3 ms·

Suppose Twitter did all it could to investigate and found no evidence. What would you rather have Twitter say in that case ?

• addingnumbers 4y ago
  "We are unable to determine if the vulnerability was exploited." How hard they looked is not of any consequence if they can't tell it wasn't exploited.
• i_s 4y ago
  Saying there is an absence of evidence (of a leak) isn't useful by itself unless they also indicate whether that is evidence of absence (of a leak). I.e., they should indicate whether it is likely that they would have caught it if a leak had occured (e.g., via extensive logging).
• thayne 4y ago
  Provide some level of detail on how they looked for evidence. "We have no evidence" could mean "we didn't bother looking for evidence", or "we looked extensively for evidence, but didn't find any." In fact, the company has an incentive not to keep logs or collect evidence specifically so they can truthfully claim they don't have any evidence of a breach
• behringer 4y ago
  How many man hours they spent investigating would be good.
• criddell 4y ago
  "We assume it was exploited and you should too."