HexBrain

X / xAI · Report #664038

protected Tweet settings overwritten by other settings

Validstatus
mediumseverity
178upvotes
1 Jan 2020disclosed

How it was found

protected tweet settings will be disabled without the account owner's knowledge

step for reproduction

1.Log in to an account with unprotected tweets on the Android app. 2. Log in to the same account on mobile.twitter.com and turn on protected tweets. 3. Confirm that the account's tweets are protected. 4. In the Android app, go to the NOTIFICATION the click for ON 5. The account's tweets are now unprotected.

==I have deleted all data (stored data and cache), so you don't need to save any cache or history!==

Impact

your tweet not protected

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original