Amer Owaida, Security Writer at ESET explains that in a bizarre turn of events the secret list was exposed online for three weeks, allowing anyone to access it without any kind of authentication.