3 ms·
Then you admit that twitter has a deficient mechanism for dealing with PII data? You can’t blame this on a single engineer. It’s the product manager, the techni
by ABeeSea 7y ago
Then you admit that twitter has a deficient mechanism for dealing with PII data? You can’t blame this on a single engineer. It’s the product manager, the technical lead, the engineer and the legal mechanisms for PII that led to this breach. An engineer working on ad tech should have never had access to the PII used for security. Just a shit show all around.
They should be deeply fined.
- verst 7y agoI have zero insight into how the 2FA phone number was stored or how it could have been accessed. I can't admit to anything I don't know about :) I agree that in a well designed system and process 2FA numbers should not be accessible (like passwords). However, I've seen this as a common practice in quite a few startups.