I keep forgetting that the other teams at Google also find vulns & adopted the same disclosure policy. 
-
-
-
Confirmed, not Project Zero - don't want to name the engineer though since they're semi-anon in the issue tracker.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.