4 ms·

Well Duh! Of course a twitter employee could take over any account. Hopefully they have some internal safeguards in place but there are probably hundreds of peo

Well Duh! Of course a twitter employee could take over any account. Hopefully they have some internal safeguards in place but there are probably hundreds of people there that could take over an account if they wanted to, just as the owners of news.ycombinator.com could take over any account here. You don't really own a Twitter (or Facebook, or ycombinator) account. Those services have an account on you. You update their account on you when you use their service to post (and they keep other information useful to their business on your account that you have no access to). This is just the way social media works.

michaelt 4y ago
> Well Duh! Of course a twitter employee could take over any account. Most companies the size of Twitter would have a lot more controls than that on random employees' write access to production. If I want to assume a user's identity in my employer's production system I have to fill out a form justifying it, get my manager's approval for each account accessed, and my activity is subject to logging.
- encryptluks2 4y ago
  So it can still be done, isn't that the original complaint?
- madeofpalk 4y ago
  One would hope... ...on the other hand, https://en.wikipedia.org/wiki/2020_Twitter_account_hijacking https://en.wikipedia.org/wiki/2020_Twitter_account_hijacking
- themaninthedark 4y ago
  Remember when an employee took down Trumps account? https://news.yahoo.com/rogue-twitter-employee-took-down-141953762.html https://news.yahoo.com/rogue-twitter-employee-took-down-1419... First it was "inadvertently deactivated due to human error by a Twitter employee." Then "Through our investigation we have learned that this was done by a Twitter customer support employee who did this on the employee’s last day." It was kinda funny but you would expect that they would learn and improve from it. Edit: Thank you siblings for showing that it has continued to happen. Obviously not lesson not learnt.

michaelt 4y ago

> Well Duh! Of course a twitter employee could take over any account. Most companies the size of Twitter would have a lot more controls than that on random employees' write access to production. If I want to assume a user's identity in my employer's production system I have to fill out a form justifying it, get my manager's approval for each account accessed, and my activity is subject to logging.

encryptluks2 4y ago
So it can still be done, isn't that the original complaint?
madeofpalk 4y ago
One would hope... ...on the other hand, https://en.wikipedia.org/wiki/2020_Twitter_account_hijacking https://en.wikipedia.org/wiki/2020_Twitter_account_hijacking
themaninthedark 4y ago
Remember when an employee took down Trumps account? https://news.yahoo.com/rogue-twitter-employee-took-down-141953762.html https://news.yahoo.com/rogue-twitter-employee-took-down-1419... First it was "inadvertently deactivated due to human error by a Twitter employee." Then "Through our investigation we have learned that this was done by a Twitter customer support employee who did this on the employee’s last day." It was kinda funny but you would expect that they would learn and improve from it. Edit: Thank you siblings for showing that it has continued to happen. Obviously not lesson not learnt.