Has Facebook or anybody else said anything about what the underlying bug was? Missing permission check, incorrect logic, problem in error condition ... ? Thei

Has Facebook or anybody else said anything about what the underlying bug was? Missing permission check, incorrect logic, problem in error condition ... ? Their security model is so complex that I'd expect the code to be a nightmare ... and they introduce functionality at such a fast pace