On Twitter account security
In the wake of the AP Twitter account compromise today, a number of people have called for Twitter to add two-factor authentication for logins. This would be a good step, but something else struck me as a fundamental flaw with organizational Twitter accounts right now: all of the users share a single logon and password.
“The challenge (with corporate-owned Twitter accounts) is, we share the password,” Chester Wisniewski, senior security advisor at Sophos, told NBC News.
What a mess.
Two-factor authentication would be helpful and should definitely be considered, but Twitter also really needs is a way to delegate organizational posting authority to individual users, allowing the organization to use a secure, master password for the master account, and specifically granting access to individual users by their personal logins. This would allow an administrator to control user access at a granular level, and would prevent a compromised user password from hijacking the entire account.
With Twitter’s expanding role in the dissemination of news and public safety information (see: Boston Marathon bombings and the ensuing manhunt), the integrity of these organization’s Twitter accounts is becoming a national and economic security issue. Delegation and two-factor authentication combined would be a strong defense against these types of password compromise.
I’m going to start using you more, promise.
There are Mondays… and then there are Mondays. Today was the second kind. The kind where all you want to do is order Chinese food, consume copious amounts of wine and watch Ru Paul’s Drag Race and Rachel Maddow with your boyfriend and your dog (and I guess your cat if he feels like it, but he probably won’t because that’s just how he is.)
Needless to say, I didn’t feel like cooking… but Chris and I have been trying to eat better and save money by making at least a few meals per week at home. We didn’t do so well this weekend, and I’ve been meaning to give ScratchDC a try… today’s menu just called my name.
Rosemary Balsamic Flank Steak with Creamy Redskin Mashed Potatoes and a Tomato & Blue Cheese Salad/Topping
Um. Steak? Potatoes? Tomatoes? Blue Cheese? Yeah, come to papa. Ordering was easy-peasy… pick a time (7:15pm), enter your address (Mt. Pleasant, DC) and credit card information (total: $30.74 after tax), and you’re off!
Ryan Hansan is one of the proprietors (
or maybe the only… I can’t find that info on their website) of this neat local startup, and he is apparently also doing some of the deliveries. Ryan called me at around 6:45 pm to say he was running early, and wondered if he could deliver early. I was just hopping on Metro from work, but I was able to buzz him into our building so he could drop it off early (cell phones…what did we do without them?). Unfortunately I had chosen the “Tip with Cash on Delivery” option at checkout, so I wasn’t able to give a gratuity, but I’ll make up for it next time… promise!
Chris arrived home and found our box sitting in front of the door, and I tore into it as soon as I got home.