The Twitter Hacks Have to Stop – The Atlantic

Read: The staggering vulnerability of global elites

Internet communications platformssuch as Facebook, Twitter, and YouTubeare crucial in todays society. Theyre how we communicate with one another. Theyre how our elected leaders communicate with us. They are essential infrastructure. Yet they are run by for-profit companies with little government oversight. This is simply no longer sustainable. Twitter and companies like it are essential to our national dialogue, to our economy, and to our democracy. We need to start treating them that way, and that means both requiring them to do a better job on security and breaking them up.

In the Twitter case this week, the hackers tactics werent particularly sophisticated. We will almost certainly learn about security lapses at Twitter that enabled the hack, possibly including a SIM-swapping attack that targeted an employees cellular service provider, or maybe even a bribed insider. The FBI is investigating.

This kind of attack is known as a class break. Class breaks are endemic to computerized systems, and theyre not something that we as users can defend against with better personal security. It didnt matter whether individual accounts had a complicated and hard-to-remember password, or two-factor authentication. It didnt matter whether the accounts were normally accessed via a Mac or a PC. There was literally nothing any user could do to protect against it.

Class breaks are security vulnerabilities that break not just one system, but an entire class of systems. They might exploit a vulnerability in a particular operating system that allows an attacker to take remote control of every computer that runs on that systems software. Or a vulnerability in internet-enabled digital video recorders and webcams that allows an attacker to recruit those devices into a massive botnet. Or a single vulnerability in the Twitter network that allows an attacker to take over every account.

For Twitter users, this attack was a double whammy. Many people rely on Twitters authentication systems to know that someone who purports to be a certain celebrity, politician, or journalist is really that person. When those accounts were hijacked, trust in that system took a beating. And then, after the attack was discovered and Twitter temporarily shut down all verified accounts, the public lost a vital source of information.

Read: Why Twitter may be ruinous for the left

There are many security technologies companies like Twitter can implement to better protect themselves and their users; thats not the issue. The problem is economic, and fixing it requires doing two things. One is regulating these companies, and requiring them to spend more money on security. The second is reducing their monopoly power.

The security regulations for banks are complex and detailed. If a low-level banking employee were caught messing around with peoples accounts, or if she mistakenly gave her log-in credentials to someone else, the bank would be severely fined. Depending on the details of the incident, senior banking executives could be held personally liable. The threat of these actions helps keep our money safe. Yes, it costs banks money; sometimes it severely cuts into their profits. But the banks have no choice.

Go here to read the rest:

The Twitter Hacks Have to Stop - The Atlantic

Related Posts

Comments are closed.