3 ms·
> "This bug resulted from an update to our code in June 2021. When we learned about this, we immediately investigated and fixed it. At that time, we had no evid
by throwoutway 4y ago
> "This bug resulted from an update to our code in June 2021. When we learned about this, we immediately investigated and fixed it. At that time, we had no evidence to suggest someone had taken advantage of the vulnerability."
They did not have the logs to actually prove whether it had been performed or not? Gee
- jjulius 4y agoForgive my ignorance (and far be it from me to typically defend Twitter), but, sure? Not every vulnerability is part of a system that is being logged. And by virtue of a zero-day exploit being an exploit that is unknown to the owner of the code, well, then yeah... of course not.
- throwoutway 4y agoAccess logs are a pretty typical thing, regardless of what system. Also a best practice. And also part of many compliance frameworks.