So if I&#x27;m reading this correctly, this massively compromising attack was made possible by doing a little research? e.g. Knowing about one of the admin services used by Instagram, looking in that admin&#x27;s public repo, and musing whether Instagram had bothered to change the secret key from the default entry in the repo?<p>We&#x27;ll probably never see a post mortem on this but it&#x27;d be interesting to hear how this got moved to production...: was the Sensu admin panel a nice scaffold for internal use and by the time they decided to make it remote, everyone just assumed the secret key had been changed at some point?