[vechagup]

The management of individual accounts is generally performed by low-level employees at companies like this. It's operational work that is thought to scale poorly and the costs of it are looked upon unfavorably by public market investors. Hence, there is constant pressure to push it to as low of a level as possible.

Perhaps a higher tier of user support personnel handles verified accounts (or accounts somehow flagged for extra review in a non-public fashion), but I'd still be surprised if anyone particularly high-level is doing the grunt work of using this tool.

[manquer]

Having access to some is not the same as having access to all. Rate limiting , or restricting to ones I am managing and approval processes are pretty easy . It does not like Twitter is doing any of that .

[unionpivo]

They accessed maybe 30 accounts? that's less than 4 per 8hr working shift

I imagine a support person does more than in an average day.

And while we might have seen all the tweets at the same time, they might have been changing emails and passwords over few hours.

Remember twitter has so many users they probably get tens of thousands support requests per day.

Even if you have monitoring, I don't think volume was enough to pick it up.

[manquer]

They modified 30 accounts each with millions of followers , most of them verified , even a simple weight for that should have triggered alarms