cloudy.png
Saturday December 3rd, 2022 2:16PM

Twitter whistleblower cites security flaws before Congress

By The Associated Press

WASHINGTON (AP) — Twitter's former security chief told Congress Tuesday there was “at least one agent” from China's intelligence service on Twitter's payroll and that the company knowingly allowed India to add agents to the company roster as well, where they had access to highly sensitive data on users around the world.

These were some of the troubling revelations from Peiter “Mudge” Zatko, a respected cybersecurity expert and Twitter whistleblower who appeared before the Senate Judiciary Committee to lay out his allegations against the company.

Zatko told lawmakers that the social media platform is plagued by weak cyber defenses that make it vulnerable to exploitation by “teenagers, thieves and spies” and put the privacy of its users at risk.

“I am here today because Twitter leadership is misleading the public, lawmakers, regulators and even its own board of directors," Zatko said as he began his sworn testimony.

“They don’t know what data they have, where it lives and where it came from and so, unsurprisingly, they can’t protect it,” Zatko said. “It doesn’t matter who has keys if there are no locks."

“Twitter leadership ignored its engineers,” he said, in part because “their executive incentives led them to prioritize profit over security.”

One issue that didn't come up in the hearing was the question of whether Twitter is accurately counting its active users, an important metric for its advertisers. Tesla CEO Elon Musk, who is trying to get out of a $44 billion deal to buy Twitter, has argued without evidence that many of Twitter’s roughly 238 million daily users are fake or malicious accounts, i.e. “spam bots.”

The Delaware judge overseeing the case ruled last week that Musk can include new evidence related to Zatko’s allegations in the high-stakes trial, which is set to start Oct. 17. During the hearing, Musk tweeted a popcorn emoji, often used to suggest that one is sitting back in anticipation of unfolding drama.

Separately on Tuesday, Twitter's shareholders voted overwhelmingly to approve the deal according to multiple media reports. Shareholders have been voting remotely on the issue for weeks. The vote was largely a formality, particularly given Musk's efforts to nullify the deal, although it does clears a legal hurdle to closing the sale.

Zatko's message echoed one brought to Congress against another social media giant last year. But unlike that Facebook whistleblower, Frances Haugen, Zatko hasn't brought troves of internal documents to back up his claims.

Zatko was the head of security for the influential platform until he was fired early this year. He filed a whistleblower complaint in July with Congress, the Justice Department, the Federal Trade Commission and the Securities and Exchange Commission. Among his most serious accusations is that Twitter violated the terms of a 2011 FTC settlement by falsely claiming that it had put stronger measures in place to protect the security and privacy of its users.

Sen. Dick Durbin, an Illinois Democrat who heads the Judiciary Committee, said Zatko has detailed flaws “that may pose a direct threat to Twitter’s hundreds of millions of users as well as to American democracy.”

“Twitter is an immensely powerful platform and can’t afford gaping vulnerabilities,” he said.

Unknown to Twitter users, there’s far more of their personal information disclosed than they — or sometimes even Twitter itself — realize, Zatko testified. He said Twitter did not address “basic systemic failures” brought forward by company engineers.

The FTC has been “a little over its head”, and far behind European counterparts, in policing the sort of privacy violations that have occurred at Twitter, Zatko said.

Sen. Lindsey Graham, a Republican from South Carolina, said one positive result that could come out of Zatko’s findings would be bipartisan legislation to set up a tighter system of regulation of tech platforms.

“We need to up our game in this country,” he said.

Many of Zatko’s claims are uncorroborated and appear to have little documentary support. Twitter has called Zatko’s description of events “a false narrative ... riddled with inconsistencies and inaccuracies” and lacking important context.

Among the assertions from Zatko that drew attention from lawmakers Tuesday was that Twitter knowingly allowed the government of India to place its agents on the company payroll, where they had access to highly sensitive data on users. Twitter’s lack of ability to log how employees accessed user accounts made it hard for the company to detect when employees were abusing their access, Zatko said.

Zatko said he spoke with “high confidence” about a foreign agent that the government of India placed at Twitter to “understand the negotiations” between India’s ruling party and Twitter about new social media restrictions and how well those negotiations were going.

Zatko also revealed Tuesday that he was told about a week before his firing that “at least one agent” from the Chinese intelligence service MSS, or the Ministry of State Security, was “on the payroll” at Twitter.

He said he was similarly “surprised and shocked” by an exchange with current Twitter CEO Parag Agrawal about Russia — in which Twitter's current CEO, who was chief technology officer at the time, asked if it would be possible to “punt” content moderation and surveillance to the Russian government, since Twitter doesn't really “have the ability and tools to do things correctly.”

“And since they have elections, doesn’t that make them a democracy?” Zatko recalled Agrawal saying.

Sen. Charles Grassley, the committee's ranking Republican, said Tuesday that Agrawal declined to testify at the hearing, citing the ongoing legal proceedings with Musk. But the hearing is “more important than Twitter’s civil litigation in Delaware," Grassley said. Twitter declined to comment on Grassley's remarks.

In his complaint, Zatko accused Agrawal as well as other senior executives and board members of numerous violations, including making “false and misleading statements to users and the FTC about the Twitter platform’s security, privacy and integrity.”

Zatko, 51, first gained prominence in the 1990s as a pioneer in the ethical hacking movement and later worked in senior positions at an elite Defense Department research unit and at Google. He joined Twitter in late 2020 at the urging of then-CEO Jack Dorsey.

___

AP technology reporters Barbara Ortutay and Matt O'Brien contributed to this report.

___

Follow Marcy Gordon at https://twitter.com/mgordonap

  • Associated Categories: Associated Press (AP), AP National News, AP Online National News, Top General short headlines, AP Online Headlines - Washington, AP Online Congress News, AP Business, AP Business - Corporate News, AP Technology News
© Copyright 2022 AccessWDUN.com
All rights reserved. This material may not be published, broadcast, rewritten, or redistributed without permission.
At 50, TV's ‘The Waltons’ still stirs fans’ love, nostalgia
“The Waltons,” one of TV's most popular and enduring programs, turns 50 on Wednesday
11:52AM ( 9 minutes ago )
Queen's coffin leaves Edinburgh cathedral for London return
The coffin of Queen Elizabeth II has been carried out of St. Giles’ Cathedral in Edinburgh to begin her final journey through Scotland to a Royal Air Force plane that will carry her back to London
11:44AM ( 17 minutes ago )
Live updates: Queen's coffin heads to Buckingham Palace
The coffin of Queen Elizabeth II is on its way to London
11:41AM ( 21 minutes ago )
Associated Press (AP)
Elected official facing murder charge in journalist slaying
An elected official is due to be formally charged with murder in the stabbing death of a Las Vegas investigative reporter who was attacked outside his home
11:06AM ( 55 minutes ago )
Panel: Archives still not certain it has all Trump records
A congressional oversight committee has requested an assessment from the National Archives on whether presidential records removed by former President Donald Trump remain unaccounted for and potentially in his possession
11:03AM ( 58 minutes ago )
King cheered in Belfast, queen's coffin to return to London
Cheering crowds have greeted King Charles III in Northern Ireland on his tour of the four parts of the United Kingdom
10:56AM ( 1 hour ago )
AP National News
Anger over past, indifference meet queen’s death in India
Just hours before news of Queen Elizabeth II’s death spread, Prime Minister Narendra Modi delivered a fiery speech urging India to shed its colonial ties in a ceremony to rename a boulevard that once honored King George V
9:24AM ( 2 hours ago )
King Charles in Belfast, queen's coffin to return to London
King Charles III has arrived in Northern Ireland on the latest leg of his tour of the nations that make up the United Kingdom as thousands of people have lined up through the night to pay their last respects to his mother’s coffin in Edinburgh
9:01AM ( 3 hours ago )
Russia's war in Ukraine the backdrop to pope's Kazakh visit
Russia’s war in Ukraine and the Holy See’s strained relations with China are the backdrop to Pope Francis’ visit to Kazakhstan
8:42AM ( 3 hours ago )
AP Online National News
'A seat at the table': Peltola to be sworn in to Congress
Mary Peltola will be making history when she's sworn in as the first Alaska Native to serve in Congress
10:59AM ( 1 hour ago )
RI governor faces tough primary in bid for 1st full term
Rhode Island Gov. Dan McKee is facing a tough challenge from Secretary of State Nellie Gorbea in Tuesday’s Democratic primary
10:14AM ( 1 hour ago )
Arrests of UK anti-royal protesters spur free-speech debate
Since the death of Queen Elizabeth II, a handful of people in Britain have been detained by police for expressing anti-monarchy views
8:18AM ( 3 hours ago )
AP Online Headlines - Washington
What's left as Jan. 6 panel sprints to year-end finish
The House Jan. 6 committee is eyeing a close to its work and a final report laying out its findings about the U.S. Capitol insurrection by the end of the year
12:12AM ( 11 hours ago )
Democrats try to seize political offensive ahead of midterms
A boisterous mood marked the Democratic National Committee’s recent summer gathering near Washington
12:09AM ( 11 hours ago )
Live updates: King and siblings stand vigil to honor queen
King Charles III and his siblings have stood in silent vigil around their mother Queen Elizabeth II’s coffin in St Giles’ Cathedral in Edinburgh
10:24PM ( 13 hours ago )
AP Online Congress News
Stocks tumble on dashed inflation hopes; S&P 500 loses 3%
Stocks are tumbling and disappointment is hitting markets worldwide, following Wall Street’s sudden realization that inflation isn’t slowing as much as hoped
10:56AM ( 1 hour ago )
Stocks tumble after inflation stays hotter than expected
Stocks are tumbling and disappointment is hitting markets worldwide, following Wall Street’s sudden realization that inflation isn’t slowing as much as hoped
10:43AM ( 1 hour ago )
Broadway theater renamed in honor of James Earl Jones
The newly restored Cort Theatre on Broadway has been renamed after James Earl Jones, becoming the second theater on the Great White Way named after a Black artist
9:48AM ( 2 hours ago )
AP Business
In parts of Mideast, power generators spew toxic fumes 24/7
They literally run the country
9:35PM ( 14 hours ago )
Work at Stellantis plant to resume after deal with UAW
United Auto Workers union members who went on strike Saturday at a Stellantis casting plant in Indiana are returning to work after ratifying a deal with the company
8:20PM ( 15 hours ago )
EXPLAINER: Ukraine's nuclear power plant shutdown cuts risks
The shutdown of Ukraine’s Zaporizhzhia nuclear power plant cuts the risk of a radiation disaster that has haunted the world
3:28AM ( 1 day ago )
AP Business - Corporate News
At 50, TV's ‘The Waltons’ still stirs fans’ love, nostalgia
“The Waltons,” one of TV's most popular and enduring programs, turns 50 on Wednesday
11:52AM ( 10 minutes ago )
Queen's coffin leaves Edinburgh cathedral for London return
The coffin of Queen Elizabeth II has been carried out of St. Giles’ Cathedral in Edinburgh to begin her final journey through Scotland to a Royal Air Force plane that will carry her back to London
11:44AM ( 18 minutes ago )
Live updates: Queen's coffin heads to Buckingham Palace
The coffin of Queen Elizabeth II is on its way to London
11:41AM ( 21 minutes ago )
Alex Jones faces second trial over Sandy Hook hoax claims
A Connecticut jury has begun hearing arguments about how much money conspiracy theorist Alex Jones should pay relatives of victims of the Sandy Hook Elementary School shooting for calling the massacre a hoax
11:34AM ( 27 minutes ago )
Armenia says 49 soldiers killed in attacks by Azerbaijan
Azerbaijani forces have shelled Armenia’s territory in a large-scale attack that the Armenian prime minister said killed at least 49 Armenian soldiers
11:31AM ( 31 minutes ago )