I hope the rules of the contest allow disclosure. Until then, I only have this tweet to reference from June 3rd: http://twitter.com/XSSExploits/status/201974689

I hope the rules of the contest allow disclosure. Until then, I only have this tweet to reference from June 3rd: http://twitter.com/XSSExploits/status/2019746890 http://twitter.com/XSSExploits/status/2019746890 "alternatively- add a device to the auth list and wala ;)" [edit: I should note that XSSExploits seems to be the twitter account for the company that won the contest)