Twitter does not have separate development, test, staging, and production environments. At least 5,000 employees had privileged access to production systems.

https://x.com/avidhalaby/status/1602127460677844993

Orange Site discussion

54
Jump in the discussion.

No email address required.

:#marseybluecheck:

But actually

Jump in the discussion.

No email address required.

Only cowards need non-production environments. True codechads push every commit directly to production right in the middle of the workday.

:#marseybuff:

Jump in the discussion.

No email address required.

:capygitcommit:

Jump in the discussion.

No email address required.

True codechads push every commit

True codechads don't use version control.

Jump in the discussion.

No email address required.

“Yes I ftp my code over and HUP the daemon, why do you ask?”

:#gigachad2:

Jump in the discussion.

No email address required.

Jump in the discussion.

No email address required.

Better yet, check in changes and leave for the day while the build is in progress.

Jump in the discussion.

No email address required.

My man :marseycheers:

Jump in the discussion.

No email address required.

You don’t need a darn test environment, don’t be a kitty. Feature flags are good enough

Jump in the discussion.

No email address required.

Full commit ahead!

:#marseysteer:

Jump in the discussion.

No email address required.

Good thing we don't do that :marseycapyautismpat:

Jump in the discussion.

No email address required.

lol this is pretty funny cuz this has happened to me plenty of times but I always thought it was because it was small companies.


Krayon sexually assaulted his sister. https://i.rdrama.net/images/17118241526738973.webp https://i.rdrama.net/images/17118241426254768.webp https://i.rdrama.net/images/17156480765435808.webp

Jump in the discussion.

No email address required.

It happens at all levels. In 1997, the NSA did a massive hacking attack on US defence to probe whether it was vulnerable, and it was comically vulnerable. Passwords like "password" or "12345", passwords being written on trash that was then collected, and someone managed to get the password of the computers of the Joint Chief of Staff by impersonating an IT guy, calling the JCS and saying they need the password to reset a computer.

Jump in the discussion.

No email address required.

While I don’t doubt the security was lackluster, that’s like me saying it’d be easy to get into my brother’s computer

Jump in the discussion.

No email address required.

They were only allowed to use commercially available technology, and they were also not allowed to disclose that they were NSA. The whole point of the exercise was to detect whether a complete outsider would be able to do this.

What's also funny was that during their own hacking, they detected that outsiders had already penetrated the Pentagon, and those outsiders were most likely the French. :marseypuke:

Jump in the discussion.

No email address required.

and those outsiders were most likely the French.

what the frick why haven't we nuked them

Jump in the discussion.

No email address required.

iirc they only found French IP's, but nothing tangible.

Also everybody spies on everybody, there arent really friendly spy agencies.

Jump in the discussion.

No email address required.

sure but Merica is supposed to be the best at being rats, we literally hire out people who hack us. I will not stand for frenchies looking at my NSA porn records

Jump in the discussion.

No email address required.

How could :marseyelonmusk: do this?

Jump in the discussion.

No email address required.

With all those being people fired, it seems like Twitter going down is less likely now.

Jump in the discussion.

No email address required.

https://x.com/AvidHalaby/status/1602132485743480832/photo/1

I'm not transcribing this, but god darn. Basically their systems start up by reading data from other systems, so if everything goes down, there is very literally no way to bring it back up "from nothing". That's right, if all their servers suffer a brief 1-minute power outage, the whole system is fricked basically permanently until a series of manual code changes are implemented to address it.

This thread actually seems way juicier than the "twitter files" shit, at least in terms of actual legal action. I'd bet nothing happens :marseysal: but maybe someone will get slapped for fraud.

Jump in the discussion.

No email address required.

Where's the fraud? It isn't illegal to have a backend that's held together with duct tape and shell scripts, in fact, that probably describes a majority of backends. A bit uncommon for a web property operating at Twitter's scale though.

Jump in the discussion.

No email address required.

You're right, their shitty engineering isn't illegal at all. But lying to the government about your infrastructure and security practices is.

Jump in the discussion.

No email address required.

>a single determined actor could have made Twitter shut down permanently

>nobody did it

nothing ever happens :marseydepressed:

Jump in the discussion.

No email address required.

Holy shit, the rest of that thread.

Jump in the discussion.

No email address required.

going to do a thread

Or you can create a free Wordpress account and write a proper blog you troglodyte.

Jump in the discussion.

No email address required.

I believe Elon said it had to be posted on Twitter - good move tbh.

Jump in the discussion.

No email address required.

I choose to believe the title is false, but comically and outrageously so

Jump in the discussion.

No email address required.

If I ran into this dude, first thought would be to GTFO. I have no desire to blown to smithereens if he disagrees with my sandwich topping choices. Second thought would be what is he over compensating for? Is his ego (and various other parts of him) really that tiny and fragile?

Snapshots:

Orange Site discussion:

Jump in the discussion.

No email address required.

Link copied to clipboard
Action successful!
Error, please refresh the page and try again.