Lessons Learned from the Exposure of 1.5 Million Twitter Accounts

Those Gatsby days are however only stories however the spirit of discovering massive security flaws is all in all an adventure for many. A few weeks ago, Chang realized he had a big one on his hands when he found himself peering into the Twitter customer support network. With a few manipulations he had gained access to Twitter's support network - a community with more people in it than most any online service.

What happened

Here's what happened. Chang received a reply to a support ticket that he had filed for one of his business accounts. The support desk needed more information. He opened the Twitter dashboard for open tickets. He did not see his ticket listed. Thinking nothing of it he looked at an old ticket and made the discovery he was looking at the account of someone else: