Maybe twitter should hire tptacek's company for a security eval.