Twitter Still Not Talking About Two-Step Authentication

Twitter's head of security Bob Lord gave a talk at Hack in the Box 2013 Amsterdam describing Twitter's efforts to nurture a security culture inside the company. In the light of the recent attack that resulted in 250,000 accounts being possibly compromised, security is a hot topic at Twitter.

It's not just internal security, Twitter promised to beef up security for users as well. One obvious way of doing that is by enabling two-step or two-factor authentication. Several other large companies, starting with Google, have done that already.

Twitter is working on it, we know this thanks to a job posting for a security engineer which specifically listed two-factor authentication technology. But Twitter itself hasn't actually said anything officially about this. At Hack in the Box, we had a chance to ask Lord about this, whether Twitter is building a two-factor authentication system and how it is coming along.