Anonymous Whistleblower calls out Persistent Threat
Jack Spratt
When then-CEO Parag Agrawal initiated a campaign to discredit renowned cybersecurity chief, Mudge Zatko’s, disclosures about the true state of Twitter, anonymous whistleblower known as Jack Spratt, came forward with documentary evidence demonstrating just how easy it is to impersonate users on Twitter. When Spratt dug into how and why multiple methods for tweeting as others existed, Twitter’s answer was a game of semantics. Changing the name of one capability from “GodMode” to “PrivilegedMode” as a “solution” to the fact that every Twitter engineer was given GodMode upon entry to the company did nothing to limit the exposure to users. Even after Elon Musk took over, anyone with access to Twitter’s engineering code base could easily Tweet as any user without leaving a record of foul play.
Spratt’s disclosures to the SEC, FTC and others submitted by Whistleblower Aid, both substantiated Mudge’s warnings on privacy, security and national security concerns – and exposed the bad faith anti-whistleblower tactics by Twitter leadership.
Working with Whistleblower Aid has been an exceptional experience; their professionalism, empathy, relationships and stewardship has provided a significant peace of mind for myself and my family. WBA recognizes that it is a huge step and risk to speak up, and having worked with them, their dedication, attention and care to the individual and their message is treated with the utmost care and diligence. They truly make you the North Star, and help champion your observations to ensure that they are communicated with the right stakeholders.” – Anonymous Twitter Whistleblower