Whistleblower: China, India had agents working for Twitter

Sep 12, 2022, 3:00 PM | Updated: Sep 13, 2022, 6:41 pm
CORRECTS SPELLING FROM PETER TO PEITER - Twitter whistleblower Peiter Zatko testifies to a Senate J...

CORRECTS SPELLING FROM PETER TO PEITER - Twitter whistleblower Peiter Zatko testifies to a Senate Judiciary hearing examining data security at risk, Tuesday, Sept. 13, 2022, in Washington. (AP Photo/Jacquelyn Martin)

(AP Photo/Jacquelyn Martin)

WASHINGTON (AP) — Twitter’s former security chief told Congress Tuesday there was “at least one agent” from China’s intelligence service on Twitter’s payroll and that the company knowingly allowed India to add agents to the company roster as well, potentially giving those nations access to sensitive data about users.

These were some of the troubling revelations from Peiter “Mudge” Zatko, a respected cybersecurity expert and Twitter whistleblower who appeared before the Senate Judiciary Committee to lay out his allegations against the company.

Zatko told lawmakers that the social media platform is plagued by weak cyber defenses that make it vulnerable to exploitation by ” teenagers, thieves and spies” and put the privacy of its users at risk.

“I am here today because Twitter leadership is misleading the public, lawmakers, regulators and even its own board of directors,” Zatko said as he began his sworn testimony.

“They don’t know what data they have, where it lives and where it came from and so, unsurprisingly, they can’t protect it,” Zatko said. “It doesn’t matter who has keys if there are no locks.”

“Twitter leadership ignored its engineers,” he said, in part because “their executive incentives led them to prioritize profit over security.”

In a statement, Twitter said its hiring process is “independent of any foreign influence” and access to data is managed through a host of measures, including background checks, access controls, and monitoring and detection systems and processes.

One issue that didn’t come up in the hearing was the question of whether Twitter is accurately counting its active users, an important metric for its advertisers. Tesla CEO Elon Musk, who is trying to get out of a $44 billion deal to buy Twitter, has argued without evidence that many of Twitter’s roughly 238 million daily users are fake or malicious accounts, aka “spam bots.”

Even so, “that doesn’t mean that Musk won’t use Zatko’s allegation that Twitter was disinterested in removing bots to try to bolster his argument for walking away from the deal,” said Insider Intelligence analyst Jasmine Enberg.

The Delaware judge overseeing the case ruled last week that Musk can include new evidence related to Zatko’s allegations in the high-stakes trial, which is set to start Oct. 17. During the hearing, Musk tweeted a popcorn emoji, often used to suggest that one is sitting back in anticipation of unfolding drama.

Separately on Tuesday, Twitter’s shareholders voted overwhelmingly to approve the deal, according to multiple media reports. Shareholders have been voting remotely on the issue for weeks. The vote was largely a formality, particularly given Musk’s efforts to nullify the deal, although it does clear a legal hurdle to closing the sale.

Zatko’s message echoed one brought to Congress against another social media giant last year. But unlike that Facebook whistleblower, Frances Haugen, Zatko hasn’t brought troves of internal documents to back up his claims.

Zatko was the head of security for the influential platform until he was fired early this year. He filed a whistleblower complaint in July with Congress, the Justice Department, the Federal Trade Commission and the Securities and Exchange Commission. Among his most serious accusations is that Twitter violated the terms of a 2011 FTC settlement by falsely claiming that it had put stronger measures in place to protect the security and privacy of its users.

Sen. Dick Durbin, an Illinois Democrat who heads the Judiciary Committee, said Zatko has detailed flaws “that may pose a direct threat to Twitter’s hundreds of millions of users as well as to American democracy.”

“Twitter is an immensely powerful platform and can’t afford gaping vulnerabilities,” he said.

Unknown to Twitter users, there’s far more of their personal information disclosed than they — or sometimes even Twitter itself — realize, Zatko testified. He said Twitter did not address “basic systemic failures” brought forward by company engineers.

The FTC has been “a little over its head”, and far behind European counterparts, in policing the sort of privacy violations that have occurred at Twitter, Zatko said.

Zatko’s allegation that Twitter was more concerned about foreign regulators than the FTC, Enberg said, “could be a wakeup call for U.S. lawmakers,” who have been unable to pass meaningful regulation on social media companies.

Sen. Lindsey Graham, a Republican from South Carolina, said one positive result that could come out of Zatko’s findings would be bipartisan legislation to set up a tighter system of regulation of tech platforms.

“We need to up our game in this country,” he said.

Many of Zatko’s claims are uncorroborated and appear to have little documentary support. Twitter has called Zatko’s description of events “a false narrative … riddled with inconsistencies and inaccuracies” and lacking important context.

Still, Zatko came off as a convincing whistleblower who has “a lot of credibility in this space,” said Ari Lightman, professor of digital media and marketing at Carnegie Mellon University. But he said many of the problems he raised can likely be found at many other digital technology platforms

“They avoid security protocols in a sense of innovating and running really fast,” Lightman said. “We gave digital platforms so much autonomy at the beginning to grow and develop. Now we’re at a point where we’re, ‘Wait a minute … This has gotten out of hand.’

Among the assertions from Zatko that drew lawmaker attention was Twitter’s apparent negligence in dealing with governments that sought to get spies a job inside the company. Twitter’s inability to log how employees accessed user accounts made it hard for the company to detect when employees were abusing their access, Zatko said.

Zatko said he spoke with “high confidence” about a foreign agent that the government of India placed at Twitter to “understand the negotiations” between India’s ruling party and Twitter about new social media restrictions and how well those negotiations were going.

Zatko also revealed Tuesday that he was told about a week before his firing that “at least one agent” from the Chinese intelligence service MSS, or the Ministry of State Security, was “on the payroll” at Twitter.

He said he was similarly “surprised and shocked” by an exchange with current Twitter CEO Parag Agrawal about Russia — in which Twitter’s current CEO, who was chief technology officer at the time, asked if it would be possible to “punt” content moderation and surveillance to the Russian government, since Twitter doesn’t really “have the ability and tools to do things correctly.”

“And since they have elections, doesn’t that make them a democracy?” Zatko recalled Agrawal saying.

Sen. Charles Grassley, the committee’s ranking Republican, said Tuesday that Agrawal declined to testify at the hearing, citing the ongoing legal proceedings with Musk. But the hearing is “more important than Twitter’s civil litigation in Delaware,” Grassley said. Twitter declined to comment on Grassley’s remarks.

In his complaint, Zatko accused Agrawal as well as other senior executives and board members of numerous violations, including making “false and misleading statements to users and the FTC about the Twitter platform’s security, privacy and integrity.”

Zatko, 51, first gained prominence in the 1990s as a pioneer in the ethical hacking movement and later worked in senior positions at an elite Defense Department research unit and at Google. He joined Twitter in late 2020 at the urging of then-CEO Jack Dorsey.

___

O’Brien reported from Providence, R.I.; Ortutay reported from Oakland, Calif.

___

Follow Marcy Gordon at https://twitter.com/mgordonap

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

FILE - In this Monday, Dec. 10, 2018 file photo, a bust of the Nobel Prize founder, Alfred Nobel on...
Associated Press

Nobel Prize season arrives amid war, nuclear fears, hunger

This year’s Nobel Prize season approaches as Russia’s invasion of Ukraine has shattered decades of almost uninterrupted peace in Europe and raised the risks of a nuclear disaster. The secretive Nobel committees never hint who will win the prizes in medicine, physics, chemistry, literature, economics or peace. It’s anyone’s guess who might win the awards […]
1 day ago
FILE - Flares burn off methane and other hydrocarbons at an oil and gas facility in Lenorah, Texas,...
Associated Press

Methane blast in Baltic Sea highlights global problem

NEW YORK (AP) — As serious as the methane escaping from ruptured pipelines on the floor of the Baltic Sea may be, there are alarming incidents of massive methane releases around the world frequently. Climate scientists have found that methane emissions from the oil and gas industry are far worse than what companies are reporting, […]
1 day ago
A couple speak as they enjoy a drink and candle lit dinner at Brasserie Surrealiste in Brussels, We...
Associated Press

Dining in the dark: Brussels eateries tackle energy crunch

BRUSSELS (AP) — While European Union nations are still mulling a cap on gas prices, some businesses are more in a hurry for solutions to the continent’s energy crisis. In Brussels, the epicenter of the EU, restaurant owners have imagined how a future without gas and electricity would look like for gourmets. The guests at […]
1 day ago
European Commissioner for Energy Kadri Simson speaks during the weekly College of Commissioners mee...
Associated Press

EU set to adopt windfall levy, but no deal on gas price cap

BRUSSELS (AP) — European Union energy ministers were set Friday to adopt a package of measures including a windfall levy on profits by fossil fuel companies, but a deal on capping gas prices remained off the table. With energy prices skyrocketing across Europe since the Russian invasion of Ukraine, EU member countries have been negotiating […]
1 day ago
Russian recruits gather to take a train at a railway station in Prudboi, Volgograd region of Russia...
Associated Press

Russian strike kills 23 as Kremlin to annex Ukraine regions

KYIV, Ukraine (AP) — A Russian strike on the Ukrainian city of Zaporizhzhia killed at least 23 people and wounded dozens, an official said Friday, just hours before Moscow planned to annex more of Ukraine in an escalation of the seven-month war. Zaporizhzhia Regional Governor Oleksandr Starukh made the announcement in an online statement Friday. […]
1 day ago
Olley's Fish Experience shop owner Harry Niazi speaks to The Associated Press in his shop in London...
Associated Press

‘Big impact’: UK economic chaos, pound plunge hit businesses

LONDON (AP) — Like many small business owners in Britain, Harry Niazi hoped for government help to keep his south London fish and chip shop going in the face of rocketing energy bills and soaring inflation. But an economic stimulus plan announced last week by Prime Minister Liz Truss’ new government brought no relief — […]
1 day ago

Sponsored Articles

Anacortes Christmas Tree...

Come one, come all! Food, Drink, and Coastal Christmas – Anacortes has it all!

Come celebrate Anacortes’ 11th annual Bier on the Pier! Bier on the Pier takes place on October 7th and 8th and features local ciders, food trucks and live music - not to mention the beautiful views of the Guemes Channel and backdrop of downtown Anacortes.
Swedish Cyberknife Treatment...

The revolutionary treatment of Swedish CyberKnife provides better quality of life for majority of patients

There are a wide variety of treatments options available for men with prostate cancer. One of the most technologically advanced treatment options in the Pacific Northwest is Stereotactic Body Radiation Therapy using the CyberKnife platform at Swedish Medical Center.
Work at Zum Services...

Seattle Public Schools announces three-year contract with Zum

Seattle Public Schools just announced a three-year contract with a brand-new company to the Pacific Northwest to assist with their student transportation: Zum.
Swedish Cyberknife 900x506...

June is Men’s Health Month: Here’s Why It’s Important To Speak About Your Health

According to the Centers for Disease Control and Prevention, men in the United States, on average, die five years earlier than women.
...

Anacortes – A Must Visit Summertime Destination

While Anacortes is certainly on the way to the San Juan Islands (SJI), it is not just a destination to get to the ferry… Anacortes is a destination in and of itself!
...

Ready for your 2022 Alaskan Adventure with Celebrity Cruises?

Celebrity Cruises SPONSORED — A round-trip Alaska cruise from Seattle is an amazing treat for you and a loved one. Not only are you able to see and explore some of the most incredible and visually appealing natural sights on the planet, but you’re also able to relax and re-energize while aboard a luxury cruise […]
Whistleblower: China, India had agents working for Twitter