Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Mudge Twitter whistleblower testimony [video] (senate.gov)
156 points by campuscodi on Sept 13, 2022 | hide | past | favorite | 232 comments


In response to Sen Grassley wrapping up questions about how Twitter executives wanted to address employee concerns about accepting ad money from Chinese companies, possibly with Chinese govt links (even while Twitter is banned in China):

28:25 [Mudge] "We're already in bed, it would be problematic if we lost that revenue stream, so figure out a way to make people comfortable with it."

That isn't really surprising, but it's still bad.

It's also worrying that some Americans complain about "big [US] government" to justify the very limited size and power of the FTC to regulate US big tech, while somehow overlooking the threat from the big Chinese government, its awful human rights record, and its track record of working to gain access into US companies.

It's really easy to criticize these senators for not being tech ignorant, but this is the only govt we have, and it's the only one that can empower the FTC to do more.


He also testifies that the CTO, Parag, suggested that Russia be allowed to moderate the content on the platform because they are a “democratic country”. Really, really, really terrible optics.

It seems like Parag was a terrible exec, is losing his job, and the market knows it. Twitter’s stock is the only social media platform whose stock is up today.


Democratic /= free


Democratic =/= democratic


They aren't Democratic. Putin is basically a monarch at this point. Even the Duma is gutted.


"Basically" means in your opinion. Even north korea is democratic. The US picking between two parties is not so democratic either. Putin maybe a quasi dictator but their government isn't just one guy, are all the ministers in their legislature dictators too? Even with dprk of course they all vote for kim but what about other elections they have?

My question is who cares? They are a sovreign nation and the form of government they have is an internal matter. Their leaders and government are recognized by the world (even America) as legitimate rulers of their country


This is literally a talking point and argument that Twitter's executive management made, according to Mudge's testimony.

In Sen. Klobuchar's questioning, Mudge quotes a conversation he'd had with Parag Agrawal regarding a request by Vladimir Putin to censor and surveil Russian Twitter users: "we don't really have the ability and tools to do things correctly, this is a lot of work, it's not really driving our main executive incentive goals, is there a way that we can simply punt? And since they have elections, doesn't this make them a democracy?"

That specific Q&A exchange begins at 1:00:15.

The immediate prior exchange with Sen. See is also telling. "I'm reminded of one conversation with an executive, when I said, 'I am confident we have a foreign agent', and their response was 'Well, since we already have one, what does it matter if we have more? Let's keep growing the office.'"

For those who haven't listened to the testimony, I strongly recommend doing so --- it's informative, level-headed, and reasonably fast-paced.


I didn't watch the whole thing but I agree with Twitter's CEOs comments but more importantly why is this an issue Twitter is deciding? If the government of Russia is not recognized by the US or if Twitter should not obey certain Russian laws/orders or cease business there then the very functional and legitimate (sarcasm) democratically elected government of the US can declare sanctions to that effect. Whether you agree with putin or not Russia is in a state of war and you are expecting twitter to not censor things?? Do you think the US government does not do the same thing or did everyone forget Snowden's leaks? So much half-baked hypocrisy around this whole sentiment.


In the context of multiple other statements by Mudge, the pattern is one of Twitter repeatedly expressing indifference to concerns, consequences, and summoning of political will and corporate capital to address any such concerns.

Your focus seems preternaturally narrow and short. Much as that of Twitter's executive staff.


I have desire to defend twitter exec's track record. Of course what I said is narrow because the subject is specific in this thread. I don't get how people like you insult your own intelligence by insinuating that for twitter's CEO to be correct on one matter means everything they do is acceptable.

Is this an age and maturity thing? I can see how someone under early twenties can be this immature where either you hate twitter execs or you are completely in love with them. Be rational and reasonable, if you would like to disagree or counter any of my points feel free but I have no interest in paricipating in a "cancel" fight.


I'm flattered by your presumption. It, as well as numerous previous assessments of yours, seem quite poorly formed based on my own experience and knowledge.

I generally try to run adversarial assessment even on my own most cherished views or takes, as well as charitable interpretation of those of othsers. Both can lead to interesting places, much more so than the opposite strategies. More practices I recommend.


We care because having some unhinged old man with no checks on his power is bad.

As you may be aware, said senile old man just invaded a neighboring country. The same issue we have with DPRK.

Last time we did the "mind our own business" the jerk of the moment took most of Europe and killed several million people. Putin is doing his best to exterminate the Ukrainians now.


But you don't live in thise countries and they are sovreign, you do not get to project your ways on others as if they are superior. A bunch of uneducated ignorant people voting for the loudest asshole isn't a perfect or better way either. America and the wesr enjoy a nice economy and military so things are ok there are many countries where democracies devolve into civil wars and dictatorships or worse because people aren't happy and the loudest scariest dude wins in a democracy. The whole point of sovreignity is that the people of that countey self-determine without outside influence. Now, if your country recognizes some component of a foreign state as the legitimate ruler then by all means but both dprk and russia are ruled by american recognized rulers so by what law or reason outside of social media rage do you justify your outrage?

Regardless of the ruler or government invading another country means more countries that have an interest in the invaded country can get involved because sovreignity was violates. In case of hitler the moment he invaded another country it was everyone's concern just like putin but before that it was only the german people who had a say in who leads them. If I remember right even hitler was voted in and his socialist party won election because they were loud and scary.

Twitter is a company that operates under US laws not under the laws of random public outrage. If you want your government to sanction doing business in russia or declare war on it by all means call your rep or discuss that until then it is perfectly acceptable for twitter to operate in Russia which means obeying their laws.

By your logic, what if a UK company refuses to block illegal content in the US. They are both democracies so the UK co should obey laws? But if the US became a dictatorship then it should break laws? What is this nonsense, you expect companies to break laws because you don't like the government of a foreign country?


> It's also worrying that some Americans complain about "big [US] government" to justify the very limited size and power of the FTC to regulate US big tech, while somehow overlooking the threat from the big Chinese government, its awful human rights record, and its track record of working to gain access into US companies.

How is a bigger/more powerful FTC an antidote to the bad behavior of the Chinese government, or a defense against them?


I'm not sure. Threats from the Chinese govt include US national security, and the privacy and human rights of all Twitter users. FTC itself may not be the regulatory body to address those, but don't you think it is nonetheless a legitimate interest of the US govt to regulate, if Twitter is a US company?

The hearing also shed light on how European regulation (France in particular, I think), was recognized within Twitter as something to take seriously, as opposed to how US regulation would result in, at worst, one-time fines.

Another revelation https://news.ycombinator.com/item?id=32566507 is that India had an agent working within Twitter. I don't know if that's a Dept of Labor regulation violation, but my general concern is that if you celebrate limits in US govt regulation, you may be celebrating having low vision of the harmful activities of foreign governments.


> India had an agent working within Twitter

Without proof, this is pure propaganda. India is a sovereign democracy with its own laws and regulations. India required all media platforms acting as intermediaries to have three permanent job roles with proper governance structure – a Chief Compliance Officer, a Resident Grievance Officer and a Nodal Contact Person – these job roles are expected to have specific responsibilities w.r.t dealing with consumer complaints. You can read the official government brief here – https://static.pib.gov.in/WriteReadData/specificdocs/documen...

Twitter would have interviewed and hired competent people of their choice into these roles. If any motivated government/corporate wants to infiltrate twitter, I doubt they would go about it by engaging in high-profile court battles and democratic parliamentary processes to do it.


The US government is also harmful outside of the US. Your comments here and above seem to have a tone of "US good, China bad". To be clear, this and the general issue of regulating American online spaces isn't about good vs evil, but about furthering one government's agenda or another's.


Not that I necessarily believe in this, but you could imagine e.g. FTC or FCC requiring content-neutrality. In that world, China's asks for censorship go up against US's asks for no censorship. In this current world, China's asks for censorship go up against... employees' personal appetite for losing money (and potentially their jobs) in exchange for a non-China dominated information space?


He is trying to bring it home to them and getting them excited about hearing that China, Russia, and anybody else knows where they are at all times, what they follow and so on. If I had to choose a government to surveil and manipulate me, it would not be my own US government and corporations. Of course I don't let any of them do it.


Maybe they could enforce rules notifying users where their ads were coming from?


I still don't understand the attack-vector how buying targeted advertisements can be used to unmask particular individuals (the example in mudge's testimony: democracy-desiring Chinese citizens posting on twitter illegally).

can someone explain this to me?

if the users are accessing twitter + any ad clicks through a GFW-bypassing VPN, and china can target an advertisement to a single user, then they can figure out that that user uses a VPN if they click on the advertisement? how do they unmask the VPN IP address? my understanding is that VPN providers (should! i hope!) internally transit the traffic so that the exit node isn't the same as the IP address the GFW would see users connect to, so i'm not sure how they could correlate that traffic to a "real" IP/identity.


A possible scenario is: Chinese govt creates a honeypot site talking about e.g. Xinjiang, put Twitter ads pointing to it. Honeypot site has a tracking pixel from something like nothing-to-see-here.cn that sets a cookie on the user's browser (something like "visited=honeypot-site-about-xinjiang"). User disconnects from VPN, browses "normal" Chinese sites from their home IP, another Chinese site has another tracking pixel from nothing-to-see-here.cn, the user's browser connects to that site and sends the above cookie and gives away the user's home IP.

Yeah it's poor opsec, but quite possible. The cookie can even store what pages and how long the user spent on the honeypot site. Or the cookie can just be an identifier, and the honeypot site can send which pages were visited (and at what time) to the nothing-to-see-here.cn, which builds a visitor's profile for the reeducation police.


Thanks, I had dis-counted 3rd party cookies for some reason. Luckily the tide here is changing with firefox ETP, Safari cookie isolation, etc, but you're right that a lot of the world still has cross-domain cookies to contend with. Yikes!


It seems not a twitter specific problem, every company selling click ads (=every tech and media company) has same problem.

Not sure congress or FTC can do much. Ban click ads? Ban Chinese advertiser? Ban links to Chinese-owned websites? Ban BGP to China?


If twitter implemented the following, it would take much of the steam out of this case: 1. Restricted/conditional/temporary access to production systems with extensive centralised audit logging.

2. Handled phone# and geo-location data as sensitive personally identifiable information (SPII) – kept this data in one centralized place (a micro service with well-defined access controlled apis) and prevented its proliferation into other systems. And promptly deleted it when users deleted their accounts.

To implement these two things, it wouldn't cost anywhere near $150M. And likely it wouldn't impact the velocity of their revenue features too much either (impact would be something like slow-down for quarter).

Sad thing is senators are picking on only some companies and not others. Instead, they should be making a comprehensive data privacy act that applies to all companies – like credit card companies, shopping/loyalty-card companies, all the data brokers etc.


They're not picking on one company arbitrarily. There was a specific whistleblower complaint sent to the SEC, about Twitter. Twitter is a large company, and the SEC has to take notice by law.

Twitter sticks up as it is such a large company with so many customers, the complaint is authoritative, and there was an agreement in 2011 with the government which the complaint argues has been broken by Twitter. That agreement implied that Twitter would do your 1. and 2., starting 11 years ago, and they seem to have not.


> SEC has to take notice by law.

Senate =/= SEC


Congress oversees the SEC.


Yet congress doesn't have hearings on every SEC investigation.

GPs claim was congress would better spend its time writing industry-wide laws instead of this dog-and-pony show (my words). Parent refutation was that the SEC is obligated to look into every allegation - my observation was that congress doesn't have to micromanage SEC investigations. I support gp - congress should be legislating or involving the SEC officials to see where the gaps in the law are, rather than seeking soundbites.


Midge's point seems to be, "Twitter refused to spend the money, or change their processes, necessary to guarantee data authority, access and visibility."

What till these Senators learn about basically every other business in America.


On another thread that didn't receive the same attention as this one we learn the Twitter has Chinese and Indian government agents amongst their employees.

https://news.ycombinator.com/item?id=32825670


And that execs simply don't care:

<https://news.ycombinator.com/item?id=32832796>


mudge just testified in response to a Senator's question that Twitter does not have a test env


To be fair. Many companies staging is unusable with testing in prod.


If I recall correctly, Uber literally did an entire post series about how they do all testing in production using feature flags and request routing, because it was "technically infeasible" at their scale to do anything differently.


Uber really isn't a great company to aspire to when it comes to tech. They have a similar mentality to Facebook of: "Spend more time getting it done than planning it out".


What does that mean though?

Twitter must have test environments for developers and automatic tests.

Do they just not have a full staging environment? That would be understandable. It's impossible to create a production-like test environment for a product like Twitter. You're better off just doing canary releases or feature flags with slow rollouts.


> What does that mean though?

"Every company has a test environment. Some companies are disciplined enough to have a production environment separate from the test environment."


Everyone tests in prod. Some also test before prod.


> It's impossible to create a production-like test environment for a product like Twitter.

What makes you think that?

I mean, I know it costs money and needs people who understand how the product works and how customers behave - but why on earth would it be impossible?


It's impossible because you need to simulate the volume and variety of Twitter usage. Especially when you consider that production Twitter is thousands of servers, you're just not going to be able to create a mirror of production.

For something with many millions of users, it makes more sense to do canary releases to internal users, then to a few thousand, and then scale up from there.


You don’t need one staging environment simulating the entire platform. You can have small staging environments that run some parts of the product, for example the latest version of the advertiser dashboard or the messaging inbox.

Sure, you won’t be simulating a whole class of problems that can arise at scale, but you can still test the more localized features in a safe environment.


Yes, I understand that. That's why it's unclear what it means that Twitter has "no test environment". That could mean a lot of things, some catastrophic and some not.


It's pretty simple. They have no testing environment. They yeet shit in prod under feature flags (I assume), and hope for the best.


If you can accept, index and store a given volume of tweets, why should it be impossibly difficult to generate that same volume? I would imagine it would be a lot easier, in fact.

And if can't afford a 1:1 scale replica, build a 1/10th scale replica and have your senior engineers use their expertise to ensure it's representative enough for test purposes.


It's a much harder target to generate truly representative load. Sure, you could make millions of tweets very fast, but is that actually representing what the production service is dealing with?

Unstable connections. Traffic spikes that can be highly localized or nearly system wide. System maintenance, planned and reactive. Poorly behaved clients. Malicious traffic. Many more similar factors...and yes, each of these you could throw engineers at them and get solutions eventually. You might also end up with a testing engineering team that dwarfs the product engineering team.

Also, Twitter doesn't make money. $5B revenue vs $5.5B opex in 2021. They can't really afford to run the actual system, much less a fully representative one. Even a 1/10th replica, which would be unable to find some classes of problems no matter how many engineers you throw at, would further break the bank. As would the engineering staff to support it.


Twitter can't afford a 1:1 replica for sure, and it would be meaningless without globally distributed production load anyway.

A 1:10 replica is fine, but also astronomically expensive. What's better about it than 1:100? Or 1:10000?

Once you give up on 1:1 (which is reasonable), you're either testing in production or not really testing at all. You'll have many lines of code that will only apply to the 1:1 scale.


>What makes you think that?

For large scale sites you need a parallel copy of the internet which doesn't exist. For example, we once caused a production incident (for us and other people) by simulating a major business event to our test stack and saturated links between <Cloud Provider> and <CDN Provider>. For future tests that was always an edge case that we couldn't fully test. Rinse and repeat those kinds of problems with every vender, service, and traffic source.


The amount of companies that have a REAL test environment is far smaller than the ones with a nominal test environment as well.


This is clearly perjury, you can find it at www.twitter.com

/s


From the video, funny bit at about 01:01:00:

I'm reminded of one conversation with an executive, when I said I am confident we have a foreign agent, and their response was "well, since we already have one, what does it matter if we have more, let's keep growing the office"


i forgot what side of this issue i'm on.


The idea of being on one side or the other of issues is what leads to polarization that prevents reasonable discourse.

Education should give an adult the set of tools to navigate a complex situation and achieve a balanced point of view


Do you want a openly malicious company or a inept/secretly malicious regulatory body


[flagged]


How about we focus on zero people in poverty?

You know, focus on raising people up instead of focusing on tearing people down.

A growth mindset is more productive than a scarcity, zero sum mindset.


Money=power, including political power. Politically active billionaires violate the one-man-one-vote principle, especially after the supreme court ruled that money=speech in Citizen United.


Is this going to be the "interstate commerce clause" for the left, by which absolute interference is justified because everything, even non-commercial private actions, are interstate at some point, or displace something which might have been interstate. Because nobody is ever exactly "equal" to someone else, in ability, resources, etc, nobody but the most victimized person can actually vote.

By this logic any difference in equity absolutely demolishes the concept of democracy thus before the people can be trusted with any input they must all be "equalized" and placed into an economic system that keeps them that way. And before then, any inequality or privilege discovered or invented can be used to entirely negate a person's opinion.

That's the only way you can have it. Either billionaires have the same rights we have, and more resources, or we've all got a boot on our necks that takes away anyone's freedoms whenever they become inconvenient for the state.


If the only options are absolute tyranny or oligarchy it shows a lack of imagination. We can have any form of government we want if we let go of our indoctrinations.


If people are only allowed to have opinions when they meet your equity and other purity standards that's a tyranny.

And yeah, there are only two choices, a) require purity checks for voters and scale their vote arbitrarily by the standards of the current rulers, or b) give everyone an equal vote.


You're defending billionaires who don't give a crap about you except as someone to exploit. This is called "being complicit in your own oppression."


Because inflation. If we're all rich, no one is rich.


That's the dumbest argument ever.

If we all have food-, housing-, and medical-security, then we all are doing great.


Wrong. Almost everyone in the world is far richer than everyone in the world 1000 years ago.


the only reasonable response in this thread... then again I stopped reading it after I got to the "Elon's going to get away with it" part


It's just jaw dropping how they thought nothing of externalizing the costs of every possible problem or technical debt in order to keep chasing the next bonus.


We keep providing the incentives and being surprised.


This is the part that I think leaves Twitter severely exposed, at least in the EU with GDPR (from my limited, basic understanding of GDPR). Twitter does not delete data when requested by users to delete their account.

https://youtu.be/A0A-uOhMU1Y?t=7219


We spent a lot of time on this when I was at Segment. It's incredibly hard for an evented system to go back through archives and delete every data from a user, but it's possible.

It should be much easier for Twitter to do this, so there are no user merges (anonymous user becomes identified and merges), but I'm not sure about their data storage.

This should have been done years ago.


After an hour of this hearing, the smell reminds me of Enron.


Why shouldn't each politician set up her own Mastodon server moderated by her staffers? Then they would have complete control of data that they don't publish to the world. They also can't be cancelled, shadow banned, or censored by any company or government.


Testimony actually starts at roughly 13:00 with an opening statement by Durbin.


sounds like security issues of a startup that quickly scaled and never dealt with the technical debt rather than anything malicious.


At some point, not doing it - despite billions in revenue, and massive numbers of engineers - is indistinguishable from active maliciousness.


Feeling like Twitter is just about to ruin the low-regulation party for everybody. Could be wrong though. Not much happened after the Experian breach after all.


> Feeling like Twitter is just about to ruin the low-regulation party for everybody.

Alternative take: Lawmakers are finally waking up and realizing how much these platforms can affect our daily lives, mostly because most common folk are signed up and use these platforms, and are starting to figure out how we can limit the damage for when things go wrong.


It's easy for us to be sanguine about knocking down the ladder after most of us have already scurried our ways to the top. Think of existing regulation (banks, environment, agriculture, pharma... you name it). Is it really there to protect the little guy? Or, is it a revolving-door between the regulator and the regulated, where megacorps can use public funds & resources to defend their own private interests?


You can look at see what a unregulated us banking system looks like, it's alive and well right now. Crypto is a hot mess of scams and fraud. It wasn't far in the past that rivers caught on fire, either. Regulation isn't perfect but neither is megacorps having free reign to conduct psychological tests on the public at large to see how much stupid shit they can manipulate them into thinking as their whole business model.


Company dumps creosote into the ground for 40+ years. Somebody blows the whistle, EPA prosecutes the whistleblower. Company gets a slap-on-the-wrist fine, while the whistleblower gets house arrest.

https://theintercept.com/2016/11/25/did-the-epa-prosecute-an...

Administrative law is broken. Doubling-down on it isn't going to solve the problem.


It's obviously a mix of both, and it's up to us to make the system tilt more towards the former.


Through venal politicians, and--judging by the typical "man on the street" segment--voters who are barely literate?


Well not everyone is illiterate, so you're trying to weave some rhetorical trick here.

Anyway, the alternative of me being forced to huff your SUV exhaust and listen to your 6am leafblower and get early dementia is not a world I want to be a part of.


You know 100 years ago, people were a hell of a lot less likely to make a racket at 6am in a residential area.

Any reflection on why that was?


Mechanically they couldn't unless they tried really hard to intentionally do so. Now it's just a default given cars, motorbikes, leafblowers, lawnmowers. Late capitalism has been effective at putting the costs onto other people.

Don't get me wrong, such inventions are net good (cars and motorbikes yes, not so much leafblowers), but they need to be regulated and taxed in a way that manages the additional cost burden that others are forced to pay.


It's because people weren't afraid of punching each other in the head as one or all potential steps of conflict resolution.

Correct?, no. Irreplaceable incentive to not be a dick? Seemingly.


Not a trick... an observation. Spengler put it better than I ever could in "The Decline of the West":

If by "democracy" we mean the form which the Third Estate as such wishes to impart to public life as a whole, it must be concluded that democracy and plutocracy are the same thing under the two aspects of wish and actuality, theory and practice, knowing and doing. It is the tragic comedy of the world‑improvers' and freedom‑teachers' desperate fight against money that they are ipso facto assisting money to be effective. Respect for the big number—expressed in the principles of equality for all, natural rights, and universal suffrage—is just as much a class‑ideal of the unclassed as freedom of public opinion (and more particularly freedom of the press) is so. These are ideals, but in actuality the freedom of public opinion involves the preparation of public opinion, which costs money; and the freedom of the press brings with it the question of possession of the press, which again is a matter of money; and with the franchise comes electioneering, in which he who pays the piper calls the tune. The representatives of the ideas look at one side only, while the representatives of money operate with the other. The concepts of Liberalism and Socialism are set in effective motion only by money. … the Jacobins had destroyed the old obligations of the blood and so had emancipated money; now it stepped forward as lord of the land. There is no proletarian, not even a Communist movement, that has not operated in the interests of money, in the directions indicated by money, and for the time being permitted by money—and that without the idealists among its leaders having the slightest suspicion of the fact. The great movement which makes use of the catchwords of Marx has not delivered the entrepreneur into the power of the worker, but both into that of the Bourse.


Not sure how an excerpt from an early 1900's German book debating the merits of unbridled democracy has anything to do with today's literacy of the Third Estate.


Read it again. Money money money. Whether it's Spengler or Plato, Weimar or Weimerica, people haven't changed. The lesson still applies.


Yes, precisely. Churchill was right in 1947 and he's still right today. Democracy is the worst form of government except for all the other ones.


That doesn't really figure into it. My point is that administrative law has failed. It invests too much power into too few people with nowhere near enough transparency, and the things it seeks to address are so far above the "the people's" pay-grade that it presents an intractable situation with respect to assessing and maintaining performance.

I think a better solution to the problems Spengler pointed out (see below) would be good old-fashioned torts. We have plenty of under-employed ambulance chasers. If only a few of them manage their way to the middle of the big-tech tootsie-roll pop, that would be one hell of a message, and far more effective at improving practices than the occasional $150M slap on the wrist.

PS> Churchill was a fat drunk who went into the war against methed-out nazis with an empire upon which the sun never set, and came out of it only by the skin of his teeth despite plenty of help. The Greeks & Romans will still be quoted long after he has (rightfully, mercifully) been forgotten.


Torts (+ Coase Theorem) is the ancapistan catch-all solution but it doesn't work in practice because the frictions (e.g legal fees, time, access) prevent small everyday externalities from being reasonably addressable.

I've seen a small time civil case pertaining to a dispute totalling sub-$50k drag out for 10 years and cost more than the damages. It doesn't work empirically for everyday disputes because it puts the onus and burden onto the small time victim, which is net unprofitable given all the frictions, leading to persistence of externalities.

You also don't solve the root problem of corruption by moving to a torts only system. Torts as a solution would rely on property laws that are themselves free of moneyed corruption. It also would rely on a judiciary that can't be bought. So it's shifting the same problem we have now (corporatocracy and entrenched interests) to a stunted and less competent system of enforcement.

  "My point is that administrative law has failed."
It hasn't failed. For example, look at leaded petrol, nitrogen oxides, smoking and the ozone layer. It's just highly imperfect and needs to be improved.


> the frictions (e.g legal fees, time, access) prevent small everyday externalities from being reasonably addressable

Small infractions by small operators, perhaps so. Small infractions by big operators, hell no. Thanks to class action, civil suits are perpetual hearburn & lost sleep for them. There's always a batch of aggressive trial lawyers ready to take the case on contingency, and even if the original plaintiff's damages are very small, it still adds up to big money when you include payouts to the rest of the class, & of course, punitive damages--which can exceed the damages by orders of magnitude.

> It also would rely on a judiciary that can't be bought

Buying off judges and juries is a costlier & dangerously more sensitive task than promising a comfy board position to an agency head over drinks and a meal at a restaurant in DC.

> It hasn't failed.

The microplastics in our bloodstreams and the glyphosate in our cheerios say otherwise.


> Small infractions by big operators, hell no

Hell yes.

The large majority of infractions, perpetrated by both small and large companies, are infeasible to address via courts, for a multitude of reasons. Either the frictions exceed the benefit to a class action, or the cost is too diffuse.

Consider global warming. In a torts system, how can I hold an industrial farm or a car manufacturer to account for the role they're playing? You can't, because the cost is too diffuse.

Consider social media. In a torts system, how can I hold a social media company to account for the role they play in an uptick of stochastic terrorism? You can't, because the cost is too diffuse and the burden of proof makes it difficult to draw causal links in single cases.

Consider fast food. In a torts system, how can you address the downstream negative externalities of obesity on society by mass producing unhealthy, unhappy people, which has downstream impacts on the polity, health system, and so on? You can't.

Centralized regulation is the only pragmatic solution to certain problems.

Besides, even if all large-scale infractions were addressable (they're not, as the above examples show), it's still a massive hole in your system to simply allow all small-scale infractions to persist.

> The microplastics in our bloodstreams and the glyphosate in our cheerios say otherwise.

This is the binary bias. Failure isn't a binary switch. We've had a degree of good success (leaded petrol, ozone layer) and a degree of failure (microplastics, carbon pollution).

You also unjustifiably blame all failures on the administrative system, which conveniently leaves out that we actually do also have a torts system in place now. Our system is mixed. So, both your hated system and your desired system are simultaneously failing, but you post hoc attribute all failures to the former.

> Buying off judges and juries is a costlier & dangerously more sensitive

Even if I accepted that bribing a judge is riskier than bribing an agency head, you still have no good solution to buying off lawmakers under a torts-only system, or to costs imposed by operators that aren't pragmatically addressable in a court.


This started shifting in like 1990, with the crazy self-inflicted bitchvictimization of McDonalds's acting so pathetic because they scalded a woman causing 3rd degree burns. Ended up killing her because she couldnd't stay interested in life after all the humiliation from every angle. Died in part of her injuries. Poor little McDonalds' guilty as shit gets its poor account SUED (they always like ejaculated that word, way too much emphasis, highest accusativity) a 78 old lady who did literally nothing wrong. Corporate America also started spreading rumors of lawsuits like a man shooting a burglar and he falls down the stairs, sues for bad stairs. In Latin America! There were TV shows about "stupid lawsuits"! And of course highly interested in juries getting losing money by being juries, and resisting the courts catch up with inflation. Yeah.


Regulation is a double edged sword. At least in some industries much of it is to protect the little guy, but it’s also a whole new jobs program. Just like most “guest speakers” invited to a company. They’re a cottage industry and they give the Corp some cred cover.


I would bet good money that whatever form "limit the damage" takes will be indistinguishable from "get their cut of this power to influence the masses" in practice. These are federal politicians, not the board of a nonprofit that runs a summer camp for poor kids. While some of them may have noble goals on specific issues here and there the sum of their actions as a group basically always winds up being to increase their own power.


The intelligence agencies are well aware and like the current situation of a handful of giant data pots from which to pull. Some lawmakers are well aware as well. Who knows which of these lawmakers is just putting on a show and acting surprised.


The problem is the direction they will tend to head. Politicians see a centralized power center and think "we need to control that", and so will just create laws aimed at reforming the centralized service rather than breaking it up.

While what we really need is API access, data portability, privacy ala GDPR, and other laws that will foster competition between services, to straight up end their current playbook of creating mini-monopolies via Metcalfe's law. The standard tech-literate workflow to interact with Twitter should involve a third party client that abstracts over all such publishing services, and not defaulting to Twitter's proprietary web/mobile apps.


What damage?


In Twitter's case, for starters, the time they heavily incentivized sharing phone numbers with them and then used that information to accidentally build an open phone number harvester.

https://www.eff.org/deeplinks/2020/02/how-twitters-default-s...


I think Twitter(and other social media) genuinely makes people's mental health worse. We have coined terms like "doomscrolling" and have studies to evidence that Instagram has a negative effect on the psychological wellbeing of teenage girls. I think that this can arguably fall into the category of "damage".


And even further.. what wrong?


good! Get every single publicly funded institution off of these awful services.

Public comms can go on publicly funded infrastructure, using open protocols like the W3C's ActivityPub (or just RSS if we want to keep things adequate).

Twitter is absolutely not immune from being a member of this list:

https://en.wikipedia.org/wiki/List_of_defunct_social_network...


Society is becoming a parody if itself. I understand that there are consequences of Mudge's information but, from a purely naive standpoint, having congress get involved over bots on a social network where people share 280 character messages is fucking bizarre.


https://twitter.com/donie/status/1569695781631688704

> "It's not far fetched to say an employee inside the company could take over the accounts of all the Senators in this room," @dotMudge with a warning here on Captiol Hill. #Twitter

perhaps a valid reason?


It's not far fetched to say a Senator's pilot could drop their airplane into the Delaware.

It's not far fetched to say a the line cook at a Senator's restaurant could poison their food.

It's not far fetched to say that a Senator's financial advisor could run off with their money.

It's not far fetched to say the teachers who instruct a Senator's kids could fill their heads with lies.

Humans have all sorts of ways to wreak destruction on one another but it mostly doesn't happen, and when it does, we have many, many systems in place to detect and punish. And we tend to scale the weight of these systems to the size of the perceived threat - that's why doctors and pilots are more burdened than bankers who are more burdened than cooks.

How likely is someone to actually take over these accounts (what's to gain)? How much damage would it do (not too much, people get hacked on Twitter all the time and that's baked in to the credulity of each tweet)? How likely is that employee to get caught (high), and how much punishment would they face (huge fines, possible jail time, unemployable in many industries for the rest of their lives).

Technical safeguards are not our only safeguards, especially for insider threats, which long predate the Internet. External hackers do dramatically change the calculus here (unlikely to get caught or punished) but that's not what's being alleged.


Technical safeguards against insider threats do not actually protect you from insider threats - the fact that your behavior is logged and you will get fired and sued into oblivion works very well.

Technical safeguards against insider threats protect your insiders. They give your insiders cover in situations where they might be coerced to do things.

When I was at G, I likely could have read some data from cloud customers with some social engineering and the permissions I had. It would have taken hours to get the first byte, and I would have been fired within 10 minutes if I did without a good reason. The fact that it would have taken hours and some social engineering would let me plausibly tell the police (or the Chinese government or the mob or anyone else), "no, I don't have access to that data." Twitter's engineers didn't have that cover.


I like your take on it providing cover for insiders against coercion. I hadn't considered that aspect before.

I'd slightly disagree that technical safeguards don't provide any protection against insider attacks. But yes, the deterrent effect of having a high chance of being caught is very effective.


Weren't those controls added after some Googler stalked teenagers[1] via their chats for months? That event generated bad publicity in the press, and some years later, the same thing happened at Uber, with the euphemism "LoveOPS" being used, IIRC.

High-growth companies prefer to prioritize features and kick the access control can down the lane until they absolutely have to. Without looking at revenue and employee numbers, I suspect 2010 Google and 2016-ish Uber are comparable to current Twitter, IMO.

Edit: the Googler story is far worse that I remembered: he had unfettered access to underaged victims' mailboxes, chat logs, contacts and Voice accounts and used that information to taunt one victim, and unblocked himself from another victim who had blocked him on Gchat - Google only became aware of it when it was reported externally.

1. https://www.businessinsider.com/google-engineer-stalked-teen...


That incident inspired the alerts and the permissions checks. There were a few other incidents (not heinously bad if they were public, but potentially bad for G) that made them go all the way.


Not to defend Twitter because their lack of oversight and security controls around who can access what sounds completely inadequate and borderline criminal... but comparing any company to Google is unfair. Very, very few companies have the resources and experience that Google has dealing with these types of threats.


> It is not far fetched to say a Senator's pilot could drop their airplane into the Delaware.

Aviation has the state imposing licensing requirements, the state certifying which vehicles can take passengers, the state imposing technical requirements like transponders, the state investigating accidents, the state telling pilots when they can take off and land, the state searching passengers' luggage and sending them shuffling through scanners without their shoes, the state establishing no-fly lists, and the state wading into the industry and choosing winners and losers whenever it's geopolically convenient.

If you tell the senate you'd like the tech industry to be regulated no more heavily than the aviation industry we'd be in for a lot more regulation.


> [...] we tend to scale the weight of these systems to the size of the perceived threat - that's why doctors and pilots are more burdened than bankers who are more burdened than cooks


> How likely is someone to actually take over these accounts? How much damage would it do?

We kind of have answers to these questions already:

- A rogue employee/contractor deactivated Trump's account back in 2017 https://www.theguardian.com/technology/2017/nov/03/experts-w...

- "130 high-profile Twitter accounts [including Apple, Barack Obama, Joe Biden, and Bill Gates] were compromised by outside parties to promote a bitcoin scam" using internal Twitter admin tools. https://en.wikipedia.org/wiki/2020_Twitter_account_hijacking

The impact of both of these was basically zero.


There's also the fact that entire forums exist around selling accounts (or access to accounts). One such site, swapd.co, has a pinned post for Twitter "username claims" and "account recovery", among other things. This site has sold admin panel access that has been responsible for a lot of crypto scams [0] in the past.

Nobody's account is safe. Doesn't matter what 2FA methods you use, whether you're verified or not, how many followers you have, all it takes is a couple grand for someone else to take it over.

> The impact of both of these was basically zero.

Per the Wikipedia article you linked, the attackers got $110k in Bitcoin, which is not "basically zero" (even if the price of BTC has fallen since then).

[0]: https://www.web3isgoinggreat.com/?id=researcher-zachxbt-alle...


If taking over more than 100, extremely high profile accounts with millions upon millions of followers only nets you 100k and puts massive visibility on you, it's basically zero.


And yet it's still happening.


Is it true that the impact of these incidents was zero? How much money did the bitcoin scam guys get?


They probably have a way to take over accounts to check bug reports.

We've had that at places I've worked. Where you'd be able to impersonate a user in order to see what was going on with their specific set of user data to corroborate their report and find a fix.

The question is... are the permissions locked down, is access audited and immutable, etc I think.


Yep, there's lots of software with "su for X" capabilities; it's much better than the normal method which is "ok tell me your password and I'll login as you and see what's up".


Well Duh! Of course a twitter employee could take over any account. Hopefully they have some internal safeguards in place but there are probably hundreds of people there that could take over an account if they wanted to, just as the owners of news.ycombinator.com could take over any account here.

You don't really own a Twitter (or Facebook, or ycombinator) account. Those services have an account on you. You update their account on you when you use their service to post (and they keep other information useful to their business on your account that you have no access to).

This is just the way social media works.


> Well Duh! Of course a twitter employee could take over any account.

Most companies the size of Twitter would have a lot more controls than that on random employees' write access to production.

If I want to assume a user's identity in my employer's production system I have to fill out a form justifying it, get my manager's approval for each account accessed, and my activity is subject to logging.



Remember when an employee took down Trumps account? https://news.yahoo.com/rogue-twitter-employee-took-down-1419...

First it was "inadvertently deactivated due to human error by a Twitter employee." Then "Through our investigation we have learned that this was done by a Twitter customer support employee who did this on the employee’s last day."

It was kinda funny but you would expect that they would learn and improve from it.

Edit: Thank you siblings for showing that it has continued to happen. Obviously not lesson not learnt.


So it can still be done, isn't that the original complaint?


The point is that politicians shouldn’t be posting their important messages on Twitter, but an official government channel. This was discussed in 2016


Was there an expectation of the opposite being true? You don't own a social media account. See all the people banned, shadowbanned, or who have had their @ handle or blue checkmarks taken from them. I thought it was accepted that the service provider can do whatever they want with a given account.


> perhaps a valid reason?

That's why I specifically said "from a naive standpoint." I'm not arguing against valid reasons, I'm pointing out how absurd the situation is.

From my comment:

> I understand that there are consequences of Mudge's information


It's not about "bots on a social network", it's about misuse of peoples data in one of the worlds biggest social network.

Just as I tuned in, Mudge was talking about how Twitter repeatedly mismanaged peoples emails, citing that if they didn't sell emails, their competitors would get an unfair advantage.


Are you even watching this? They're talking about foreign agents running amok on the inside (even after Twitter being notified by the FBI), lack of logging, mishandling of email addresses, etc, etc. Bots or no bots, all of that stuff is kind of a big deal.


Given Twitter's centrality in the flow of information, it would be unreasonable to not expect foreign agents (along with extremists of every flavor, financial fraud artists, and who knows what else) to try to get inside.

The same is true of Facebook and Google.


Foreign agents run amok before an FBI warning: sure, shit happens.

Foreign agents still running amok after an FBI warning: WTF?!


I'm not sure SoftBank/KSA is super concerned about "foreign agents" inside their company.


apparently so


[flagged]


Mudge isn't a politician, has an excellent reputation, and would probably be much happier if Twitter just had its shit together in the first place so he doesn't have to kick-off a whistlestop tour on the subpoena train. First stop: getting grilled for 2h40m by geriatric attorneys & faded beauty queens. In other words, I see no reason for him to lie about any of this.


> I see no reason for him to lie about any of this

I don't know the guy or his circumstances,but as someone who's been aggrieved by a former employer/manager, I can think of at least one reason he may want to stir up a raucous.

It doesn't sound like he's lying, but nothing he's said sounds particularly egregious - relative to practices at other American tech companies and startups. The worst he could be accused of may be exaggeration or having standards that far exceed common practice.


> I don't know the guy or his circumstances

Then I'm sorry, but your comment is malinformed.


Based on what, your feelings? This is one of the most accurate authentic comments here.


My feelings are:

1) this being common practice doesn't make it right

2) knowing someone's background, and deeply studying their historical writings, can provide a lot of color when evaluating someone's ethics, or any bias in their actions.


> 1) this being common practice doesn't make it right

But that just makes Twitter normal - that doesn't deserve congressional hearings, or whistleblowing IMO. Doctor's only briefly talk to patients before moving on, and depend a lot on the file: I don't think that is right - but that's what the American standard of care seems to have settled on. If I were to sue a doctor for malpractice, alleging they'd have made a more accurate diagnosis by spending more time with me, a valid defense for them would be to show that they followed standard practice.

> 2) knowing someone's background, and deeply studying their historical writings, can provide a lot of color when evaluating someone's ethics, or any bias in their actions.

I learned from the New Yorker article that Mudge signed an 7- or 8-million dollar agreement with Twitter earlier this year that had a carve-out in its non-disparagement clause(s) for whistleblowing

That definitely "adds color"


[flagged]


Comparing Mudge to a cop... Just Say No.

https://en.wikipedia.org/wiki/Peiter_Zatko


Again, many similar people can build a positive public reputation but that doesn't mean they are immune from criticism or bad decision-making later in life. Epstein had a good reputation at one point. Larry Nasar had a good reputation at one point. Doesn't prevent people from doing bad things to further their own self-interests.


> Epstein had a good reputation at one point.

With you? He never did with me.


By former Presidents, CEOs, Prince's, etc. Glad you never got too close to him as there is no telling what kind of situation you'd end up in.


It's really not hard to find evidence of twitter security fuck ups. Multiple Saudi nationals have given up dissident information to the saudi government because of their access to twitter's internal geolocation tools. One of them fled the country after twitter told him the FBI was investigating him. Twitter practically forced everyone to give them their phone number and then leaked the numbers. The list goes on.


Are you kidding me? The major credit bureaus have had just as many fuck ups. You don't see congress doing anything to fix it. There was a major utility shutdown due to security issues where they paid a ransom. Did you see Congress doing anything? This isn't exclusive to Twitter. Congress will use any situation to push their opportunistic rhetoric, and for them Twitter a social media company is more important to spread their propaganda than a credit bureau breach where everyone's personal data is compromised. What values does that show and teach, and why is that your talking point?


Who are you arguing for, and why?


I'm arguing for the people, who are you arguing for?


> and why

Anyway.

I feel I'm doing the same by promoting responsible disclosure of unethical treatment of people's data.

Did you even look at the guy's frigging Wikipedia page yet?! I just feel like we're talking past each other.

Reading through rest of thread...Is this a Musk-related thing for you?


> Did you even look at the guy's frigging Wikipedia page yet?!

Of course, but a Wikipedia page is not immune from bias nor does it provide unfettered credibility. I recall the same tactics and approaches being utilized in users pushing an agenda for Wikileaks, suggesting that they were basically perfect and incapable of doing any wrong and that Assange could do no harm. I don't give anyone a God-like status.

> Reading through rest of thread...Is this a Musk-related thing for you?

No, this is a personal experience kind of thing. I see this type of situation quite often where a topic will get people are riled up based on their political and personal biases and skew their critical-thinking ability to actually analyze the situation. If congress was actually concerned about people's data, they would have actually put forth efforts to enact some reasonable legislation that didn't just apply to whatever platform they feel the most censored on.


Right, wrong, indifferent, Congress sits on ass until lobbyists pay them to move, or someone shames them into action.

So, again, following you — but I don't even know if I care in this instance because the enemy of my enemy (Twitter & any other entity acting trustworthy with people's data when knowing you're not worth the trust) is my friend.


If you pretend a platform for mass media, journalism, and public discourse that certainly affects domestic and international politics is trivial, sure.

Just people huh? Not the Presidents, politicians, richest business men and high profile journalists right? To say nothing of all the other niche communities like finance and tech.


> on a social network where people share 280 character messages is fucking bizarre. reply

Perhaps a less dismissive characterization of Twitter would help make it less bizarre?

It's a platform used by many leading public figures, including US presidents, to share information and the 280 character limit is a format that often leads to less filtered communication than you'd get in other mediums.


Twitter is a propaganda network; whoever controls it, controls the narrative.


I don't disagree, but as a side note, "the narrative" always strikes me as a loaded word. It seems that generally when people use it, whatever they're referring to just so happens to be the "narrative" of the other side.


True, but that's the way it's being used.

I can't think of a better word. Suggestions?


It's more of the implied singularity of it that's problematic. There's no monolithic "narrative", there's a ton of "narratives", many of which are contradictory


How is that different than literally every other website or publication on earth?


I think the scope and scale makes it different.

Social media has become extremely important to the free and open exchange of ideas between people.


> I think the scope and scale makes it different.

Then what is the threshold wherein the natural inability to avoid bias becomes propaganda? Why is Twitter propaganda but not HN or my blog? When does it cross the line?


This is the binary bias[1].

You're trying to come up with hard distinctions and categories, when trying to do so is totally uninteresting and without any utility. I notice it's extremely common here on HN[2], perhaps because the job of an engineer involves working with categories, and something that's linguistically fuzzy is uncomfortable to them. I write more about this cognitive failing in the second half of my post here[3].

In short, there is no objective threshold wherein the natural inability to avoid bias becomes propaganda. And nor should we waste time on that point. Such a discussion is merely semantics around the definition of the word "propaganda". We should leave that to the people who compile dictionaries.

Such clouded thinking has created a blind spot here in this very thread, e.g. that someone can say something so ridiculous as "How is that different than literally every other website or publication on earth?" and not get downvoted, as if the practical difference between a social media platform with access to hundreds of millions of eyeballs on the one hand, and a small blog on the other, is not self-evident. Such an obvious difference can only not be self-evident to someone who is incapable of understanding that things can vary by degree instead of by category.

[1] https://www.psychologicalscience.org/news/releases/binary-bi...

[2] https://news.ycombinator.com/item?id=32708833

[3] https://news.ycombinator.com/item?id=32674580


> Such an obvious difference can only not be self-evident to someone who is incapable of understanding that things can vary by degree instead of by category.

I'm sorry, but I'm asking how and why the number of people suddenly flips the switch to propaganda and all I'm seeing is a flippant dismissal from you.

It's my stance that it is not the number of people who see it that dictates that it's propaganda, and that the definition supplied fails to meet any real criteria for propaganda.

This isn't a binary bias, I'm not asking "is it or is it not?" I'm asking someone _why_ they think it's propaganda.

I find your response reductionist, and the appeal for downvotes snarky. I'll let citations of your own comments stand on its own merit.


It was described as a propaganda network capable of controlling the narrative.

It is a matter of degree, but you keep insisting it's a matter of category.

If the CCP uses networks of bots to amplify pro-CCP stories and viewpoints on Twitter, then that's "different" (to answer your original question) in an extremely important way to if someone pushed those views on their own small blog. It's different because the scale and impact is different.

Also, both of those things belong, to some extent, to the category of "propaganda network capable of controlling the narrative". But one belongs to it more, and one is more of an issue, because the world isn't binary.


> It was described as a propaganda network capable of controlling the narrative.

No, you added the second part. That could indeed bolster the argument, but it wasn't made in the initial claim.

If scope is the tipping point - which appears to be your argument here with regard to degree - recall my initial question was about the threshold. Which is conveniently what you're saying we should ignore because it's unimportant. So which is it?

I contend that one of the core tenets of "propaganda" is that there needs to be a deliberate and centralized. It's easy to call something propaganda but it's much harder to defend that claim.


There is no tipping point. The premise of a tipping point means you're still thinking about category instead of degree.

Also, when we say degree, we don't mean the degree to which the definition fits. That's a boring discussion. We simply mean the degree to which it's a problem.

Twitter, to the extent that it's being used as a propaganda network by CCP bots, which it is, is a big problem for us.

A small blog being used for propaganda... not such a big problem.

That's the difference that you're missing. The scale and scope is different. Therefore the extent to which they're important is different.


> There is no tipping point. The premise of a tipping point means you're still thinking about category instead of degree.

Quite the opposite. I've asked about degree the entire time. "Opinion" does not mean the same thing as "Propaganda," but the scale of the former could transform it into the latter.

What's the degree here? That's what I'm asking.

> That's a boring discussion.

This is dismissive. If you want to discuss things in good faith, please avoid language like this. You're refusing to engage with an aspect of my reply - and that's fine - but don't pretend my thought are meaningless or boring as a response.


Of course opinion != propaganda. What is propaganda is a CCP bot network on Twitter.

I'm ending this convo here. It's become a tedious debate about semantics and nothing productive is being achieved.


You entered a conversation and started calling my points boring and meaningless; I don't sense you were looking for productive conversation from the get-go.


It's impossible to set a definite standard for when a social media site or other website has become so crucial to the public square that it is set apart from general services.

You could use a multi-prong test like they do for determining whether an entity constitutes a monopoly.

Or you could use the old Justice Stewart's test for obscenity..."I know it when I see it."

But given what we've learned of late about the government influencing social media sites to censor citizens on their platforms, I don't think there's a legitimate argument that certain social media sites are not different from the general internet.


I would say those things absolutely can be propoganda, but the government can only really enforce so much. Is it worth it for a gov employee to look at your blog for foreign government influence on elections? No. Twitter? Yes


Foreign election influencers absolutely may absolutely use popular blogs, especially when sharing information on other social media to recruit users into a certain personality trait.


Sinclair broadcasting has a far broader reach and actually influences ideologies that you can draw a direct correlation to ideology and Sinclair broadcast viewers.

None of Twitter/FB/Youtube has that kind of correlation


Unlike publications and most other websites, Twitter is near real time.


That's the differentiation between propaganda and not? Sorry, that doesn't make much sense to me.

Most of the "real time" aspect of Twitter is a reaction to something, often publications themselves.


Same for news stations, Facebook, Instagram, reddit, etc. Any platform where people share information can be a propaganda network. Should we make it all state owned now?


Who is saying Twitter needs to be state owned? People are saying they need to comply with rules and regulations that govern it. People are saying the maybe new rules and regulations need to be enacted.


What rules and regulations? Congress isn't a court. There has been no discovery to show that they are not following rules and regulations.


I'd hope congress pays some attention to anything which 80 million Americans use or interact with.


I think you're missing the point entirely. The fact that the world has gone bonkers over this whole farce proves that Twitter is just as influential as the most jaded critic has suspected.

And then you stop and realize that the user numbers on Twitter are DWARFED by Facebook (and Instagram and TikTok), and you realize just how screwed we really are.

And all for the sake of making some people insanely rich, by flooding every aspect of our lives with advertising.


> Society is becoming a parody of itself.

We've accepted emotional, mental, spiritual, and physical (to some extent) abstractions of ourselves as our true selves. And exchanged social cues for algorithms to manipulate our behaviors.

In the moments when you can break out of that abstraction the parody becomes so clear, and also terrifying. Like what are we actually building towards?


I’ve been hearing people downplay the seriousness of things on the internet my entire life and I’m mostly surprised at this point that people think that taking twitter seriously is such a ridiculous notion.

If you instead say “international information system responsible for sending 500m messages daily including by senior govt/business officials has poor stewardship” I think it doesn’t seem so rediculous that senior government officials are so concerned. They all use Twitter, why wouldn’t they be concerned? You could easily cause militarily significant damage to a country with a good hack against twitter.

There was a very politically significant insurrection organized on twitter, this system has already been used to direct an angry mob in the general direction of these high level government officials who proceeded to attempt to break down barricades and assault them.



This is all being done so that Elon Musk can back out of his contract to buy Twitter


I hate Musk, but who cares what the motivation is?

Shedding light on an (unfortunately very) influential company is good for the public.

Musk shouldn't get out of his deal, but whatever he does to reveal malpractice at Twitter is good for all of us.


Or any/all large corps that hold extortion-level userdata on everybody, statistically speaking.


Two big things about this that really grate me:

1) After Snowden, after Experian, after Pegasus, after decades of screaming about these issues and getting shushed and laughed at - that lefties might take over your twitter account is the straw that’ll break the camel’s back? Are you freaking kidding me?

2) Elon is going to get away with it. And he really shouldn’t - he already waived his right to back out based on any of this. Just because you like someone shouldn’t make them above the law, and basically the takeaway here will be that like Trump he’s above the law because a large enough section of the public likes him.

Setting all of this aside, maybe it’s worth actually trying to do something about the real problem - that too many members of society (including the leaders) are dangerously under-informed for living in it, let alone governing. None of this should be news to anyone here.


> that too many members of society (including the leaders) are dangerously under-informed for living in it, let alone governing

And this might even be tenable, if they were to surround themselves with knowledgable people who could give them advice. But, in a situation not entirely dissimilar to the inner workings of large corporations, our leaders are surrounded by parasites who ride on the their backs, and lead them into making decisions that benefit themselves in the short term, instead of benefitting the country (or the company) in the long run. You can fix this in government by amending the Constitution to get rid of Citizens United ruling, and then tackling the lobbyist problem, as if either one were possible. And I don't know how you'd even begin to fix it in large corporations.


The Delaware chancellor, Kathaleen McCormick, has several cases involving Musk's bad behavior on her docket, and is aware of how he plays it very fast-and-loose with rules and laws. She might not let him get away with this one, particularly because it would cut at the main value proposition of the Delaware chancery court (adjudicating acquisitions) if he does. His best chance is to give her enough cover to plausibly find a material adverse effect, but that is a VERY high bar, and I doubt they are anywhere near that level.


Even worse, it's been clear in several hearings that Musk's lawyers have squandered their credibility with McCormick--Musk has not generally been victorious in the discovery fights, and McCormick seems to be of the opinion that Musk is trying hard to screw Twitter in discovery (e.g., refusing to give relevant communications).

Most of the legal professionals I've seen comment on the case so far are of the opinion that Musk is likely to lose this case in chancery court, and see few ways that Musk could evade a ruling of specific performance should he lose.


The tech doesnt matter one bit. You can be tech illiterate and still understand foreign threats, freedom of speech, contract law, markets, etc.

None of this is new.


> lefties might take over your twitter account is the straw that’ll break the camel’s back? Are you freaking kidding me?

You name-dropped all of those spooky nation-state related phrases, but still can't acknowledge the very real scenario where a government official's second (or forth) account on Twitter is compromised by a nation state — competing, their own, doesn't much matter — for blackmail material?

That sbouldn't be of interest?


> he’s above the law because a large enough section of the public likes him

public opinion is the voice of God


> 2) Elon is going to get away with it. And he really shouldn’t - he already waived his right to back out based on any of this. Just because you like someone shouldn’t make them above the law, and basically the takeaway here will be that like Trump he’s above the law because a large enough section of the public likes him.

There’s no getting away with it. This was one hundred percent his plan the whole time - throw Twitter into chaos internally. Now for what reasons remain to be seen, but his extensive use of Twitter was highly unusual as a high profile CEO basically rewriting the PR game (which the SEC tried to reign in). That experience gives him unique insight into how Twitter works and what power it holds - he may very well feel a government party is influencing the platform too much and he’d rather destroy Twitter than lose control of it.


Don't make it bigger than it is. In that case, he was probably just lucky. Otherwise, they let him get away with a lot because he's just rich enough.


Idk - it was absurd when he used twitter so much, it was absurd when Tesla started trading like a penny stock with 50bn market cap moves in hours, there’s been a lot of absurdities that are just outside of the hard fast rules that this would fit a pattern


But that would mean Mudge lied as he said his whistleblowing had nothing to do with Musk and the timing is just a coincidence.


He might just be sticking it to Twitter because they ousted his friend, Jack, and that just happens to line up with another opportunity to shaft them along Elon's axis. Coincidence but not entirely random.


Do people really like Elon? There isn’t much to like about him. Respect his achievements, sure , but actually like him?


I don't know that you'd need to wait for an as-yet-to-be-revealed motive if you were looking for one.

He got a $44 billion dollar excuse to sell Tesla stock at the height of an unprecedented bubble without causing his zealots to do the same and crash the stock.

I'm not saying that's why that happened, but here we are.


[flagged]


Not sure if this is satire or some Alex Jones-level conspiracy theory.


Please be on the lookout for grandstanding and do your own diligence in actually understanding the issues


I agree. Read about Mudge's history. When you understand Mudge, then you'll understand why this is not grandstanding on his part. You'll understand why he's not doing this support Musk, for money, to get back at Twitter, or any of that. You'll understand he's doing this because he cares very deeply about information security.


This entire thing is so bizarre to me. There is a room full of non-technical senators effectively testifying the unproven and one-sided statements of a single person (Zatko), who was let go from Twitter, with no ability for Twitter (or anyone at the company) to defend themselves or refute these statements.


> no ability for Twitter (or anyone at the company) to defend themselves or refute these statements.

In declining to appear, their CEO traded the ability to refute statements in real time alongside Mudge for the ability to release carefully crafted statements after the fact that will receive public scrutiny but do not require him to tell the truth in response to any questions from congress, the content of which are out of his control. Misleading public statements can get them in hot water with regulators, but lying to congress is a crime.

It's probably a smart move, and it's certainly not unfair to Twitter.


What you say is untrue.

Bloomberg: Grassley says Twitter CEO Parag Agrawal declined an invitation to appear today. Kurt Wagner Tech Reporter


For good reason. Usually, these whistleblower sessions are used as a place to get sound bites for campaigning and give the CEO a tongue lashing. Due to the pending acquisition, this one has stakes that are about 100x higher than the typical whistleblower session. If Parag Agrawal screws up at this hearing, it could literally cost him billions of dollars.

Let's be real: Twitter is a huge cesspool of harassment, hosts a ton of pornography (including from children), and clearly has monetization/business problems. It also seems to have much worse engineering than other social businesses. It's going to be a lot harder to defend in one of these sessions than Facebook.


> Let's be real: Twitter is a huge cesspool of harassment, hosts a ton of pornography (including from children)

For the porn: So do Reddit and Facebook, with the latter having had multiple lawsuits by former content moderators for the uncountable amount of CSAM and gore [1]. The first "most popular" subreddit was r/NSFW, followed by r/gonewild - Reddit literally got big with porn.

As for harassment: Facebook with its closed groups is just as bad if not worse for radicalization (simply because way more people use it and no one monitors these groups, not to mention open channels such as newspaper comment sections), with direct links to deadly unrest such as in India [2]. Meta's other products are a horror show in themselves - Whatsapp has a history with mobs riled up by fake news to the point these have their own Wikipedia listicle [3] and Instagram has been under fire for years in helping to aid eating disorders [4].

It's bad enough that there are so many bad actors on Twitter, but the simple fact that Facebook makes billions of dollars in profit each year and doesn't even come close to the amount of moderation they would need makes them even worse.

[1] https://www.vice.com/en/article/a35xk5/facebook-moderators-a...

[2] https://www.dw.com/en/india-facebook-under-the-microscope-ov...

[3] https://en.wikipedia.org/wiki/Indian_WhatsApp_lynchings

[4] https://abcnews.go.com/GMA/News/instagram-eating-disorders-d...


> no one monitors these groups

In a country that values freedom of speech and association, this is considered a feature, not a bug.


US-style absolutist interpretations of "freedom of speech" always come at a serious cost - and in almost all cases marginalized people (people of color, jews, and most recently trans people) end up bearing that cost, while the majority society feels no impact.


And it's also precisely what helped such people the most. Abolition, and other pertinent topics, were regularly and vigorously discussed and debated in America. This was happening at the same time that in Britain calling for the end of the monarchy was punishable by death, later converted to merely life in prison. And incidentally, that is still the law in the UK [1]. Quite a relevant aside since while it was ostensibly not actively enforced, police are currently being quite heavy handed with protesters against the royal accession process, and that law gives them every legal right to do so.

The point there is that had we lived in a country where censoring speech was legal, there's every reason to believe even speaking of e.g. abolition could have landed you in jail, or worse. Would this have deterred change? Maybe, maybe not. But the one thing is for sure is that it'd have made the country a far less free place for everybody.

[1] - https://en.wikipedia.org/wiki/Treason_Felony_Act_1848


US-style absolutism about freedom of speech comes from hard earned lessons about the other options being much worse.

It seems that much of the world has forgotten or willfully ignore these lessons.

The cost of freedom is that people will use it to do things you don't like.

Freedom isn't necessary for a society to function, lots of societies function without it, and have for most of human history.

Given the choice though, I prefer to live in a society that chooses to maximize liberty. Without freedom of speech, all other liberties are irrelevant.

There's a reason why it's the first amendment.


>comes from hard earned lessons about the other options being much worse.

Your country is barely 300 years old and has had a single constitution for its whole existence. The US has learned _no_ lessons through its existence. It's a country founded by colons who didn't want to pay taxes to the UK. The amount of lessons the US can give the world is about... none.


> US-style absolutism about freedom of speech comes from hard earned lessons about the other options being much worse.

I'm German. My ancestors should have shown the world just enough on where not restricting hate speech and conspiracy crap leads: into murder, into genocide, into the dissolution of democracy itself.

It's astonishing that the US hasn't realized this as well after Jan 6th. You all don't realize just how fucking close you came and how thin the edge is you all are standing on.


I suspect that you may have learned the wrong lessons.

In the history of German regimes, perhaps take a look at the degree to which each one suppressed free expression, and think about which were better.


> I suspect that you may have learned the wrong lessons.

Holocaust denial is banned in the majority of European countries, and at least in some countries Nazi symbolics are banned as well [1].

I live maybe an hour away from the KZ Dachau and have visited it. It's hard to have any other stance than "antisemitism, racism and other similar discrimination must be banned at all costs" when you personally see the evidence just how depraved humans can be.

Let humans go unchecked and you get anything from online mobs driving trans people to suicide (Kiwifarms) over murder (Heather Heyer) and lone wolf terrorism (Christchurch) and finally, a putsch attempt. Then, once a strongman/dictator has taken over, you will eventually see ethnic cleansings and genocide (see e.g. Russia's Ukraine invasion).

[1] https://en.wikipedia.org/wiki/Legality_of_Holocaust_denial


While liberty does indeed carry a steep price tag, the alternative has been shown throughout human history to be horrifically worse.


Banning holocaust denial didn't stop germany and other european countries from having sizeable neo-nazi groups and to a wider extent white supremacy groups


how close to what? lets say the guys storming the capitol actually manage to do whatever they wanted to do there, then what? democracy is not a king of the hill game, they'd just be sieged out by the police/military if it came to it. The only thing you ancestors showed us is that people like scapegoats when their economy is down the gutter, demoralized and in an era where war and overt systematic violence against ethnic minorities isn't uncommon.


> they'd just be sieged out by the police/military if it came to it

You really think that the police, especially federal police, would have disobeyed a direct request from the President asking them to stand down? There were only two completely random things that prevented an utter disaster at Jan 6th: Eugene Goodman, the brave cop redirecting the mob away just mere minutes after the Senate chamber was sealed [1], likely saving the Senators' lives, and Bobby Engel from the Secret Service [2], who reportedly resisted physical violence by the President himself and did not drive him to the Capitol as requested.

Had Trump been at the Capitol, I have absolutely zero doubt he would have crowned himself President that day - and that neither the Republican leadership nor the courts would have objected to this.

[1] https://www.washingtonpost.com/local/public-safety/goodman-c...

[2] https://www.cnbc.com/2022/06/28/trump-lunged-at-secret-servi...


The capitol police doesn't report to the president. They absolutely would have laid siege to the place at the orders of their boss, Nancy Pelosi.

Also, you should check your sources (or rather, your sources' sources): there's a lot of fake news out about 1/6, a lot of it from "reliable" sources. The second story there is single-sourced from someone who wasn't in Trump's car whose story was disproven by someone who was actually in the car. The same outlets have been repeating the lie that one of the Trumpkins killed a capitol police officer with a fire extinguisher.


What makes you think that republican leadership and the courts(!!!!) wouldn't have objected to it? especially when republican leadership themselves were against it, to the point where the main target it seems of the mob was Mike Pence of all people.


"You really think that the police, especially federal police, would have disobeyed a direct request from the President asking them to stand down?"

This takes me back to my German friends confidently predicting that the election of George W. Bush was the dawn of Nazi America. No, George W. Bush isn't going to roll the army out of Iraq and conquer the entire Middle East. No, Trump isn't going to disband the free press with the assent of Congress. No, the Capital Police, who work for Congress, are not going to stand down and let rioters run rampant, and no, neither Republican leadership (which wasn't in charge of Congress in any case) nor the courts are going to let anyone crown himself president.

All of those are actual predictions I heard from Germans. Trump did crown himself president, with the result any American would have predicted: he was derided and ignored by the majority of the country, and the location wouldn't have mattered at all to that.

I totally get given your country's history why this stuff comes up. But some of it is very, very alien to an American cultural consciousness. It turns out countries differ from one another.

It's worth reading about the relationship between Trump and his generals to understand the attitude that the American military takes, and is expected and required by their oath to take, toward the president.

https://www.newyorker.com/magazine/2022/08/15/inside-the-war...

I am definitely not saying that fascism can't happen here. I'm saying that if it does it won't look like anything predictable from German history because there are vastly different cultural norms to bulldoze.


But see, if you are in a place that isn't free-speech-abolutist, then who gets shut out by the free speech limitations? Marginalized people.

You are right to say that the impact falls on the marginalized. You are wrong to blame the free speech policy for that.


> If Parag Agrawal screws up at this hearing, it could literally cost him billions of dollars.

Good.

It is an indefensible house of cards where it can take someone like Mudge to just blow it up and give the regulators a reason to give a massive fine and put them under strict rules to do better, and they should give them massive fines.


Mudge won't blow it up. Regulators may go for $X00 million of fines, but that's it. The company will release a statement saying, "all of this is incorrect about our business, and we are inviting some congresspeople to come meet with us on a fact-finding trip." Rules might get a little stricter, but the lobbyists from Facebook and Google won't let them get strict enough to hurt them - and any rule that hurts Twitter materially will hurt FB a lot more. This kind of thing is a once-in-3-months occurrence now, and no meaningful changes ever come of it.

The only reason this one is different is because of the specter of Elon Musk's acquisition falling through.


Lindsey Graham committed to, in the testimony, working with Elizabeth Warren to create new rules, similar to Europe’s GDPR. Perhaps watching the testimony would change your mind.


When it comes to details, dems and repubs want totally opposite things.

Repubs want free speech (unbanning of conservatives, Trump), Dems want control (what can and can't be said on the platform).

Bottomline, Ain't happening


Could counsel have appeared instead?


No. Individuals get invited to Congress (or subpoenaed), and you can bring a lawyer to advise you, but they cannot speak.


Senators may (appear to) be naive, ignorant, unteachable. It might even be true.

Their staff and advisors most certainly are not. When Sen Orrin Hatch is asking stupid questions about facebook and ads, it's most certainly an act. For the benefit of the blue hairs back home.

As a former activist, I assume any public hearing is performance art.

Personal anecdote. One time the rules were suspended and I was allowed to testify about a bill being considered. I pointed out the vendor they were about to award an important contract appeared to be out of business. No phone, website offline, offices shuttered.

(I had prev made sure some contacts from the local media were present.)

Whoops!

Immediate recess. Hour later they reconvene. That bill is promptly tabled and onto next order of business. Exactly zero comment made about the matter.

That council never repeated the mistake of letting me go off script.


It’s not a court, and Twitter doesn’t have a right to be there (nor do any executives want to be in front of Congress under oath). Edit: The ranking member of the committee in the video said that the Twitter CEO was invited but refused to join the hearing. So there you go

but Twitter has already testified more or less through compliance statements and attestations about their security, and now we’re finding out about what they’ve been sweeping under the rug.


This is a fair point. They had their chance when they filed their statements with the SEC and others.

And they also control a big megaphone. If they want to release a statement, they can tweet it and boost it directly into everyone's feed.


Maybe that is why they were hiding. So someone else had to say something.

All it takes is this experienced security professional to bring down the house of cards that Twitter security is built on and it will just tell us that they have been hiding lots of skeletons and nasty secrets that were spun by the company for years.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: