Incident: Twitter Glitch Exposed Android Users' Protected Tweets Since 2014

Published Date: 2019-01-18

Postmortem Analysis
Timeline 1. The software failure incident of the Twitter glitch affecting some Android users' protected tweets occurred between Nov. 3, 2014, and Jan. 14, 2019 [Article 80332]. Therefore, the software failure incident happened between November 2014 and January 2019.
System 1. Twitter Android app 2. "Protect your Tweets" option 3. Twitter's data protection mechanisms [80332]
Responsible Organization 1. Twitter [80332]
Impacted Organization 1. Android users who changed their settings between Nov. 3, 2014, and Jan. 14, 2019, leading to their protected tweets being exposed [Article 80332].
Software Causes 1. The software cause of the failure incident was a Twitter glitch that disabled the "Protect your Tweets" option for some Android users who changed their settings between Nov. 3, 2014, and Jan. 14, 2019 [80332].
Non-software Causes 1. The security flaw was caused by a glitch in Twitter's system that disabled the "Protect your Tweets" option for some Android users who changed their settings, such as updating their email address associated with the protected account [80332].
Impacts 1. Some Android users had their protected tweets exposed since 2014 due to the Twitter glitch [80332]. 2. The security flaw disabled the "Protect your Tweets" option for users who changed their settings between Nov. 3, 2014, and Jan. 14, 2019 [80332]. 3. Twitter fixed the issue on Jan. 14, 2019, but the exact number of affected accounts is unknown [80332]. 4. Irish data protection authorities are investigating Twitter over this data breach [80332]. 5. Companies found lacking in privacy practices could face fines under the General Data Protection Regulation (GDPR) [80332].
Preventions 1. Regular security audits and testing of the Twitter Android app could have potentially identified and fixed the glitch before it exposed users' protected tweets [80332]. 2. Implementing stricter validation checks during account setting changes, especially those related to privacy settings, could have helped prevent the glitch from disabling the "Protect your Tweets" option [80332]. 3. Enhanced monitoring and alert systems to detect anomalies in user settings changes could have provided an early warning of the issue, allowing for a quicker response and resolution [80332].
Fixes 1. Twitter fixed the issue on Jan. 14 by reactivating the protected tweets setting for affected users and recommending all Android users to double-check their settings [80332].
References 1. Twitter Help Center [80332]

Software Taxonomy of Faults

Category Option Rationale
Recurring unknown (a) The software failure incident related to the Twitter glitch exposing protected tweets on Android devices does not mention a similar incident happening again within the same organization (Twitter) or with its products and services. Therefore, there is no information provided in the articles about a repeat of this specific incident within Twitter. (b) The articles do not mention any similar incident happening again at other organizations or with their products and services. Hence, there is no information provided in the articles about a similar incident occurring at multiple organizations.
Phase (Design/Operation) design, operation (a) The software failure incident related to the design phase is evident in the Twitter glitch that left some Android users' protected tweets exposed since 2014. The glitch occurred due to a security flaw that disabled the "Protect your Tweets" option for some users who changed their settings, such as updating the email address associated with the protected account, between Nov. 3, 2014, and Jan. 14, 2019. This indicates a failure introduced by system development or updates [Article 80332]. (b) The software failure incident related to the operation phase is seen in the impact on Android users who were affected by the glitch. Users who changed their settings during the specified period had their protected tweets exposed, showcasing a failure introduced by the operation or misuse of the system [Article 80332].
Boundary (Internal/External) within_system (a) The software failure incident of the Twitter glitch exposing some Android users' protected tweets since 2014 was within the system. The glitch disabled the "Protect your Tweets" option for users who changed their settings between Nov. 3, 2014, and Jan. 14, 2019, due to an issue with the Android app [80332]. The incident was not caused by external factors but rather by a flaw within the Twitter system itself.
Nature (Human/Non-human) non-human_actions (a) The software failure incident in this case was due to a glitch in Twitter's system that left some Android users' protected tweets exposed since 2014. This glitch disabled the "Protect your Tweets" option for some users who changed their settings between Nov. 3, 2014, and Jan. 14, 2019. Twitter fixed the issue on Jan. 14, but the company is unsure of the exact number of affected accounts [Article 80332]. (b) The article does not provide specific information about the software failure incident being caused by human actions.
Dimension (Hardware/Software) software (a) The software failure incident reported in Article 80332 was not due to hardware issues but rather a glitch in the Twitter software that left some Android users' protected tweets exposed since 2014. The glitch disabled the "Protect your Tweets" option for some users who changed their settings between Nov. 3, 2014, and Jan. 14, 2019. This indicates that the failure originated in the software rather than hardware [80332].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident reported in Article 80332 was non-malicious. The incident was a Twitter glitch that left some Android users' protected tweets exposed since 2014. The glitch disabled the "Protect your Tweets" option for some users who changed their settings between Nov. 3, 2014, and Jan. 14, 2019. Twitter fixed the issue on Jan. 14 and recommended affected users to double-check their settings. The company also reactivated the protected tweets setting for those known to be affected. Additionally, the article does not mention any malicious intent behind the glitch, indicating it was a non-malicious failure [80332].
Intent (Poor/Accidental Decisions) accidental_decisions (a) The software failure incident related to the Twitter glitch exposing some Android users' protected tweets since 2014 was not due to poor decisions but rather a security flaw in the system. The glitch disabled the "Protect your Tweets" option for some users who changed their settings, leading to the exposure of protected tweets [80332]. (b) The incident was more of an accidental decision or unintended consequence rather than a result of poor decisions made by the company. The exposure of protected tweets was not intentional but rather a glitch that affected certain Android users who updated their settings between specific dates [80332].
Capability (Incompetence/Accidental) development_incompetence, accidental (a) The software failure incident related to development incompetence is evident in the Twitter glitch that left some Android users' protected tweets exposed since 2014. The glitch disabled the "Protect your Tweets" option for some users who changed their settings between Nov. 3, 2014, and Jan. 14, 2019. This indicates a lack of professional competence in the development or maintenance of the Twitter app for Android users [80332]. (b) The accidental nature of the software failure incident is highlighted by Twitter's statement that they fixed the issue on Jan. 14 but were unsure of how many accounts were affected. This lack of awareness of the extent of the impact suggests that the exposure of protected tweets was not intentional but rather an accidental consequence of the glitch [80332].
Duration temporary The software failure incident reported in Article 80332 was temporary. The glitch that left some Android users' protected tweets exposed occurred between Nov. 3, 2014, and Jan. 14, 2019. Twitter fixed the issue on Jan. 14, indicating that the failure was not permanent but rather temporary [80332].
Behaviour omission, value, other (a) crash: The software failure incident described in the article is not related to a crash where the system loses state and does not perform any of its intended functions [Article 80332]. (b) omission: The software failure incident is related to an omission where the system omitted to protect some users' tweets even though they had the "Protect your Tweets" option enabled [Article 80332]. (c) timing: The software failure incident is not related to timing issues where the system performs its intended functions but too late or too early [Article 80332]. (d) value: The software failure incident is related to a value issue where the system performed its intended function incorrectly by exposing protected tweets of some Android users [Article 80332]. (e) byzantine: The software failure incident is not related to a byzantine behavior where the system behaves erroneously with inconsistent responses and interactions [Article 80332]. (f) other: The software failure incident is specifically related to a glitch in the Twitter software that led to the exposure of protected tweets of some Android users due to a security flaw [Article 80332].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence property (d) property: People's material goods, money, or data was impacted due to the software failure The software failure incident mentioned in the article about the Twitter glitch exposed some Android users' protected tweets since 2014. This security flaw resulted in the "Protect your Tweets" option being disabled for some users who changed their settings, potentially exposing their personal data and information [80332].
Domain information The software failure incident reported in Article 80332 is related to the industry of information (a). The incident involved a Twitter glitch that exposed some Android users' protected tweets since 2014. This glitch disabled the "Protect your Tweets" option for certain users who changed their settings, potentially compromising the privacy and security of their information on the platform [80332].

Sources

Back to List