Corner Cases Are How They Get You
Twitter’s hack yesterday was a serious issue, and signs point to an internal support tool as the vector to the attack. These non-technical attacks are usually attributed to a security lapse with a dose human error. But the core cause always relates to complex processes and systems abstraction to deal with them.
This is not a defense. The attack was luckily used for financial gain, but a similar attack targeting an election day or a tense international situation wouldn’t be a joke. I don’t envy being support at Twitter. You are a global target and especially when WFM, the attacks surfaces are even larger.
I’m very curious to read the post-mortem, hopefully with some related investigative piece. For sure it’ll read like a heist movie script.