> contained a bug, which allowed an attacker to log in to our development tier as well as escalate their access on the production version of stackoverflow.com.

> contained a bug, which allowed an attacker to log in to our development tier as well as escalate their access on the production version of stackoverflow.com. Why are the credentials for production granted to development systems?