Live data from Hacker News

Ex-Twitter exec blows the whistle, alleging reckless cybersecurity policies

cnn.com

301–310 of 645 posts

Re: Ex-Twitter exec blows the whistle, alleging reckless cybersecurity policies

#301

Millenials and GenZ may have no idea who Mudge is. I, however, almost lost my first job out of college at a bank because I ran l0phtcrack against our Windows NT 4 server to see if it could crack passwords. I showed my boss, and he pulled me aside into another room and tore my head off for irresponsibly running this tool against a production server. He said I could have been fired if this got out, but he covered my as…

It's Twitter. What possible serious security implications could possibly warrant everyone in Washington getting into a frenzy? All you do is make public comments that have zero value. And if this is indeed serious, where the fuck have we landed?

A well-timed set of tweets from compromised government and private-sector accounts, coordinated with real stock market activity planned by the attacker such that investors cannot ignore the rumors, could cause a geopolitically significant market panic. This already happened in 2013, and that was with just a single account being compromised: https://business.time.com/2013/04/24/how-does-one-fake-tweet...

Re: Ex-Twitter exec blows the whistle, alleging reckless cybersecurity policies

#302

Millenials and GenZ may have no idea who Mudge is. I, however, almost lost my first job out of college at a bank because I ran l0phtcrack against our Windows NT 4 server to see if it could crack passwords. I showed my boss, and he pulled me aside into another room and tore my head off for irresponsibly running this tool against a production server. He said I could have been fired if this got out, but he covered my as…

> I ran l0phtcrack against our Windows NT 4 server to see if it could crack passwords.

Lol, did the same thing for a government entity I was working for, also without prior permission. It showed 1/4 of the people used the name of the entity as there password, including 2 users with domain admin credentials. Both of the domain admins weren't even IT people, there were the director and his assistant, who demanded to be admins, because they were 'admin' within the org.

In my case, I didn't get scolding, but probably should have. As you're prior boss said, it was not good to do it on a running production server. Now a restored backup running on a private network...

Re: Ex-Twitter exec blows the whistle, alleging reckless cybersecurity policies

#304

Millenials and GenZ may have no idea who Mudge is. I, however, almost lost my first job out of college at a bank because I ran l0phtcrack against our Windows NT 4 server to see if it could crack passwords. I showed my boss, and he pulled me aside into another room and tore my head off for irresponsibly running this tool against a production server. He said I could have been fired if this got out, but he covered my as…

It's Twitter. What possible serious security implications could possibly warrant everyone in Washington getting into a frenzy? All you do is make public comments that have zero value. And if this is indeed serious, where the fuck have we landed?

The last US President used Twitter as his primary way to communicate with the world. That on its own has serious security implications.

I agree with you that we have landed in not a great place.

Re: Ex-Twitter exec blows the whistle, alleging reckless cybersecurity policies

#307

>one or more current employees may be working for a foreign intelligence service. I don't doubt this, but the source is someone with fairly deep ties to the US intelligence services. Why should he be allowed a job and not people with ties to foreign agencies?

No post body was provided.

Re: Ex-Twitter exec blows the whistle, alleging reckless cybersecurity policies

#308

I've been hearing about Mudge for decades . It's actually a bit ... heartbreaking ... to see him looking so corporate, but we all age, don't we? I doubt he was fired for being bad at his job. But I'll bet he was fired for getting in people's faces. That was basically his calling card for years . Why is anyone surprised? I guess Twitter thought they could hire the cachet, without hiring the man. I remember an Apple WW…

I also only have public information, but the sense I've gotten was that Twitter had an embarrassing problem, with high-profile accounts being compromised, and Jack personally hired Mudge to fix it, with Mudge reporting directly to Jack. This set up Mudge to essentially be the parental supervision for Parag, which chafed / pissed Parag off. Then, when Parag became CEO, Mudge was out, having not accomplished much because Parag was actively hostile to the interference.

Again, conjecture based on what I could extract from the froth, but mundane enough for me that alternatives (shocking displays of X) start requiring extraordinary evidence.

Re: Ex-Twitter exec blows the whistle, alleging reckless cybersecurity policies

#309

Earlier quoted context omitted.

I don't remember conservatives threatening Twitter to censor "dangerous" views or "misinformation" or telling who to ban.

[flagged]

Because a random bakery shop is totally like a pseudo-monopolistic social media giant that can censor millions arbitarily and at will.

Re: Ex-Twitter exec blows the whistle, alleging reckless cybersecurity policies

#310

I've been hearing about Mudge for decades . It's actually a bit ... heartbreaking ... to see him looking so corporate, but we all age, don't we? I doubt he was fired for being bad at his job. But I'll bet he was fired for getting in people's faces. That was basically his calling card for years . Why is anyone surprised? I guess Twitter thought they could hire the cachet, without hiring the man. I remember an Apple WW…

I also only have public information, but the sense I've gotten was that Twitter had an embarrassing problem, with high-profile accounts being compromised, and Jack personally hired Mudge to fix it, with Mudge reporting directly to Jack. This set up Mudge to essentially be the parental supervision for Parag, which chafed / pissed Parag off. Then, when Parag became CEO, Mudge was out, having not accomplished much becau…

This. Parag's retaliation for having his toes stepped on
Post reply on HN