Summary (IA Generated)
Twitter is the latest social media site to allow users to experiment with posting disappearing content.
But a bug meant that fleets weren’t deleting properly and could still be accessed long after 24 hours had expired.
] The bug effectively allowed anyone to access and download a user’s fleets without triggering a notification that the user’s fleet had been read and by whom.
The implication is that this bug could be abused to archive a user’s fleets after they expire.
] But even after the 24 hours elapsed, the server would still return links to fleets that had already disappeared from view in the Twitter app.
] ‘We’re aware of a bug accessible through a technical workaround where some Fleets media URLs may be accessible after 24 hours.
] Twitter acknowledged that the fix means that fleets should now expire properly, it said it won’t delete the fleet from its servers for up to 30 days.
We checked that we could still load fleets from their direct URLs even after they expire.