> I'd love to read a follow up on what the bug was that intermittently permitted unauthorised access to the APIs I would, too. Not sure we will ever learn. May

> I'd love to read a follow up on what the bug was that intermittently permitted unauthorised access to the APIs I would, too. Not sure we will ever learn. Maybe a load balancer config that inadvertently included "test" backends which didn't check authorization?