Search

How Vine's Entire Source Code Was Online for Anyone to See

Advertisement
Highlights
  • The ethical hacker was taking part in Twitter's HackerOne programme
  • The hacker gained access to source code through a Docker image
  • The bug was fixed by website within 5 minutes of flaw's demonstration
How Vine's Entire Source Code Was Online for Anyone to See
Hackers are known to be notorious. They like to find out all the vulnerabilities that various sites possess and depending on their intention, they use this knowledge to either create nuisance for the website owners or inform them about the loopholes to help make the site safer.

The makers of video-clip sharing site Vine, currently owned by Twitter, should be grateful that ethical hacker known by the name 'avicoder' chose to be the latter sort when he found a way to download Vine's entire source code.

For those who are unaware about the subject, a source code for website usually contains confidential information and access to it can leave the site extremely vulnerable to attacks that can potentially even destroy it.

In this case, 'avicoder' was just looking at the potential security flaws without any ill intentions and in his blog post, he explained the entire flaw and how he gained the access to the site's source code through its Docker image, which should ideally have been private but was publicly available. With the image, he was able to run the service locally on his machine.

"I was able to see the entire source code of vine, its API keys and third party keys and secrets. Even running the image without any parameter, was letting me host a replica of VINE locally," the hacker said in his blog post.

On March 31, avicoder demonstrated a full exploitation of the security flaw to Twitter as part of its HackerOne bounty programme and the site then fixed the bug in around 5 minutes. The hacker was rewarded a bounty of $10,080(roughly Rs. 6,73,000) for informing the site about this flaw.

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

 
Show Full Article
Please wait...
Advertisement

Related Stories

Popular Mobile Brands
  1. Oppo Reno 14FS 5G Design and Specifications Leaked: Check Expected Price
  1. Oppo Reno 14FS 5G Price, Design and Specifications Leaked Ahead of Anticipated Debut
  2. Samsung Galaxy A07 Listed on Google Play Console With Design, Key Specifications: Report
  3. Microsoft SharePoint Hack: Probe on Whether Chinese Hackers Found Flaw via Alert
  4. Samsung Reportedly in Talks With OpenAI, Perplexity to Offer Gemini AI Alternatives on Galaxy S26 Series
  5. Redmi 15 Design Renders, Specifications Leaked; Tipped to Arrive in Three Colourways
  6. Google Pixel 10 Pro, Pixel 10 Pro XL Spotted in Moonstone Colourway Alongside Pixel Buds 2a and Pixel Watch 4
  7. Meta Names ChatGPT Co-Creator Shengjia Zhao as Chief Scientist of Superintelligence Lab
  8. Who-Fi: An AI-Powered Wi-Fi Technology That Can Identify and Track Individuals Without Cameras
  9. NASA’s X-59 Moves Closer to First Flight with Advanced Taxi Tests and Augmented Vision
  10. Unusual Plasma Waves Above Jupiter’s North Pole Can Possibly Be Explained
Gadgets 360 is available in
Download Our Apps
App Store App Store
Available in Hindi
App Store
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.
Trending Products »
Latest Tech News »