Twitter deleted data potentially crucial to Russia probes
Social-media platform’s strict privacy policy led to deletions of Russian information of interest to investigators.
www.politico.com/story/2017/10/13/twitter-russia-data-deleted-investigation-243730
Twitter has deleted tweets and other user data of potentially irreplaceable value to investigators probing Russia’s suspected manipulation of the social media platform during the 2016 election, according to current and former government cybersecurity officials.
Federal investigators now believe Twitter was one of Russia’s most potent weapons in its efforts to promote Donald Trump over Hillary Clinton, the officials say, speaking on the condition of anonymity.
[...]Many U.S. investigators believe that their best hope for identifying who was behind these operations, how they collaborated with each other and their suspected links to the Kremlin lies buried within the mountains of data accumulated in recent years by Twitter
By analyzing Twitter data over time, investigators could establish what one U.S. government cybersecurity consultant described as “pattern of life behavior,” determining when Russian influence operations began, and how they “were trying to nudge the narrative in a certain direction.”
“So if you have access to all this, you can basically see when botnets appeared and disappeared, and how they shaped narrative around certain events,” said the analyst, who could not speak for attribution given company policy.
But a substantial amount of valuable information held by Twitter is lost for good, according to the cybersecurity analysts and other current and former U.S. officials.
One reason is Twitter’s aggressively pro-consumer privacy policies, which generally dictate that once any user revises or deletes their tweets, paid promotions or entire accounts, the company itself must do so as well. Twitter policy requires similar actions by private companies that pay for access to its real-time global data stream and repository of saved data for use in marketing and other commercial analysis.
The other reason is that Russian cyber tradecraft dictates that operatives immediately erase all of their digital breadcrumbs, according to former FBI Executive Assistant Director Robert Anderson and others familiar with Russian influence operations.
Thomas Rid, a Strategic Studies professor at Johns Hopkins University, blamed Twitter for making it easy for Russia and other bad actors to hijack its platform by failing to crack down on suspicious activity, and by then allowing them to cover their tracks simply by hitting the delete key.