• Peiter Zatko, former head of security at Twitter, speaks before the Senate Judiciary Committee on data security at the social media company on Capitol Hill in Washington. Getty Images / AFP
    Peiter Zatko, former head of security at Twitter, speaks before the Senate Judiciary Committee on data security at the social media company on Capitol Hill in Washington. Getty Images / AFP
  • Mr Zatko claims that Twitter's widespread security failures pose a security risk to users' privacy and information and could potentially endanger national security. Getty Images / AFP
    Mr Zatko claims that Twitter's widespread security failures pose a security risk to users' privacy and information and could potentially endanger national security. Getty Images / AFP
  • Mr Zatko speaks to senators about security at Twitter. Getty Images / AFP
    Mr Zatko speaks to senators about security at Twitter. Getty Images / AFP
  • A small group listens as Mr Zatko speaks. Getty Images / AFP
    A small group listens as Mr Zatko speaks. Getty Images / AFP
  • Lindsey Graham and Dick Durbin converse during a Senate hearing with Mr Zatko in Washington. Bloomberg
    Lindsey Graham and Dick Durbin converse during a Senate hearing with Mr Zatko in Washington. Bloomberg
  • Mazie Hirono speaks during the Senate Judiciary Committee hearing. Bloomberg
    Mazie Hirono speaks during the Senate Judiciary Committee hearing. Bloomberg
  • Jon Ossoff of Georgia speaks during the hearing, in which both Democrats and Republicans questioned the whistleblower. Bloomberg
    Jon Ossoff of Georgia speaks during the hearing, in which both Democrats and Republicans questioned the whistleblower. Bloomberg
  • Richard Blumenthal of Connecticut speaks with Twitter whistleblower Mr Zatko. Bloomberg
    Richard Blumenthal of Connecticut speaks with Twitter whistleblower Mr Zatko. Bloomberg
  • Marsha Blackburn of Tennessee speaks during the hearing. Bloomberg
    Marsha Blackburn of Tennessee speaks during the hearing. Bloomberg
  • John Kennedy, a Republican from Louisiana, shakes hands with Mr Zatko at the hearing. Bloomberg
    John Kennedy, a Republican from Louisiana, shakes hands with Mr Zatko at the hearing. Bloomberg
  • This was Mr Zatko's first public appearance since making his explosive allegations against the social media company. Bloomberg
    This was Mr Zatko's first public appearance since making his explosive allegations against the social media company. Bloomberg
  • Mr Zatko told the US Congress that the platform ignored his security concerns, as its shareholders decide whether to approve a $44 billion takeover deal that Elon Musk is trying to exit. AFP
    Mr Zatko told the US Congress that the platform ignored his security concerns, as its shareholders decide whether to approve a $44 billion takeover deal that Elon Musk is trying to exit. AFP

Twitter whistleblower warns of 'ticking bomb' of security risks


  • English
  • Arabic

Twitter whistleblower Peiter “Mudge” Zatko told the US Senate on Tuesday that the company's failure to address risks was a “ticking bomb” for national security.

“When an influential media platform can be compromised by teenagers, thieves and spies, and the company repeatedly creates security problems on their own, this is a big deal for all of us,” he told the Senate judiciary committee.

A trial starts next month to determine whether Elon Musk's $44 billion deal to acquire Twitter should be completed.

The social media company's shareholders on Tuesday voted to approve the Tesla founder's merger agreement.

Mr Zatko told senators that the executive leadership at Twitter had failed to respond to security concerns because of a lack of competency and because the goal was to give priority to profits.

The company's leadership is “misleading the public, lawmakers, regulators and even its own board of directors”, he said.

Twitter was also more than a decade behind the industry's best security standards, Mr Zatko said.

One issue that was not discussed during the hearing was whether Twitter is accurately counting its active users.

Mr Musk has said without evidence that many of the platform's 238 million daily users are spam bots.

The Delaware judge overseeing the case ruled last week that he could include new evidence related to Mr Zatko's allegations.

During the hearing Mr Musk tweeted a popcorn emoji, suggesting he was tuned into the day's proceedings.

Mr Zatko was the head of security at Twitter until he was fired this year for what the company called “ineffective leadership and poor performance”.

The company also said his claims were designed to harm the company. Mr Zatko's claims have not been corroborated.

He filed a whistleblower complaint with Congress, the Justice Department and other federal agencies in July, accusing Twitter of falsely claiming it had enacted stronger security measures to protect user privacy.

Elon Musk and Twitter are heading to trial in October on whether the social media company can force the billionaire to go through with his $44 billion takeover. Reuters
Elon Musk and Twitter are heading to trial in October on whether the social media company can force the billionaire to go through with his $44 billion takeover. Reuters

Disclosures from Mr Zatko also showed that at least one Chinese agent is employed at the company, Chuck Grassley, a Republican US senator from Iowa, said in his opening remarks during a hearing on Tuesday.

The disclosures “paint a disturbing picture of a company that’s solely focused on profits at any expense”, Mr Grassley said.

He said Twitter chief executive Parag Agrawal was invited to the hearing to respond to the allegations, but declined for what he claimed to be fear that it would interfere with the company's civil litigation against Mr Musk.

Agencies contributed to this report

Price, base / as tested From Dh173,775 (base model)
Engine 2.0-litre 4cyl turbo, AWD
Power 249hp at 5,500rpm
Torque 365Nm at 1,300-4,500rpm
Gearbox Nine-speed auto
Fuel economy, combined 7.9L/100km

Profile

Co-founders of the company: Vilhelm Hedberg and Ravi Bhusari

Launch year: In 2016 ekar launched and signed an agreement with Etihad Airways in Abu Dhabi. In January 2017 ekar launched in Dubai in a partnership with the RTA.

Number of employees: Over 50

Financing stage: Series B currently being finalised

Investors: Series A - Audacia Capital 

Sector of operation: Transport

Ten tax points to be aware of in 2026

1. Domestic VAT refund amendments: request your refund within five years

If a business does not apply for the refund on time, they lose their credit.

2. E-invoicing in the UAE

Businesses should continue preparing for the implementation of e-invoicing in the UAE, with 2026 a preparation and transition period ahead of phased mandatory adoption. 

3. More tax audits

Tax authorities are increasingly using data already available across multiple filings to identify audit risks. 

4. More beneficial VAT and excise tax penalty regime

Tax disputes are expected to become more frequent and more structured, with clearer administrative objection and appeal processes. The UAE has adopted a new penalty regime for VAT and excise disputes, which now mirrors the penalty regime for corporate tax.

5. Greater emphasis on statutory audit

There is a greater need for the accuracy of financial statements. The International Financial Reporting Standards standards need to be strictly adhered to and, as a result, the quality of the audits will need to increase.

6. Further transfer pricing enforcement

Transfer pricing enforcement, which refers to the practice of establishing prices for internal transactions between related entities, is expected to broaden in scope. The UAE will shortly open the possibility to negotiate advance pricing agreements, or essentially rulings for transfer pricing purposes. 

7. Limited time periods for audits

Recent amendments also introduce a default five-year limitation period for tax audits and assessments, subject to specific statutory exceptions. While the standard audit and assessment period is five years, this may be extended to up to 15 years in cases involving fraud or tax evasion. 

8. Pillar 2 implementation 

Many multinational groups will begin to feel the practical effect of the Domestic Minimum Top-Up Tax (DMTT), the UAE's implementation of the OECD’s global minimum tax under Pillar 2. While the rules apply for financial years starting on or after January 1, 2025, it is 2026 that marks the transition to an operational phase.

9. Reduced compliance obligations for imported goods and services

Businesses that apply the reverse-charge mechanism for VAT purposes in the UAE may benefit from reduced compliance obligations. 

10. Substance and CbC reporting focus

Tax authorities are expected to continue strengthening the enforcement of economic substance and Country-by-Country (CbC) reporting frameworks. In the UAE, these regimes are increasingly being used as risk-assessment tools, providing tax authorities with a comprehensive view of multinational groups’ global footprints and enabling them to assess whether profits are aligned with real economic activity. 

Contributed by Thomas Vanhee and Hend Rashwan, Aurifer

Saudi Cup race day

Schedule in UAE time

5pm: Mohamed Yousuf Naghi Motors Cup (Turf), 5.35pm: 1351 Cup (T), 6.10pm: Longines Turf Handicap (T), 6.45pm: Obaiya Arabian Classic for Purebred Arabians (Dirt), 7.30pm: Jockey Club Handicap (D), 8.10pm: Samba Saudi Derby (D), 8.50pm: Saudia Sprint (D), 9.40pm: Saudi Cup (D)

Meatless Days
Sara Suleri, with an introduction by Kamila Shamsie
​​​​​​​Penguin 

UAE currency: the story behind the money in your pockets
What are the main cyber security threats?

Cyber crime - This includes fraud, impersonation, scams and deepfake technology, tactics that are increasingly targeting infrastructure and exploiting human vulnerabilities.
Cyber terrorism - Social media platforms are used to spread radical ideologies, misinformation and disinformation, often with the aim of disrupting critical infrastructure such as power grids.
Cyber warfare - Shaped by geopolitical tension, hostile actors seek to infiltrate and compromise national infrastructure, using one country’s systems as a springboard to launch attacks on others.

Living in...

This article is part of a guide on where to live in the UAE. Our reporters will profile some of the country’s most desirable districts, provide an estimate of rental prices and introduce you to some of the residents who call each area home. 

The specs: 2018 Nissan 370Z Nismo

The specs: 2018 Nissan 370Z Nismo
Price, base / as tested: Dh182,178
Engine: 3.7-litre V6
Power: 350hp @ 7,400rpm
Torque: 374Nm @ 5,200rpm
Transmission: Seven-speed automatic
​​​​​​​Fuel consumption, combined: 10.5L / 100km

Getting%20there%20and%20where%20to%20stay
%3Cp%3EFly%20with%20Etihad%20Airways%20from%20Abu%20Dhabi%20to%20New%20York%E2%80%99s%20JFK.%20There's%2011%20flights%20a%20week%20and%20economy%20fares%20start%20at%20around%20Dh5%2C000.%3Cbr%3EStay%20at%20The%20Mark%20Hotel%20on%20the%20city%E2%80%99s%20Upper%20East%20Side.%20Overnight%20stays%20start%20from%20%241395%20per%20night.%3Cbr%3EVisit%20NYC%20Go%2C%20the%20official%20destination%20resource%20for%20New%20York%20City%20for%20all%20the%20latest%20events%2C%20activites%20and%20openings.%3Cbr%3E%3C%2Fp%3E%0A
The burning issue

The internal combustion engine is facing a watershed moment – major manufacturer Volvo is to stop producing petroleum-powered vehicles by 2021 and countries in Europe, including the UK, have vowed to ban their sale before 2040. The National takes a look at the story of one of the most successful technologies of the last 100 years and how it has impacted life in the UAE.

Read part three: the age of the electric vehicle begins

Read part two: how climate change drove the race for an alternative 

Read part one: how cars came to the UAE

Countries recognising Palestine

France, UK, Canada, Australia, Portugal, Belgium, Malta, Luxembourg, San Marino and Andorra

 

Credit Score explained

What is a credit score?

In the UAE your credit score is a number generated by the Al Etihad Credit Bureau (AECB), which represents your credit worthiness – in other words, your risk of defaulting on any debt repayments. In this country, the number is between 300 and 900. A low score indicates a higher risk of default, while a high score indicates you are a lower risk.

Why is it important?

Financial institutions will use it to decide whether or not you are a credit risk. Those with better scores may also receive preferential interest rates or terms on products such as loans, credit cards and mortgages.

How is it calculated?

The AECB collects information on your payment behaviour from banks as well as utilitiy and telecoms providers.

How can I improve my score?

By paying your bills on time and not missing any repayments, particularly your loan, credit card and mortgage payments. It is also wise to limit the number of credit card and loan applications you make and to reduce your outstanding balances.

How do I know if my score is low or high?

By checking it. Visit one of AECB’s Customer Happiness Centres with an original and valid Emirates ID, passport copy and valid email address. Liv. customers can also access the score directly from the banking app.

How much does it cost?

A credit report costs Dh100 while a report with the score included costs Dh150. Those only wanting the credit score pay Dh60. VAT is payable on top.

Switching%20sides
%3Cp%3EMahika%20Gaur%20is%20the%20latest%20Dubai-raised%20athlete%20to%20attain%20top%20honours%20with%20another%20country.%0D%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EVelimir%20Stjepanovic%20(Serbia%2C%20swimming)%20%3C%2Fstrong%3E%0D%3Cbr%3EBorn%20in%20Abu%20Dhabi%20and%20raised%20in%20Dubai%2C%20he%20finished%20sixth%20in%20the%20final%20of%20the%202012%20Olympic%20Games%20in%20London%20in%20the%20200m%20butterfly%20final.%20%0D%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EJonny%20Macdonald%20(Scotland%2C%20rugby%20union)%20%3C%2Fstrong%3E%0D%3Cbr%3EBrought%20up%20in%20Abu%20Dhabi%20and%20represented%20the%20region%20in%20international%20rugby.%20When%20the%20Arabian%20Gulf%20team%20was%20broken%20up%20into%20its%20constituent%20nations%2C%20he%20opted%20to%20play%20for%20Scotland%20instead%2C%20and%20went%20to%20the%20Hong%20Kong%20Sevens.%20%0D%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ESophie%20Shams%20(England%2C%20rugby%20union)%20%3C%2Fstrong%3E%0D%3Cbr%3EThe%20daughter%20of%20an%20English%20mother%20and%20Emirati%20father%2C%20Shams%20excelled%20at%20rugby%20in%20Dubai%2C%20then%20after%20attending%20university%20in%20the%20UK%20played%20for%20England%20at%20sevens.%20%0D%3C%2Fp%3E%0A
Updated: September 13, 2022, 7:52 PM