Sen. Chuck Grassley (R-Iowa), the top Republican on the Judiciary Committee, is calling on Elon Musk to answer questions about Twitter’s security and privacy issues that his predecessor has failed to provide.
“His testimony made clear that a compromised Twitter employee working on behalf of a foreign power could use this access to collect data on Americans and even hack other parts of a user’s phone to access files, photos, or conversations that could then be used to extort, blackmail, or collect intelligence,” Grassley wrote.
He added, “These are significant security failures that Twitter must immediately address and fix.”
At least one Chinese agent has infiltrated Twitter, Grassley wrote, citing Zatko’s testimony.
Testimony
Speaking before a Senate Judiciary Committee hearing in September, Zatko revealed that at least one agent of China’s top intelligence agency, the Ministry of State Security, was on Twitter’s payroll.Zatko also said that Twitter would be a “goldmine” for any foreign intelligence agency that could embed agents within the company.
“If you place somebody on Twitter … as we know has happened, it would be very difficult for Twitter to find them,” Zatko said. “They will probably be able to stay there for a long period of time and gain significant information to provide back on either targeting people or on information as to Twitter’s decisions and discussions and … the direction of the company.”
The complaint claims that Chinese entities gave money to Twitter, raising concerns that these entities could learn sensitive information about Twitter users around the world.
“Twitter executives knew that accepting Chinese money risked endangering users in China,” the complaint says.
“Twitter collects vast amounts of data on American citizens,” Grassley wrote. “In the hands of a foreign agent embedded at Twitter, a foreign adversary could use their access to personal data to track down pro-democracy dissidents within their country or spy on Americans.
Risk Assessment
Grassley told Musk that he is now “uniquely positioned to provide answers to Congress” where Agrawal has failed.The Iowa senator asks Musk to carry out a “threat assessment of Twitter’s current security posture and systems” and answer questions on a Sept. 12 letter he and Sen. Dick Durbin (D-Ill.) sent to Agrawal. Grassley wants Musk to respond to his requests before Dec. 15.
According to Grassley, Agrawal did not respond to the letter citing litigation with Musk “as an excuse.”
“What are your policies and procedures for protecting user data from insider threats posed by foreign intelligence?” says one of the questions in the Sept. 12 letter. “What steps does Twitter take during the hiring process to screen candidates for potential linkages to foreign intelligence services?”
Another question asked: “What percentage and number of Twitter employees have at least some level of access to live production systems and/or user data?”
“Please provide a full and complete list of all government agencies, foreign and domestic, who have approached Twitter to flag content for removal,” the final question in the letter says.
Grassley is not the only lawmaker seeking answers from the Twitter and SpaceX CEO.
Friends Read Free