3 ms·
It would surprise me if a lot of Twitter support people had access to tools that allowed them to post tweets as another user. That's not functionality that shou
by _-___________-_ 6y ago
It would surprise me if a lot of Twitter support people had access to tools that allowed them to post tweets as another user. That's not functionality that should be available to a Twitter support person.
- thu2111 6y agoNo, that's easy. People's accounts get hacked all the time. To help them recover is often a manual process, because the true owner of the account can become unclear. To be able to do that a support worker must be able to change the email address on an account, undo 2FA settings and make other changes because hackers will typically change the email address and add 2FA of their own phone as the first step in an account takeover.
- thinkingemote 6y agoBut why would the support worker need to be able to post a tweet?
- detaro 6y agoIf you can change the owner of an account you don't need a special interface to post a tweet.
- lutoma 6y agoThey way I understand it based on the article is that they were only able to change the email address, then used that to reset the password and log in.
- koheripbal 6y agoHaving worked at large tech companies - it would not surprise me at all if many did. ...at least through unofficial channels or not-entirely-secure processes.