Hackers tell the story of the Twitter attack from the inside
&gt;&gt;... not the work of a nation-state or hacker group...<p>Quite concerning, a Twitter got really lucky that it was a mere scammer.<p>Every serious hacker group &amp; adversarial nation-state has just learned a huge amount about Twitter internals, and their weak security.<p>If Twitter fails to implement far more stringent controls (and yes those are a pain in the neck, expensive and inconvenient), they are 100% sure to be used for serious provocations.<p>At the very least, Admin access to blue check accounts should require simultaneous triple access codes from admins who don&#x27;t work together.<p>As a reference point for what real security looks like: when I worked at IBM, I met a guy who had figured out how four people in different offices could conspire to get $10MM transferred to an offshore acct, and reported it.  He was promoted up two levels for that insight (&amp;the loophole was fixed).<p>That would take 4 people conspiring, probably twice that after the fix.<p>Meanwhile, a single Twitter admin can post ANYTHING from accounts of people who can launch nuclear weapons.<p>Sure, it&#x27;s all fun and games until someone wants to play Global Thermonuclear War - and can.<p>I hope this gets security taken more seriously.