3 ms·

If twitter implemented the following, it would take much of the steam out of this case: 1. Restricted/conditional/temporary access to production systems with ex

If twitter implemented the following, it would take much of the steam out of this case: 1. Restricted/conditional/temporary access to production systems with extensive centralised audit logging. 2. Handled phone# and geo-location data as sensitive personally identifiable information (SPII) – kept this data in one centralized place (a micro service with well-defined access controlled apis) and prevented its proliferation into other systems. And promptly deleted it when users deleted their accounts. To implement these two things, it wouldn't cost anywhere near $150M. And likely it wouldn't impact the velocity of their revenue features too much either (impact would be something like slow-down for quarter). Sad thing is senators are picking on only some companies and not others. Instead, they should be making a comprehensive data privacy act that applies to all companies – like credit card companies, shopping/loyalty-card companies, all the data brokers etc.

spfzero 4y ago
They're not picking on one company arbitrarily. There was a specific whistleblower complaint sent to the SEC, about Twitter. Twitter is a large company, and the SEC has to take notice by law. Twitter sticks up as it is such a large company with so many customers, the complaint is authoritative, and there was an agreement in 2011 with the government which the complaint argues has been broken by Twitter. That agreement implied that Twitter would do your 1. and 2., starting 11 years ago, and they seem to have not.
- sangnoir 4y ago
  > SEC has to take notice by law. Senate =/= SEC
  - spfzero 4y ago
    Congress oversees the SEC.
    - sangnoir 4y ago
      Yet congress doesn't have hearings on every SEC investigation. GPs claim was congress would better spend its time writing industry-wide laws instead of this dog-and-pony show (my words). Parent refutation was that the SEC is obligated to look into every allegation - my observation was that congress doesn't have to micromanage SEC investigations. I support gp - congress should be legislating or involving the SEC officials to see where the gaps in the law are, rather than seeking soundbites.

spfzero 4y ago

They're not picking on one company arbitrarily. There was a specific whistleblower complaint sent to the SEC, about Twitter. Twitter is a large company, and the SEC has to take notice by law. Twitter sticks up as it is such a large company with so many customers, the complaint is authoritative, and there was an agreement in 2011 with the government which the complaint argues has been broken by Twitter. That agreement implied that Twitter would do your 1. and 2., starting 11 years ago, and they seem to have not.

sangnoir 4y ago
> SEC has to take notice by law. Senate =/= SEC
- spfzero 4y ago
  Congress oversees the SEC.
  - sangnoir 4y ago
    Yet congress doesn't have hearings on every SEC investigation. GPs claim was congress would better spend its time writing industry-wide laws instead of this dog-and-pony show (my words). Parent refutation was that the SEC is obligated to look into every allegation - my observation was that congress doesn't have to micromanage SEC investigations. I support gp - congress should be legislating or involving the SEC officials to see where the gaps in the law are, rather than seeking soundbites.