HexBrain

X / xAI · Report #97161

Can see private tweets via keyword searches on tweetdeck

Validstatus
3upvotes
16 Feb 2016disclosed

How it was found

I'm not the best at finding "why" this happened, but I am pretty sure it's not supposed to. I was keyword searching "protonmail invite" and this came up even though the user was not on public nor did i follow him. I go to twitter.com and search for the exact same tweet, nothing comes up of his tweet. I logged into a different tweetdeck account - I can still see the tweet by searching for it, the user is on private and I do not follow him.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original