Security
Twitter whistleblower reveals security issues on site
Allegedly lying about numbers and international influence
Compared to rivaling social media networks, Twitter has — or had — successfully navigated away from controversy, leaving everyone else in a mire of privacy issues. However, the platform might have finally run out of luck. This week, an ex-executive has turned into a whistleblower to reveal a litany of issues surrounding the platform.
The story so far
Back in 2020, Twitter suffered one of its biggest attacks in its storied history. The list of victims included major names in American politics, industry, and entertainment like Barack Obama, Joe Biden, Apple, and Kanye West. All of the hacks invited users to deposit money into a Bitcoin wallet for the promise of doubled returns. Though innocuous, the attack represented a critical failure in Twitter’s infrastructure.
To address what happened, Jack Dorsey’s Twitter hired Peiter “Mudge” Zatko, a white-hat hacker, as its new head of security. While he quickly ascended through the company’s ranks, Zatko didn’t stay long in the position. He was fired back in January this year. Of note, Dorsey already left Twitter at this point, leaving the company to now-CEO Parag Agrawal.
Fast forward to a few months later, billionaire Elon Musk made a bold claim that he was going to purchase and privatize Twitter. The deal, sparkling with promise, is currently stuck in limbo, owing to both parties’ issues with the other. Musk, for one, claimed that the company lied about how many bots were on the platform, among other security-focused issues. Now, his concerns do have some precedence: Musk was one of the big names affected during the 2020 hack.
Connecting the dots
What does a Bitcoin scam, a fired executive, and Elon Musk have in common? It sounds like the start of a bad joke, but they’re all connected.
For one, the eventual whistleblower is Zatko. According to the extensive report, obtained by CNN and The Washington Post, the ex-chief discovered a list of security issues during his tenure. However, Agrawal reportedly forced Zatko to stay silent and not provide a full account to the company’s board of directors. Zatko believes that his firing stems from this issue.
Months after his firing, Zatko decided to act as a whistleblower, fulfilling the responsibility initially entrusted to him by Jack Dorsey.
A litany of issues
Most of Zatko’s issues revolve around how lax the company is with security and information. According to the whistleblower, all of the company’s engineers have access to the website’s source code. Further, anyone can easily make changes to the code without logging in what changed. Even worse, an astounding 4 out of 10 devices with this access have poor security standards. If an engineer (or someone close to them) wanted to, they can easily change the website to favor more of their views over others.
Additionally, Twitter allegedly fails to delete a user’s data if they chose to shut their Twitter account down. By regulation, the platform is required to delete all data and not keep a cache for themselves.
Thirdly, Zatko says that the platform does not accurately measure exactly how many bots are on the site. Twitter claims that less than 5 percent of users are verifiably bots. Though Zatko doesn’t estimate how many there actually are, one can easily argue that there are more. In fact, Musk himself argues that there are more. The lack of transparency as to the exact number is actually one reason why the sale hasn’t pushed through yet.
Finally, and arguably most critically, Zatko says that the platform is easily swayable by foreign actors. It’s no secret that some countries are forcing platforms to open up local offices in their home turf. The United States, for example, is pushing TikTok to open an American office to prevent data transfer from the country to China.
While national security presents a good side to opening a local office, others can also use the tactic to further national goals. For example, the report alleges that Agrawal asked Zatko to hire a Russian agent to comply with censorship demands during the early stages of the conflict with Ukraine. Another instance alleges that Twitter hired an agent from the Indian government who had access to a vast amount of user data.
What happens now
Currently, the Securities and Exchange Commission, which received Zatko’s complaint, is investigating the extent of the whistleblower’s claims. If found guilty, Twitter is liable for billions of dollars’ worth in fines.
Twitter is denying the allegations, claiming that the platform maintains the best modicum of security for its users. “While we haven’t had access to the specific allegations being referenced, what we’ve seen so far is a narrative about our privacy and data security practices that is riddled with inconsistencies and inaccuracies, and lacks important context,” a spokesperson said to CNN.
On the other hand, the whistleblower has likely piqued Elon Musk’s claim to Twitter. With security concerns part of his original argument, the billionaire might be interested to see what the SEC finds.
News
McAfee rolls out an easy way to detect scam texts and emails
Plus, they have a much lighter app.
Scammers are getting more brazen these days. Instead of going through the same scripts, malicious actors are now going for more robust schemes to impersonate official accounts. It’s impossible to go through a single week without a warning to never trust suspicious senders or links. To fight the latest wave of malicious parties, McAfee is launching new features to more easily find and eliminate potential threats.
As reported by McAfee, 88 percent of Americans have encountered a scam in the past year. The average person sees about 14 scams on a single day. And it’s not just exclusive to the United States. Everyone all over the world is falling prey to scammers more accurately presenting themselves as legitimate accounts.
Introducing the McAfee scam detector
To fight this, McAfee now has a scam detector. Using the power of AI, the antimalware service can scan both text messages and emails for potential scams. It can also block suspicious links for you.
Now, because the software now uses AI, it can also use the same technology to more easily present why it found a threat. In the past, McAfee just showed users the errant file and called it a day. Now, the software offers readable explanations as to why the detected file might be a threat. It’s the perfect tool for those who aren’t savvy with computers.
Additionally, the same feature can analyze videos to see if they’re deepfakes. Of course, not every deepfake is a scam. But knowing if a video might be generated is a crucial skill these days.
A much lighter app
Despite adding a significant feature against modern scams, McAfee has somehow made its software lighter for modern PCs. According to a performance test from AV-Comparatives, McAfee ranks the lightest compared to other titans in the segment including Avast, AVG, and Kaspersky. Basically, using McAfee takes the least toll on your PC.
More interestingly, this comparison includes Microsoft Defender. There used to be a time when experts said that Microsoft’s built-in antivirus software was much better than most paid services. Now, it seems McAfee is fighting back against the claim by offering a much lighter service that can work in the background without interrupting whatever you’re doing.
Available on all plans
Importantly, McAfee’s new scam detector is available on all plans. It’s also available for mobile, tablet, and PC use.
However, it isn’t available for all territories yet. McAfee is still working to get the feature implemented in other languages.
News
No, your Gmail wasn’t hacked this weekend
Google debunks viral hack warnings as “entirely false”
If you were on social media this past weekened, you might have noticed an urgent warning to change your Gmail passwords. According to some viral posts, Google reportedly suffered a major security breach due to a Salesforce attack. Today, the company is claiming that the reports are false and that Gmail security is still as strong as ever.
This entire story stems from a recent Salesforce breach confirmed back in June. Since Google uses Salesforce as part of its backend, the confirmed attack technically affected Gmail users. The company said that it had finished notifying affected users already in early August.
This week, the same issue popped up once again. However, this time, the viral threads are claiming that all 2.5 billion Gmail users are affected. They further suggest a change of passwords to avert potential hacks.
Today, Google has issued a statement to debunk the rumors as “entirely false.” Though the statement does not explicitly name the actual reports, the timing clearly points to the recent trends.
Of course, it’s still best practice to regularly update passwords. Google even confirms that phishing attempts happen all the time, but Google’s security blocks these threats 99.9 percent of the time (according to them, at least). At the very least, there is no reason to panic.
There are a lot more security measures available today, besides passwords. Users can add the more traditional two-factor authentication. Alternatively, devices these days can already support passkeys — a more secure method that relies on device identity, rather than a user’s identity.
SEE ALSO: Gmail now makes it easy to unsubscribe from all marketing emails
Security
Nuki Smart Lock, innovative keyless access solution, now in the US
Award-winning product in Europe hits US market
Nuki’s award-winning Smart Lock has released in the United States. This innovative product developed in Austria and manufactured in Europe offers American consumers a smarter lock choice.
The Nuki Smart Lock combines cutting-edge technology, privacy, and a customer-centric premium design. In addition, there is an intuitive app developed for an optimized user experience.
The Nuki Smart Lock allows users to unlock doors conveniently and automatically under a second. This mechanism is enabled by a cutting-edge brushless motor technology, offering the same efficiency, durability, and performance commonly found in electric vehicles.
As part of the adjustments for the market, the Nuki Smart Lock available in the United States effortlessly retrofits onto existing U.S. single-cylinder deadbolts.
The compact design is only 2.2 inches in diameter and comes with a sleek, stainless steel body and black base ring. Quick installations under 15 minutes are possible, minus drilling or modifications.
The keyless access solution has native Matter support, as well as compatibility with Apple Home, Amazon, Alexa, Google Home, Samsung SmartThings, and more.
Moreover, the product is designed with end-to-end encryption commonly used by online banks. Its battery life, meanwhile, can last up to 12 months.
The Nuki Smart Lock is now available via Amazon for US$ 229 including a Keypad 2. This add-on includes access code and fingerprint options.
The lock on its own retails for US$ 159. Various accessories include a Nuki Keypad with code option (US$ 89), Keypad 2 (US$ 149), and Door Sensor (US$ 59).
In addition, there is a Nuki Premium subscription available for US$ 5.90 a month. This includes full remote access via the Nuki app, real-time activity alerts, and a two-year immediate product replacement.
-
News2 weeks agoXiaomi 17 Pro Max takes a jab at Apple’s iPhone 17 Pro Max
-
Reviews2 weeks agoThe HONOR Magic V5 feels like coming home
-
Reviews2 weeks agoXiaomi 15T Pro review: Big battery, clean shots, smooth performance
-
Tablets4 days agoThe Xiaomi Pad Mini is discounted until October 13
-
News2 weeks agoXiaomi 15T Series, Gold Collection pricing in the Philippines
-
Gaming2 weeks agoGhost of Yotei review: A tale sharpened by vengeance
-
Laptops6 days agoThe Lenovo Yoga 7i Aura Edition gets it right after ten generations
-
Features2 weeks ago21-Day Battery, Pro Sports Tracking: HUAWEI WATCH GT 6 Series


