Twitter's former head of security Peter Zacko went to Congress with allegations of major security failures: over 50% of servers running outdated software, 30% of employees disabling security tools, and widespread data misuse. CEO Elon Musk dismissed him as a disgruntled ex-employee.
Chapters
Absolutely crazy security drama about Twitter in the news today. First, a whistleblower provided Congress and law enforcement hundreds of pages of documentation about security gaps in the Twitter platform. Then Twitter CEO responds, calling them false claims from an exec who was fired for ineffective leadership. Except that executive was ex Twitter head of security Peter Zacko, AKA Mudge, famous for testifying before Congress about the good hackers can do in the 90s working for DARPA, leading security teams at big software companies in the industry, maintaining his integrity his entire career. So who's right? I'm also ahead of security, and I can't even imagine a scenario where I might whistleblow like this. So things have to be pretty crazy at Twitter for him to go this far. Let's look at a couple of his complaints. Mudge says that over 50% of Twitter servers are out of date and insecure. He also says that like 30% of employees are disabling security software on their laptops. He found a ton of privacy issues, including misuse of user data.