Having access to *some* is not the same as having access to *all*. Rate limiting...

unionpivo · on July 16, 2020

They accessed maybe 30 accounts? that's less than 4 per 8hr working shift

I imagine a support person does more than in an average day.

And while we might have seen all the tweets at the same time, they might have been changing emails and passwords over few hours.

Remember twitter has so many users they probably get tens of thousands support requests per day.

Even if you have monitoring, I don't think volume was enough to pick it up.

manquer · on July 16, 2020

They modified 30 accounts each with millions of followers , most of them verified , even a simple weight for that should have triggered alarms