Wow, this is a wild read. Some of the most shocking parts: - Lack of development and testing environments; engineers build, deploy, and test code directly on t

Wow, this is a wild read. Some of the most shocking parts: - Lack of development and testing environments; engineers build, deploy, and test code directly on the production environment - >50% of employees having access to the live production environment and sensitive user data (getting _worse_ over time) - Lack of logging of what people did with their production environment access - 30% of employees' systems had disabled software updates - Twitter "has never held proper licenses to the data sets and/or software" they used for some ML models - "The majority of the systems in the data centers were running out of date software no longer supported by vendors" - Misleading the board (e.g. trumpeting "we have endpoint monitoring software on 92% of employee systems!" but neglecting to mention that endpoint monitoring software reported 30% of employees' systems had disabled software updates) - Misleading the FTC (e.g. implying that data was deleted when users closed their accounts, when in fact it was not)