Twitter says its source code was leaked by an unknown user on the popular open-source code collaboration platform GitHub. The social media giant requested a
autoevolution 9 Jan 2021, 18:19 UTC ·
by 1 photo
The North American unit belonging to the Japanese carmaker was using a Bitbucket Git server “secured” with the default login credentials (username:
admin, password:
admin), thus exposing the source code of mobile apps, the internal core mobile library, sales and marketing research tools and data, client services, the dealer portal, and even tools related to connected car services.
The source code was discovered by software engineer Tillie Kottmann, who took to Twitter to reveal the embarrassing security configuration, with the data eventually being offered as part of a torrent link on various trackers. The pack contained close to 20 GB of data originating from Nissan’s Git server.