4 ms·

But a lot has gone wrong at Twitter...

• 411111111111111 4y ago
  Sure, but the argument was > For example, half the company had prod access to user accounts. And there was no way to find out who accessed what. This is not normal, it's a huge red flag. If that statement was qualified to only include fortune 500 companies I would've agreed with it being a red flag
  • pessimizer 4y ago
    Did you think they were referring to a company other than Twitter?
    • 411111111111111 4y ago
      Yes, the "that's not normal" made it quiet explicitly about the state of the industry in order to single out Twitter to be exceptionally bad in this regard. Which is true in the context of well run companies, but not on the average. The exceptionally bad ones have no authentication on databases readable to dog-and-world. That's the state of our industry where security is at best an afterthought. By that measure, Twitter is basically average. They give it some lip service and do as little as they can get away with.