3 ms·
No, the security pages were put up after I talked to Bob. (Those are new pages and are about a week old. They were put up precisely because it wasn't easy for p
by ttol 16y ago
No, the security pages were put up after I talked to Bob. (Those are new pages and are about a week old. They were put up precisely because it wasn't easy for people to report security issues.). Also the headline wasn't written by me. Boston Innovation editors modified it. My original headline is on my website at waynechang.com. And yes, it was hard to get a hold of someone -- I spent two days. Emailing security@twitter.com was less obvious then, since emailing support@twitter.com sends back a form rejection letter (try it).
- tptacek 16y agoYou're right. The headline on your site is "How I Discovered A Security Vulnerability In Twitter"; the "I found another security vulnerability that impacted 1-1.5 million Twitter accounts." copy is in your subhed. My mistake.