> > Within two days, we closed the vulnerability "Within two days, we closed the vulnerability, stopped the attack, and secured people’s accounts by resetting

> > Within two days, we closed the vulnerability "Within two days, we closed the vulnerability, stopped the attack, and secured people’s accounts by resetting the access tokens for people who were potentially exposed. As a precaution, we also turned off “View As.” The last sentence could mean they disabled the feature and then spent two days fixing the vulnerability before re-enabling it. It's not clear though, maybe this is just wishful thinking on my part.