Featured image of post Twitter 2FA text service was secretly helping governments locate people, obtain call logs

Twitter 2FA text service was secretly helping governments locate people, obtain call logs

The cofounder of a Twitter 2FA text service is reported to have been secretly selling access to its networks to governments, enabling ...

· 1877 points

The cofounder of a Twitter 2FA text service is reported to have been secretly selling access to its networks to governments, enabling …

Highlights

  • Twitter says it is cutting ties with Mitto AG, a European company that helped it send sensitive passcodes to its users via text message.
  • Mitto was used by Twitter to send text messages on its behalf, including security codes used for two-factor authentication (2FA) Twitter says that it is “transitioning” away from the company’s services, but appears not to have completely ceased using them as yet.
  • The privacy breach appears to have been carried out by Mitto cofounder and chief operating office Ilja Gorelik without the knowledge of others in the company.
  • A Mitto spokesperson said that the company itself had no involvement, and was investigating.