04:56PM (#32571400)
He literally said he was buying it to fix the bot problem. It's not like he was unaware that bots existed on twitter.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by cgy1 on Tuesday August 23, 2022 @09:08PM (#32573813)
Right? Elon was pretty much insinuating, before the deal, that he thought the bot problem on twitter was much bigger than what Twitter officially stated. And now he's trying to get out of the deal by claiming that the bot problem on twitter was much bigger than what Twitter officially stated.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by vkou on Tuesday August 23, 2022 @03:42PM (#32570344)
The why doesn't matter, he explicitly waived the ability to back out of the deal for any of the reasons he's cited.

Twitter is a tyre pyre, but he should have thought about that before putting ink on that deal.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by sanderjd on Tuesday August 23, 2022 @06:27PM (#32572416)
He is trying to get out of the deal because he's about to lose billions of dollars buying a pretty crappy company. All this stuff about bots is dishonest nonsense. He could have chosen to do due diligence, and chose not to.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by caycep on Tuesday August 23, 2022 @03:28PM (#32570106)
granted, I'm not entirely certain Musk wants to pull out vs. getting a better price/discount on the purchase...
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by shapefrog on Tuesday August 23, 2022 @04:39PM (#32571158)
If Musk actually believes this represents anything it puts his IQ in the single digit - low double digits range.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by gspetr on Tuesday August 23, 2022 @11:52PM (#32574794)
So what you're saying is that an idiot can become the richest man in the world without being born into it?

How often has that happened in the entire history?

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by shapefrog on Wednesday August 24, 2022 @03:46AM (#32576072)
If 5 billion people flip coins all day long one of them will eventually flip only heads all day.

Profoundly dumb people have been heads of state, CEOs etc. So why not the richest person in the world?

Alternative suggestion would be that he doesnt actually believe that the reason he is trying not to buy twitter is the reason he was buying twitter.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by gspetr on Wednesday August 24, 2022 @07:52PM (#32587488)
>Profoundly dumb people have been heads of state, CEOs etc. So why not the richest person in the world?

It's simple to explain away - other people have appointed heads of state. And I have not heard of an idiot (in medical sense) top20 Forbes list CEO who's also been there since day 1 (i.e. the founder, not some figurehead appointed by a board for an arbitrary reason).

Can you appoint yourself the strongest person in the world or the fastest 100m runner in the world?

[0]While someone like the Saudi king or Putin can in theory allocate their respective states' funds to themselves and thus become the richest, that would simply be converting power into money, and not a result of some kind of entrepreneurial ability.

>If 5 billion people flip coins all day long one of them will eventually flip only heads all day.

This argument is flawed since that would assume a person would win some money every time they flipped correctly, when in reality nobody is going to pay anyone for succeeding in a flip. And applying that directly to business also breaks down because it is self-evident that the ways to lose money greatly outnumber the ways to gain money.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by phpisthebest on Tuesday August 23, 2022 @09:04PM (#32573777)
What is amusing is I am a fan of musk precisely because "he's truly worked very hard to be the most provacatively pustulent punkass of tech"

I tend to like people that blow up social norms and conventions

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by kjkjadksj on Tuesday August 23, 2022 @09:25PM (#32573930)
What like calling a first responder a pedophile?
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by IG_Semmelweiss on Tuesday August 23, 2022 @09:42PM (#32574045)
Thats a major error in judgement. Even billionaires are capable of this
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by bart_spoon on Wednesday August 24, 2022 @08:01AM (#32578216)
The man injected himself into an ongoing crisis he had little insight into, and when rejected, his ego was so hurt that he used his influence to accuse individuals he knew nothing about if pedophilia, all while they were in the midst of trying to rescue a dozen children from imminent death.

That’s not a “major error in judgement”. That’s the behavior of a completely deranged individual.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by cloutchaser on Wednesday August 24, 2022 @10:36AM (#32580020)
> completely deranged individual

That's quite a large exaggeration. I can think of some much much worse things that an actual "completely deranged individual" would do.

Musk was butthurt and lashed out. That does not equal "completely deranged individual"

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by bart_spoon on Thursday August 25, 2022 @02:26PM (#32597914)
> Musk was butthurt and lashed out. That does not equal "completely deranged individual"

Lashed out in a way where, given his influence, he could easily ruin the person's life. Which is bad in and of itself. But he did it while the man was actively involved in trying to save a dozen children from immediate death. And then doubled down later.

That is deranged.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by zeruch on Wednesday August 24, 2022 @07:03PM (#32587019)
"Musk was butthurt and lashed out. That does not equal "completely deranged individual" "

When you have the kind of audience and pull he has, unless you are totally daft to it (which he shows no sign of) then yes it's very abusively deranged.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by andsoitis on Wednesday August 24, 2022 @01:57AM (#32575414)
Doubling down is worse than error in judgement.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by arapacana on Thursday August 25, 2022 @01:14AM (#32589786)
lmao the extent to which the tech crowd will defend all of his stupidity and let him get away with a slap on his wrist. He had a megalomaniac ego moment and called some of the greatest heroes to have ever existed pedophiles for being the only people capable of pulling of a rescue like that. One of them died in the rescue efforts. Musk is all the way up his own ass, and this needs to be acknowledged regardless of his supposed "genius".
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by phpisthebest on Wednesday August 24, 2022 @04:51PM (#32585574)
No calling out government, twitter, etc on their BS
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by oska on Tuesday August 23, 2022 @11:35PM (#32574711)
> Plus the total lack of principles around speech and just doing whatever Russia, India, or KSA wants?

Twitter is most definitely not doing whatever Russia wants. It's markedly hostile to Russia and frequently removes "pro-Russia" acocunts, which speaks to your initial point, that it has a total lack of principles around speech.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by dogman144 on Tuesday August 23, 2022 @10:27AM (#32565410)
I agree. I grant It’s possible Mudge is

A) an old hand and doesn’t know how to run a security program with the tech today

B) a strong tech hire who can’t lead a program.

But Mudge is still… Mudge, and he’s also proven his ability to collaborate so if he was a bull in a china shop a twitter, that would be surprising.

There’s also a broader trend here of well known security leads that originate from that time working at social media and leaving quickly, like Alex Stamos, who also u-turned out of Facebook.

So are the odds higher that Mudge did a bad job, or this set of companies are not great internally and old guard security leads are pointing it out? The twitter CEO letter framing him as a bad employee doesn’t address this context.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by pclmulqdq on Tuesday August 23, 2022 @12:37PM (#32567450)
I read the full whistle-blower complaint, and the whole story from his perspective (and the crazy statement from Agrawal) looks like it's not B. Instead, it looks like it was a culture clash with his manager.

He seems to have tried to escalate things to people above Agrawal nearly constantly. He was hired by Jack Dorsey, and felt accountable to him and to the board, but he reported to Agrawal, who believed that Mudge had a responsibility to follow the chain of command very rigidly.

I have previously had managers who want you to rigidly follow the chain of command, and if you are a "hacker" type, they are a shock (and you are a shock to them). They are often very interested in controlling information that goes upward and how mandates flow downward through them (both to control their reputation and make sure everyone gets information in "proper context"), to the point that they see it as an attack on their position to even speak with their manager. A "hacker" would rather put the information in front of the people who need it, instead of filtering it through the hierarchy.

At the first opportunity Agrawal had to clean house, he cleaned out Mudge because he didn't want to work with him. House cleaning is normal for a new CEO. From Agrawal's perspective, Mudge did a terrible job, since he wanted to circumvent Agrawal.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by jonstewart on Tuesday August 23, 2022 @02:39PM (#32569255)
I wouldn't paint with too broad of a brush in this instance, however. Yes, mudge is the ur-hacker, but also: he worked at BBN and DARPA (where he was extremely effective) and elsewhere. He probably has the most experience of any technical/hacker on the planet of working with executives in large organizations.

Agrawal's memo, in contrast, reeks of insecurity. The combination of how he's treated mudge and Rishi Sunak and the potential consequences of this complaint (particularly if FTC investigates and finds Twitter has not been following the consent decree) boxes him into a corner -- he won't be able to recruit the talent to solve these security problems and will be seen as an impediment to compliance/mitigation. I could easily see the FTC et al insisting on his resignation as part of a settlement. It's an own-goal.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by colechristensen on Tuesday August 23, 2022 @03:40PM (#32570323)
A security lead who didn't try to raise major issues around a bad boss would be doing a bad job.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by crb on Tuesday August 23, 2022 @03:39PM (#32570300)
What's the story with Rishi Sunak? Assuming you mean the candidate for Conservative Party leader and thus UK PM, I wasn't aware of such a connection.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by groby_b on Tuesday August 23, 2022 @04:41PM (#32571186)
Rinki Sethi. OP meant Rinki Sethi. (CISO of Twitter until January, left at the same time as Mudge)
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by jonstewart on Tuesday August 23, 2022 @05:45PM (#32571982)
Oh, yes, thank you! I can't edit my comment anymore, but, yes, Rinki Sethi, apologies for the confusion.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by ginger2016 on Tuesday August 23, 2022 @06:28PM (#32572428)
Thank you for the clarification, this got me confused too!
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by pclmulqdq on Tuesday August 23, 2022 @06:49PM (#32572605)
I have spoken to a few DARPA program managers before, and they are usually amazingly smart people who are great at corporate politics. This doesn't sound like someone who is bad at corporate politics, just someone who underestimated the humility with which his manager would approach his job. No disrespect at all to Mudge, I think he did the right thing. Unfortunately, he didn't "manage up" very well in this instance.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by pueblito on Tuesday August 23, 2022 @01:24PM (#32568139)
> He was hired by Jack Dorsey, and felt accountable to him and to the board, but he reported to Agrawal, who believed that Mudge had a responsibility to follow the chain of command very rigidly.

With $10mm cash bonuses on the table it’s extremely obvious why Agrawal would insist on being MITM

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by pclmulqdq on Tuesday August 23, 2022 @02:10PM (#32568809)
When you think your job is to tell your boss's boss (and their promotion committee) why your boss is doing a bad job, you're not in for a happy time.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by barking_biscuit on Tuesday August 23, 2022 @04:55PM (#32571390)
Which sucks because plenty of times it's true.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by leaflets2 on Wednesday August 24, 2022 @05:55AM (#32577180)
Would Agrawal get cash bonuses? If ... Under what conditions? (Anywhere to read about that?)

Aha, eg:

https://www.dailymail.co.uk/news/article-10258453/Twitters-n...

So his performance bonuses is more than 10x his salary - incentives to fake good numbers and hide the bad stuff, indeed!

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by trasz on Tuesday August 23, 2022 @08:32PM (#32573526)
I guess the basic question to be asked here is how come nobodies like Agrawal get to make decisions like that.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Maursault on Tuesday August 23, 2022 @04:05PM (#32570719)
> I read the full whistle-blower complaint

The content of the complaint is all that matters, and it should be judged on its own merits. It never matters who said what, and attempting to make it matter is ad hominem fallacy; it is what is said that matters.

That said, I can't quite fathom why Twitter's cybersecurity matters any more than the cybersecurity of any of the myriad of online forums, HN included: the "data" simply isn't all that important; it is all public, it is all talk, and talk, as we know, is cheap. Say Twitter is completely overrun by foreign state actors who delete everything. The outrage is going to be minimal. "Dang, I really enjoyed mouthing off on Twitter. Oh, well."

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by jimmydorry on Tuesday August 23, 2022 @07:39PM (#32573084)
The algorythms are not public, and as the public square of present, Twitter essentially drives public discourse... especially when a large portion of the legacy media has been reduced to sourcing their stories and directly quoting from Twitter.

Secondly, private messages between people are not public either. Opening that data up or allowing it to be read or manipulated by other entities will drive a lot of outrage and the data contained within is important!

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by guiambros on Tuesday August 23, 2022 @10:31PM (#32574321)
+1. Additionally IP addresses, email and phone numbers can be extremely sensitive if leaked, so security is absolutely paramount. Case in point: imagine the risk to activists or journalists in heavily censored countries.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Maursault on Wednesday August 24, 2022 @02:41AM (#32575651)
Please name one time in the history of TCP/IP that leaked IP addresses led to anything at all.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by jimmydorry on Friday August 26, 2022 @01:40AM (#32603712)
Sure, when popular social media influencers have their IP leaked they get DDoS'ed and are not able to earn a living until they get a new IP. For some ISPs this requires them to lodge a support ticket.

When gaming services leak IPs, they too can get DDoS'ed. E.g. during tournaments or when someone is losing their match.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by InvaderFizz on Wednesday August 24, 2022 @09:28AM (#32579171)
Certainly lead to myself and other shitheads in my youth DoS'ing each other's dialup connections on IRC to settle arguments.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Maursault on Wednesday August 24, 2022 @02:37AM (#32575634)
>The algorythms are not public,

Seriously, so what? Twitter's IP does not affect national security.

>and as the public square of present, Twitter essentially drives public discourse...

This is being awfully kind to a platform that 77% of Americans have absolutely nothing to do with.

>especially when a large portion of the legacy media has been reduced to sourcing their stories and directly quoting from Twitter.

Ah, legacy media, conservative politispeak for CBS, NBC, ABC, CNN, etc. Can't get away from Twitter on the major networks anymore, it's Twitter all the time? Just what in the heck are you talking about? Turn the news on sometime. The only reason for Twitter to be in the news is Elon Musk (previously, Trump). Or, you know, give one example of a major news outlet using Twitter as source for a story. Real journalists do not do that. They use legitimate sources.

> Secondly, private messages between people are not public either. Opening that data up or allowing it to be read or manipulated by other entities will drive a lot of outrage and the data contained within is important!

Absurd. No one cares what you say in private to a complete stranger you'll never meet.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by jimmydorry on Sunday August 28, 2022 @08:38AM (#32627937)
>Twitter's IP does not affect national security

Governments and their respective departments (at all levels: federal, state, local, etc.) communicate with their constituents via social media, Twitter in particular as well as via the media outlets that will report on said statements from Twitter.

Change the algorythm such that those messages no longer reach people and you can bet the respective countries will pass legislation and puninitive measures against Twitter.

>This is being awfully kind to a platform that 77% of Americans have absolutely nothing to do with

Except I outlined some of the other ways people interact with Twitter, even without accounts. You seem to be incredulous that other forms of media rely on Twitter... You should look a bit closer next time you turn the TV on.

I just did and there was a segment about Russia playing titled "'Slower burn' of Russia's economy has begun". Guess where almost all of the footage they aired came from? Twitter. Guess how the reporters are finding people on the ground to interview? Twitter. Guess how analysts are keeping abreast of military developments (e.g. troop movement, statements released by governments, etc.)? Twitter.

>Absurd. No one cares what you say in private to a complete stranger you'll never meet.

Many service providers conduct customer service via DMs these days. My ISP's preffered lines of contact are Twitter and WhatsApp. Even if we take a step back, do you truly believe that there are no people sharing sensitive information between each other via private messages?

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by leaflets2 on Tuesday August 23, 2022 @04:34PM (#32571115)
> Say Twitter is completely overrun by foreign state actors who delete everything.

That's not what's dangerous.

Instead, dangerous things include manipulating the algorithms so that "news" of ones choice get lots of visibility. Then a foreign state can influence the elections

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Maursault on Wednesday August 24, 2022 @02:27AM (#32575581)
> Then a foreign state can influence the elections

I think this is bollocks. 23% of Americans say they use Twitter. 61% of Americans voted in the last Presidential election. So with my bad math, say a foreign state somehow gets every possible Twitter users vote going their way, at best it's going bamboozle 14% of weak-minded Americans. That's at best, the perfect and unbeatable score. The reality is that most Twitter users are not obsessed with the platform, and most Americans are not on the fence with their votes. This concern is not really supportable.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by leaflets2 on Wednesday August 24, 2022 @05:07PM (#32585766)
14%, even just 4%, is a lot, can be enough to decide an election. Often the parties are close to 50% each.

In addition to that, the manipulators / nation states don't attack only via Twitter, and, everything combined ...

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by _vdpp on Tuesday August 23, 2022 @04:50PM (#32571306)
I was kind of curious about this as well, though I suppose if a politician’s account was compromised it could cause some pretty major embarrassment or maybe even conflict. Are DMs a thing on Twitter? Having those compromised might be pretty serious too.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Maursault on Wednesday August 24, 2022 @02:49AM (#32575714)
Actually, this already happened,[1] and we were doomed because of it. Fetishes are fine, but those people need to look away from Twitter sometimes and get a grip.

[1] https://www.bbc.com/news/technology-53425822

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by time_to_smile on Tuesday August 23, 2022 @11:09AM (#32566016)
> B) a strong tech hire who can’t lead a program.

I worked with Mudge (not super close, but enough to see how he worked across teams etc) and can certainly say this is not the case. At least when I saw him Mudge was excellent at the program leadership aspect of his role. At one point he ended up a DARPA PM. You can't go from L0pht to DARPA without getting really good at working with other people and leading projects.

While he was always a notable presence, he was also never prone to drama, and very good at having ego when it was important but never letting it get in the way.

Additionally all of the details sound like every KPI chasing consumer facing tech company I've ever worked with. I think we all know a few very competent people who have stood up to leadership at insane tech companies and ultimately gotten fired for it.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by latchkey on Tuesday August 23, 2022 @11:12AM (#32566074)
Even 20 years ago, extremely well spoken and has worked at high political levels...

https://www.cnn.com/videos/business/2022/08/23/peiter-mudge-...

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by bink on Tuesday August 23, 2022 @02:07PM (#32568763)
I agree with everything you said, but I'd like to play devil's advocate here. Mudge has worked:

  * L0pht / @stake: security research, red teaming, and source code auditing, IIRC.
  * BBN: research.
  * NFR: technical advisory board.
  * DARPA: Managing a program that provided grants for new security products and tools.
  * Google ATAP: Google's "invention studio".
  * CyberUL: Testing of security products.
None of these jobs really suggest a background in building a security program. I've worked with some large companies in a similar space to Twitter building their security programs and you can spend the first 6-12 months just trying to justify the new budget. Often that money has to come from another team or teams and he would have to justify that. He was apparently only there roughly a year.

Again, I don't doubt Mudge's bonafides. I don't doubt his security knowledge. But this job was nothing like any he's had in the past.

I also don't doubt his claims. Everything he's stated is almost certainly true. It does take more than a year to fix most of these problems and I wonder if he just got frustrated with the political battles that occur in these situations.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by michaelt on Tuesday August 23, 2022 @05:42PM (#32571957)
Well, you can devils-advocate anyone into an incompetent.

Decades of experience as a rebellious hacker? Well, that's not commercial experience. Founded a security consultancy? Too small, they just don't know how to operate in a large bureaucracy. Worked at a secretive company as an individual contributor? They've been completely silent in public, clearly they haven't achieved anything interesting in years. Working elsewhere as an individual contributor? They just don't know how to build a team. Decades as a senior manager at a huge multinational corporation? Out of touch bullshitter, stale coding skills, doesn't know how we really do things these days.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by mthomasmw on Tuesday August 23, 2022 @03:05PM (#32569701)
You left out that he built the security program at Stripe.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by spudlyo on Tuesday August 23, 2022 @04:25PM (#32570982)
He led the Security team at Stripe for a time, but it was a functioning team before he arrived.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by AtlasBarfed on Tuesday August 23, 2022 @12:30PM (#32567359)
The subject of security consultants, security departments, and whistleblowing seems to me to be of particular concern.

I mean, if an auditor publicly reports an audit finding that is ignored by the company and his ethics demand its reporting, is he branded a "whistleblower"? I do not think so, instead it is an "auditor finding". Why does that not apply here?

It kind of dovetails with how pathetically organized IT in general is from a professional standpoint. Lawyers, Doctors, ... ?Accountants? and the like have centuries-codified procedures, principles, and the like for ethics. You generally don't get to hire one of those and tell them how to breach ethics (now, there are a lot of corrupt lawyers and a lot of corrupt accountants see: Arthur Andersen).

The exploit industry has the 0day and x days of forewarning process, so there is that, but the fact a security consultant/professional gets accused of whistleblowing when... um, isn't that sort of the point? You hire a security consultant kind of like an auditor. And if auditors find major failings and they aren't addressed, aren't they supposed to report them?

I'm pretty sure the security IT industry does not have even accountant levels of professional conduct and organizations.

As IT subsumes and infiltrates, now to the point that fundamental bill of rights / human rights are dependent on secure and functioning IT systems, it gets... a bit more important. Arguably more important than the ethics around accountants and doctors. Lawyers, because they deal with the law, are probably more important still, but it shows that IT security may be rising in import to that level.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by scott00 on Tuesday August 23, 2022 @08:22PM (#32573447)
That's not really how auditors work. Auditors either give the client a letter saying what the client wants it to say[0] or decline to provide the client with that letter. They do not go public with their reasons.

[0] Companies want the letter to say whatever their regulators and/or contractual obligations demand that it say.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by AtlasBarfed on Wednesday August 24, 2022 @04:58PM (#32585650)
If a public company gets an accounting audited and they find irregularities it is not subject to public disclosure requirements?

Twitter is a publicly held company.

I'm sure there are conflicts of interest and some degree of confidentiality for auditors and clients, but there is a fundamental public interest of disclosure, at a minimum to the government, in the event of irregularities.

From the SEC:

"In addition, we will continue to focus on auditors. As the Supreme Court noted nearly 30 years ago in U.S. v. Arthur Young & Co., 465 U.S. 805 (1984), auditors play a crucial role in the financial reporting process by serving as the “public watchdog.” So, it is important that we carefully monitor their work and ensure that they fully comply with their professional obligations. If there is a significant restatement or if we learn about improper accounting from a whistleblower, our proactive efforts, or the media, then you can expect that we will scrutinize not only the CEO, CFO and Controller, but also the engagement partner, engagement quality reviewer, and the auditing firm as a whole. We are going to probe the quality of the audit and determine whether the auditors missed or ignored red flags, whether they have proper documentation, and whether they followed professional standards.

    And it is important to remember that our ability to bring Rule 102(e) bars against auditors extends beyond instances where there are accounting irregularities at a public company.  Our Rule 102(e) program is remedial in nature and meant to protect the integrity of the Commission’s processes.  As a result, we can and have investigated auditors when their audits fail to meet the most basic standards, regardless of whether there was an actual problem with the auditing client. By pursuing actions over these bad audits, we can fully leverage the Division’s resources and close off access to those who shirk their responsibilities as gatekeepers to the securities markets." 

-------

From there you can see legal and institutional gravitas, ethics, and expectations of accountants and auditors of public companies. That's kind of what I'm getting at re: elevating security and certain IT roles to higher responsibility and codification.

Now, is this a smear attempt by Jack Dorsey in relation to the Elon Musk lawsuit? Eh, maybe.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by scott00 on Thursday August 25, 2022 @11:36AM (#32595161)
If a public company's auditors find irregularities they work with the company's management to resolve them. If, eventually, the auditors decide there are irreconcilable differences, they will resign, and provide reasons for their resignation in the resignation letter to the company. At that point, it is up to the company to decide whether or not those findings are significant enough that they need to be released to the public. The SEC will consider any auditor resignation for cause to be significant enough that it has to be disclosed, but that doesn't mean that companies will actually do it, as you can see by a bunch of enforcement actions relating to exactly that:

https://www.investor.gov/introduction-investing/general-reso...

(search for "resign")

The SEC quote is about requiring auditors to meet their professional standards. Those standards require them to follow certain processes, things like needing to see evidence for certain things, and not both preparing the books and auditing them, and require that they not issue letters they don't actually agree with. Those standards do not require informing the public or regulators about problems they find.

There's certainly something to be said for having some codified professional standards for infosec professionals, but if public or regulator notice is something you think is important to be in those standards you shouldn't model them off of the standards for auditors, because auditors have no such professional responsibility.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by shagie on Tuesday August 23, 2022 @12:12PM (#32567088)
I think it was '96? I was working at Taos Mountain at the time. At that time, Taos had a reasonably close relation to Randal Schwartz ( https://www.oreilly.com/library/view/learning-perl-6th/97814... ) and he gave a talk for contractors which was titled "Just Another (convicted) Perl Hacker".

In that talk he told of his time at Intel and running crack on a shiny new sparc and all the problems that caused.

The focus of it was a "how not to get into trouble as a contractor".

Somewhere, I've still got my pink camel book with duct taped edges (for durability) with his signature on the inside title page.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by smsm42 on Tuesday August 23, 2022 @02:06PM (#32568737)
In any case your own chief of security coming out and saying your security is crap would be devastating for any company. But when it's a person with credentials list like Mudge's - one can be quite sure he's not just doing it because some disagreement about salary and vacation days, and it would be impossible to dismiss this as "disgruntled employee issue". Twitter would probably try anyway, but it won't work.

Twitter is going to be in a lot of hot water now, and I can't imagine Musk isn't going to milk this to the last drop.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by webdoodle on Tuesday August 23, 2022 @11:57AM (#32566836)
> I ran l0phtcrack against our Windows NT 4 server to see if it could crack passwords.

Lol, did the same thing for a government entity I was working for, also without prior permission. It showed 1/4 of the people used the name of the entity as there password, including 2 users with domain admin credentials. Both of the domain admins weren't even IT people, there were the director and his assistant, who demanded to be admins, because they were 'admin' within the org.

In my case, I didn't get scolding, but probably should have. As you're prior boss said, it was not good to do it on a running production server. Now a restored backup running on a private network...

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by rvz on Tuesday August 23, 2022 @10:44AM (#32565639)
Twitter Inc. is indeed in very serious trouble if you have someone like Mudge whistleblowing.

Now looking at the chaos, damage control and the PR disaster that is happening at Twitter HQ after this, I have zero confidence in whatever Twitter HQ and the CEO is saying other than admitting their total incompetency towards how they handle information security at the company. All attempts to make this disaster disappear will not only fail, but will eventually backfire.

So what else was Twitter lying about?

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by winternett on Tuesday August 23, 2022 @11:09AM (#32566015)
Well, it's not even trending on Twitter, which is not really surprising.

There is nothing more evident about the fatal flaws in social media than when news concerning a platform is suppressed on the cited platform.

It highlights the failure of democracy they always purport, and it shows that they really shouldn't display a social "trending" page, because it is subject constantly to the politics and profit making of each platform.

Twitter's trending timeline had long been regarded as an accurate beacon of real life trends, but that really needs to be reevaluated by everyone as the company has regularly displayed "somewhat questionable" behavior in how they manage timelines alone. There is no real way this wouldn't trend somehow on Twitter in my opinion, as it's been on the front page of CNN and many other sites for a long time now.

The security breaches are factual, they have published many incidences of it themselves over years... Their actual reputation for lax security is what works against them most, but it's all on record.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by wpietri on Tuesday August 23, 2022 @12:15PM (#32567130)
> There is nothing more evident about the fatal flaws in social media than when news concerning a platform is suppressed on the cited platform.

I just looked at the Trending panel and "Mudge" is #12 for me, with 4333 tweets. #11 is "Taco Tuesday", with 4172 tweets. #7 is "Virgo" with 98,500 tweets. So I'm not seeing a lot of evidence of suppression. I think it's just a pretty niche story. I think the allegations are important and worth investigating, but the specific nature of them looks way more interesting to tech insiders than general-audience users.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by winternett on Tuesday August 23, 2022 @12:44PM (#32567558)
Everyone has a different trending timeline on Twitter which is now more based on who they follow. The trending timeline is "baked" and dictated also by moderators and paid promotion often... It's why topics like "K-POP" trend so much, even for people that don't even listen to it at all.

If you follow tech personalities, there's a higher chance you'll see the news.

On my music account on Twitter, I don't follow tech personalities and tech news outlets, but I do follow CNN Breaking News, and nothing about this major story has popped up all day long.

This is how the Twitter trending timeline is artificially baked... This story is a very big deal for everyone on Twitter, yet only a fraction of its user base will see the story. Privacy is important to every user on the platform, you'd think Twitter leadership at least would be trying to get a grip on the story first within the platform in a very public manner.

It happens on every major social platform at key points too, highlighting the conflict in their ability to maintain proper social credibility as platforms that report on trends that news channels and other institutions regularly cite.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by wpietri on Tuesday August 23, 2022 @05:25PM (#32571759)
Given that you understand Twitter ranks based on interests, what's your evidence that this was "suppressed"? Rather than just ranked according to people's interests?

You seem to be saying that people should be interested in this story. I'm not sure I agree, but I definitely believe most Twitter users won't be. Is it a good headline? Sure. But does it have much direct and immediate relevance to their personal lives? Not for most Twitter users.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by nr2x on Tuesday August 23, 2022 @01:05PM (#32567851)
You really think just after paying an FTC fine, staring down SEC actions, and a huge legal fight with Musk…Twitter is going to “suppress” the content to keep this a secret?

Sure.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by smsm42 on Tuesday August 23, 2022 @01:56PM (#32568599)
I don't have any factual evidence on the either side (I don't use Twitter at all, I even have Nitter extension to never visit that site even when linked to) - but I absolutely can believe they'd go for "all in" strategy, and keep messing with the feeds even in light of all that. If they felt they have the right and responsibility to control the information and shape the discussion on the Internet, they'd still feel that now, despite all the "mistakes were made" - in fact, they'd probably feel more urge to control things as they feel more threatened. And why not reduce the "misinformation" about their supposed wrongdoings - when all the most truest information about it has been already disseminated by them, why allow "irresponsible parties" to "misinform" the public? Surely it should be stopped. It's the way they always have been thinking, why would they change now?
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by winternett on Tuesday August 23, 2022 @01:18PM (#32568036)
Yea. It works as damage control for credibility, which is under threat not only by the musk suit, but because of the last huge data breach they had.

Just an opinion mind you, but not from a hater or a "dunce".

This is a huge story of significant relevance to Twitter and all users on the platform.

"Suppressing unfavorable news" these days is just as big and profitable an industry as disinformation is.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by dboreham on Tuesday August 23, 2022 @10:41AM (#32565594)
I may be _too old_ to know who Mudge is, but I know one of the previous Twitter CISOs, and I believe he quit Twitter, which is a canary sign to me.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by shadowgovt on Tuesday August 23, 2022 @10:46AM (#32565678)
I don't because I'm not seeing an organization that will hold them accountable.

- This Congress is ill-equipped to understand tech, much less hold it accountable. As long as the people are happy, Congress is happy.

- Lord knows the people are ill-equipped to get how bad this is. They already watched this company allow a rogue employee to shut off the account of the President of the United States (before they chose to do it as policy; https://www.washingtonpost.com/news/the-switch/wp/2017/11/02...) and watched this company deploy a username-to-telephone lookup service publicly where they'd intended to deploy a security protocol (https://www.ghacks.net/2022/08/08/twitter-confirms-that-a-da...). The public doesn't understand why they should care.

- The only group who could really hold Twitter accountable are shareholders, but why should they care if the public and Congress don't? The money will roll in either way.

Unless they've managed to commit an SEC violation (in which case, slap on the wrist incoming), there are no consequences for this kind of bad behavior until someone powerful gets seriously hurt. I'm glad Mudge is doing the right thing, but extremely pessimistic much will come of it. My recommendation is to shed Twitter as a user.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by shagie on Tuesday August 23, 2022 @12:44PM (#32567547)
> - This Congress is ill-equipped to understand tech, much less hold it accountable. As long as the people are happy, Congress is happy.

There's an article I was introduced to yesterday: Do We Need a New Digital Regulatory Agency in the U.S.?

It argues that it it is the agencies and the experts within the agencies that need to become more technologically literate to be able to advise creation and implement the laws that have tech impacts.

Congress isn't supposed to be experts on subjects, they're supposed to be the representatives of their people with occasional domain knowledge in certain areas of importance to their constituents. We can't (and shouldn't) expect every member of congress to be an IT expert.

https://techpolicy.press/do-we-need-a-new-digital-regulatory... ( https://news.ycombinator.com/item?id=32555365 )

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by dcow on Tuesday August 23, 2022 @12:24PM (#32567249)
> My recommendation is to shed Twitter as a user.

I never understood why tech people have such a strange enamor towards Twitter. Can’t be an industry power dev without it. Can’t start a company without it. Having a healthy Twitter following is often more important than having actual users—even to investors. Twitter is digital hype.

I agree. It’s time to replace Twitter. The only question is what exactly is it that anchors people to the platform? Even though it’s hard to imagine, we know that news motivates people (it happened with the WhatsApp -> Signal exodus). Where’s the “Signal for Twitter” we can all migrate to?

If the key is not just creating a social platform, but also a hype engine, maybe what a competitor needs to realize is that hype doesn’t happen in a vacuum. You have to do silly algorithmic things so that content can go viral. Maybe the secret is to be open about how you manufacture hype rather than do it behind closed doors? Maybe in a way that people can verify it was done fairly?

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Jensson on Tuesday August 23, 2022 @01:47PM (#32568460)
Main problem is that journalists uses Twitter, as long as they are there Twitter will remain the most relevant political forum. It is mandatory for most journalist jobs to be active on Twitter, and since all the journalists are there anyone who wants publicity will also post on Twitter.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Sebb767 on Tuesday August 23, 2022 @06:32PM (#32572458)
> The only question is what exactly is it that anchors people to the platform

If I had to take a stab, it's a combination of networking effects (obviously), simplicity and the short text limit, which forces authors to mostly be concise and optimize for a 140 character attention span. This is also supercharged by the fact that you can (mostly) access everything anonymously - if I'm linked to Twitter, I know I can read/watch it and it will mostly be concise. I don't even bother clicking a link to FB, for example.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by doesnotexist on Tuesday August 23, 2022 @05:04PM (#32571481)
I generally agree that it's unlikely we'll see any serious accountability. However:

> - The only group who could really hold Twitter accountable are shareholders, but why should they care if the public and Congress don't? The money will roll in either way.

This might be what does it because is it true that the money is and will keep really rolling in? Twitter doesn't pay a dividend and is it reasonable to expect that the company's stock value should increase that much going forward?

Twitter's gross profit numbers aren't as large as you'd think given the household name recognition of the brand. You might be as surprised as I was to discover that meme-stocks like AMC and GameStop are approximately the same size as Twitter in terms of gross profit. Perhaps Twitter is just as much of a big name but ailing dinosaur as those businesses? Or if you want to make comparisons within social media, isn't it surprising that Snap's ~$2.8 billion cap gross profit is right up there with Twitter's ~$3.2 billion. How did that happen? It is also interesting that snap's market cap is only 2/3rds of Twitters despite a much closer delta between the two companies reported profits.

On the whole, things aren't looking too good for the social media right now, take for example facebook losing active users YoY. I often wonder what zeitgeist web properties are going to be remembered as a BIG thing that receded in popularity in the course of about a decade, say like bell-bottom denim jeans from the 60s or disco music from the 70s. Could it be social media for the 2010s?

Anyhow if they aren't paying dividends and they aren't able to keep growing at pace with expectations what exactly are they delivering in terms of value to shareholders?

Given that the allegations are about defrauding shareholders by actively deceiving them and sweeping things under the rug. Twitter's shareholders might be better off revolting against the current leadership to recoup their loses than to look the other way and let this slide.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by jonstewart on Tuesday August 23, 2022 @02:49PM (#32569416)
Twitter signed a consent decree with the FTC years ago. This complaint could result in the FTC investigating deeply whether the consent decree is being upheld. If not, there's likely sufficient regulatory force to hold Twitter accountable.

I agree that, generally, it would be better for the US to have a better regulatory mechanism for large tech companies, but the consent decree is likely a strong tool in this particular case.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by ska on Tuesday August 23, 2022 @03:04PM (#32569681)
> This Congress is ill-equipped to understand tech, ...

"This" congress? There are institutional level problems, here.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by last_responder on Tuesday August 23, 2022 @10:15AM (#32565236)
Ah yes, Lopht Heavy Industries. Indispensable tools at the time.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by bombcar on Tuesday August 23, 2022 @11:01AM (#32565886)
Always been a fan of "Heavy Industries".
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Syonyk on Tuesday August 23, 2022 @12:22PM (#32567233)
Yup. I've used that with my normal "last name backwards" company name before. I tend to send Christmas and Birthday gifts to siblings with the company field filled in. "Kinetics," "Orbital Bombardment Division," "Relativistic Research," and assorted other things have made their way in, but "Heavy Industries" just has such a nice ring to it.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by bombcar on Wednesday August 24, 2022 @07:42AM (#32578039)
I love that Wikipedia says it covers "large and heavy products" and/or "large and heavy equipment".

Such a 5-year old boy way of naming things.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by exmadscientist on Wednesday August 24, 2022 @03:32AM (#32575989)
I thought I was the only one!
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by sbf501 on Tuesday August 23, 2022 @01:37PM (#32568311)
It's a 0, not an 'o'.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by ChrisArchitect on Tuesday August 23, 2022 @11:41AM (#32566559)
l0phtcrack? "Now that's a name I've not heard in a long time." Wow I thought the name Mudge seemed slightly familiar.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by icelancer on Tuesday August 23, 2022 @02:53PM (#32569481)
Yeah I kinda glossed over the headline and figured, whatever.

Then I clicked through and saw it was Mudge.

Ah jeez.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by b06timmer on Tuesday August 23, 2022 @07:16PM (#32572847)
I did the same thing on a server for a major department store chain in the '90s. I booted a Linux diskette and copied the SAM file to it. I also ran l0phtcrack, or John the Ripper on a 486 (?) PC in my apartment. I think I bought a rainbow table and something else to expand the iterations it would use on the hashes. I let it run for over a week and had a couple of thousand clear passwords. This was for every store west of the Mississippi and included most of the "big-wigs" in our chain.

I was going to send the information to our security people in another state but decided it probably wouldn't be a wise thing to do.

I come across the HDD where I have this stuff archived every now and then and it makes me smile. This was also in the "Free Kevin" days.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by KennyBlanken on Tuesday August 23, 2022 @07:46PM (#32573148)
So you copied the auth file off company servers

and cracked it on personal systems

and you kept the files and cracked passwords? Not just kept around, but archived?

Dude.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by mrelectric on Tuesday August 23, 2022 @08:35PM (#32573552)
I think most of us in sec do that.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Consultant32452 on Tuesday August 23, 2022 @04:57PM (#32571408)
That's a funny story. I have a similar anecdote where I was asked to crack a zip file in a saga related to a dispute with a vendor who gave us a password protected zip file with the deliverables but not the password.

Those were wild times.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by datavirtue on Tuesday August 23, 2022 @11:13AM (#32566090)
It's Twitter. What possible serious security implications could possibly warrant everyone in Washington getting into a frenzy?

All you do is make public comments that have zero value.

And if this is indeed serious, where the fuck have we landed?

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by btown on Tuesday August 23, 2022 @11:56AM (#32566822)
A well-timed set of tweets from compromised government and private-sector accounts, coordinated with real stock market activity planned by the attacker such that investors cannot ignore the rumors, could cause a geopolitically significant market panic. This already happened in 2013, and that was with just a single account being compromised: https://business.time.com/2013/04/24/how-does-one-fake-tweet...
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by nradov on Tuesday August 23, 2022 @04:39PM (#32571166)
In the long run that would be a good thing. It would be an object lesson that investors shouldn't believe anything they read on social media.

Investors always have the option to ignore rumors.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Sebb767 on Tuesday August 23, 2022 @06:37PM (#32572507)
But investors also need to be quick to react if they want to make (serious) money. Ignoring a tweet from a verified account about a disastrous event is not reasonable at all in 99.9% of cases.

What I'm trying to say is, you might be able to discredit Twitter, but you won't fix investors trying to invest ahead of the news.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by nradov on Tuesday August 23, 2022 @10:14PM (#32574231)
Bullshit. By many measures Warren Buffett is the most successful investor of our time. He is famous for being slow to react, and he has made some serious money. So I think you don't understand investing.

And if some investors lose money then so what? That is an acceptable outcome. Let them suffer, I have zero sympathy.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by datavirtue on Tuesday August 23, 2022 @02:02PM (#32568672)
OK, Twitter needs regulated then. Hardly a private going concern if you are right.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by gopher_space on Tuesday August 23, 2022 @02:24PM (#32569008)
This won't fix the fragility of our economy. It would start a weird exit model for social platforms, though. Get big enough that the US buys you out.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by datavirtue on Tuesday August 23, 2022 @02:57PM (#32569572)
Our economy is not fragile.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by enumjorge on Tuesday August 23, 2022 @11:58AM (#32566854)
The last US President used Twitter as his primary way to communicate with the world. That on its own has serious security implications.

I agree with you that we have landed in not a great place.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by slowmovintarget on Tuesday August 23, 2022 @03:03PM (#32569665)
I hope we get to a place where we all agree that a sitting U.S. President should not "tweet." The White House maintains a Press Secretary for a reason. Granted, the current person holding the job is no C.J. Craig.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by nradov on Tuesday August 23, 2022 @04:46PM (#32571245)
I don't agree. The US president (and other politicians) should have a convenient way to communicate directly with the public, without the message being distorted by media organizations. Ideally though it should be a service that can't be censored; Twitter frequently censors users based on the arbitrary whims of their employees.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by raarts on Tuesday August 23, 2022 @03:22PM (#32570012)
Like traditional secretaries, the WH Press Secretary may have become obsolete.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by jacobolus on Tuesday August 23, 2022 @05:40PM (#32571931)
Both Psaki and Jean-Pierre have been excellent press secretaries. C.J. Craig is a fictional character written to be superhumanly prescient and witty in response to fictional crises.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by SV_BubbleTime on Tuesday August 23, 2022 @12:29PM (#32567334)
> The last US President used Twitter as his primary way to communicate with the world.

Without it sounding like an endorsement or defense of the guy… I never would have believed without seeing it, just how furious this made the media and other politicians. That you have a guy come in who said forget the system, I’m going talk to the people directly (and say some dumb things now and then).

I still attest that some of the Trump hate is solely because groups of people that control the narrative in the US were excluded from creation and forced to be on narrative-adjustment.

Agreed, this isn’t a good place. One platform should not have this level of influence.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by smsm42 on Tuesday August 23, 2022 @02:03PM (#32568685)
It wasn't the platform. As you can see, it took some time, but Trump found a way to do the same without Twitter. Despite all the efforts of Big Tech to control the access to public discussion, they still can't make it airtight, and contain somebody of Trump's caliber. Arguably, they have more luck with people of the smaller caliber though. And that's definitely not a good place. It's not about the specific guy, it's about how eager the Big Social turned out to be to control what we think and what we are allowed to talk about.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by enraged_camel on Tuesday August 23, 2022 @11:16AM (#32566125)
>> It's Twitter. What possible serious security implications could possibly warrant everyone in Washington getting into a frenzy?

Considering how widely used Twitter is, at this point we can comfortably assume that most politicians and political operatives, even high profile ones, must have very sensitive information in their Twitter DM inboxes.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by datavirtue on Tuesday August 23, 2022 @02:16PM (#32568890)
Whew, I would assume no one is using Twitter DMs. If they are, these should be 100% personal and unimportant. If not, those people should be investigated, not Twitter.

I'm not defending Twitter, I don't engage with it at all.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by raxxorraxor on Tuesday August 23, 2022 @11:26AM (#32566306)
> must have very sensitive information in their Twitter DM inboxes.

I doubt that, and if they really do, they should be either trained or exposed pronto. Twitter is an entertainment platform.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by jcims on Tuesday August 23, 2022 @11:42AM (#32566572)
You've described the way it ostensibly should be.

My guess is that the reality is almost perfectly in opposition to what you've described. Anything that introduces plausible deniability is going to be of a major benefit.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by wiz21c on Tuesday August 23, 2022 @11:27AM (#32566319)
ah ah ah so they trust twitter ? the situation is improving at minus light speed...
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by smsm42 on Tuesday August 23, 2022 @02:04PM (#32568713)
I won't be surprised that they do. Most politicians are very thoroughly technically ignorant, and have little time or patience to spend on learning technically complex things, and really safe communication means aren't usually very user-friendly.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by Scoundreller on Tuesday August 23, 2022 @11:29AM (#32566365)
I’d also add the opportunity for provocateurs to cause problems: e.g. inducing vaccine hesitancy (back when the covid vaccines worked, but let’s not focus too much on that).

My feed is still filled with how all of our public service problems must be caused by the 1-2% that were put on unpaid leave for refusing to disclose their vaccination status. I’m sure the 1-2% could help, but the issues are much larger than that.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by k099 on Tuesday August 23, 2022 @11:42AM (#32566575)
I can think of a few accounts that, with a single tweet, could move markets, inflame tensions, or kick off multiple cycles of misinformation. For many of these large, influential accounts, Twitter is effectively the same as an official press release.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by robotnikman on Tuesday August 23, 2022 @02:35PM (#32569184)
Considering a journalist was murdered and dismembered due to their lax security not to long ago, I would consider it definitely worth looking into.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by melony on Tuesday August 23, 2022 @12:40PM (#32567493)
There's a simpler explanation. He is doing this for profit. I don't buy all the speculation that he approached the SEC out of some professional obligation or simply to spite the Twitter leadership. As a former executive he most likely still holds stock and having the price plunge is not exactly in his interest unless the pay-off from whistleblowing is high enough. Given his high profile, he just burned all bridges career-wise at big tech. The expected whistleblower payout here must be enormous.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by andrewflnr on Tuesday August 23, 2022 @12:52PM (#32567673)
You've not really made an argument that it's a simpler explanation, just listed a bunch of reasons it's unlikely he'll profit from this, topped with pure speculation that he will anyway.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by hermitdev on Tuesday August 23, 2022 @01:13PM (#32567963)
I know it's easy being cynical in this day and age, but there are people out there that still operate under a manner of principles. I'd like to think that mudge is one of them.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by nr2x on Tuesday August 23, 2022 @01:02PM (#32567819)
You don’t understand the value of reputation.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by melony on Tuesday August 23, 2022 @01:24PM (#32568130)
I don't think you understand what it means to burn all bridges. He is literally unhireable right now in any corporate context. You are naive if you believe he is doing this out of some hacker ethos.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by strictnein on Tuesday August 23, 2022 @02:16PM (#32568888)
The idea that he is "unhireable" in the security space because of this is rather amusing.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by nr2x on Wednesday August 24, 2022 @02:19PM (#32583603)
It’s honestly really hilarious. Oh no, a literal God of Security is gonna have to beg for entry level employment.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by melony on Wednesday August 24, 2022 @02:42PM (#32583907)
In the private sector he is not going to find employment any time soon at a major corporation. You can downvote as much as you want but any management who hires whistleblowers deserve to be immediately fired by the board. It's basic corporate governance 101.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by zenlf on Tuesday August 23, 2022 @01:42PM (#32568393)
You talk like part of the problem.
Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by choppaface on Tuesday August 23, 2022 @03:05PM (#32569703)
Actions speak louder than words. For him to file this complaint now, after Musk pulled out of his Twitter purchase, makes any truthful statements pretty low value to Musk’s case. Does Twitter need better security? Yeah. Will Twitter get embarrassed? Yeah?

Will this testimony show Musk completely miffed his due diligence while building up a huge loan package that would have sent most of Twitter’s revenue to debt service? The timeline is what matters.

Re:Ex-Twitter exec blows the whistle, alleging reckless cybe... by fordsmith on Tuesday August 23, 2022 @07:48PM (#32573160)
This is incorrect. The complaint was filed _before_ musk even showed interest in Twitter