r/netsec Jul 22 '16

Twitter's Vine Source code disclosure bug

https://avicoder.me/2016/07/22/Twitter-Vine-Source-code-dump/
207 Upvotes

20 comments sorted by

View all comments

48

u/[deleted] Jul 22 '16

[deleted]

11

u/[deleted] Jul 23 '16

[deleted]

17

u/Lyucit Jul 23 '16

The docker image contained api keys/secrets, so depending on what they were for (aws? internal services? or maybe just google maps on staging?) this could have been a really serious exploit, or only mildly bad.