Singh reported the issue to Twitter in March. Soon after, the company fixed the flaw and gave him a reward of ,080 **through the bug bounty startup ******One.*
Singh, who goes by the pseudonym "avicoder," says he has hunted down 15 bugs in Twitter so far. He found this particular security hole while investigating vulnerabilities with Censys.io, a network-scanning search engine. He discovered that he was able to download Vine's entire source code through a public docker image. Read more...