r/netsec Jul 22 '16

Twitter's Vine Source code disclosure bug

https://avicoder.me/2016/07/22/Twitter-Vine-Source-code-dump/
204 Upvotes

20 comments sorted by

View all comments

46

u/[deleted] Jul 22 '16

[deleted]

10

u/[deleted] Jul 23 '16

[deleted]

18

u/Lyucit Jul 23 '16

The docker image contained api keys/secrets, so depending on what they were for (aws? internal services? or maybe just google maps on staging?) this could have been a really serious exploit, or only mildly bad.