Daniel Micay on Twitter: "@dada78641 @killedbygoogle I wouldn't be surprised if they made a blog post about how they secured it after the change is fully deployed and they don't have remaining services using the old system. I fully understand how them changing this is disruptive but I do really think this is important to fix." / Twitter

This Tweet is from a suspended account. Learn more

Daniel Micay

@DanielMicay

Jun 24, 2021

Replying to

@killedbygoogle

The previous system had overly weak protection against gaining access to arbitrary unlisted content. I don't think the approach they're taking to deploying a security enhancement is the wrong one.

2

Replying to

and

Do you know if anything is actually known about this apparent vulnerability? Like I guess maybe the urls are pseudorandomly generated using channel id or something?

1

Replying to

and

I wouldn't be surprised if they made a blog post about how they secured it after the change is fully deployed and they don't have remaining services using the old system. I fully understand how them changing this is disruptive but I do really think this is important to fix.

11:56 PM · Jun 24, 2021Twitter Web App

Conversation