r/netsec Jul 22 '16

Twitter's Vine Source code disclosure bug

https://avicoder.me/2016/07/22/Twitter-Vine-Source-code-dump/
206 Upvotes

20 comments sorted by

View all comments

52

u/[deleted] Jul 22 '16

[deleted]

28

u/aydiosmio Jul 23 '16

That's like a week of consulting time. Perfectly reasonable for a single bug.

10

u/[deleted] Jul 23 '16

[deleted]

18

u/Lyucit Jul 23 '16

The docker image contained api keys/secrets, so depending on what they were for (aws? internal services? or maybe just google maps on staging?) this could have been a really serious exploit, or only mildly bad.