I don't know why but what's happening to Parler doesn't feel right at all...
Parler Databases Disclosed
41–50 of 168 posts
Re: Parler Databases Disclosed
#42"Twilio put out at midnight last night. In that Press Release, Twilio accidentally revealed which services Parler was using. Turns out it was all of the security authentications that were used to register a user. This allowed anyone to create a user, and not have to verify an email address, and immediately have a logged-on account. Well, because of that access, it gave them access to the behind the login box API that…
Hijacking top comment. Here's the data: https://donk.sh/06d639b2-0252-4b1e-883b-f275eff7e792/ #noflylist is trending on Twitter. Guess a lot of jobs will soon be available in Silicon Valley.
That is just a list of parler public urls.
Re: Parler Databases Disclosed
#43"Twilio put out at midnight last night. In that Press Release, Twilio accidentally revealed which services Parler was using. Turns out it was all of the security authentications that were used to register a user. This allowed anyone to create a user, and not have to verify an email address, and immediately have a logged-on account. Well, because of that access, it gave them access to the behind the login box API that…
Hijacking top comment. Here's the data: https://donk.sh/06d639b2-0252-4b1e-883b-f275eff7e792/ #noflylist is trending on Twitter. Guess a lot of jobs will soon be available in Silicon Valley.
Just a disclaimer, in case anyone has forgotten about the great ion cannon from back in the day:
If any of these Twitter or Reddit posts are true then I would talk to a lawyer before participating.
Re: Parler Databases Disclosed
#44Oh come on, it was a honeypot from the beginning. Everybody in the last few days was talking about Parler -- they got more exposure than ever in their life. The takedown from AWS was announced a few days before, so more users could register. Parler was running a "Verified Parler citizen" (wat?) campaign, to gather more personal data. And now, hackers conveniently exposed everything. Hackers are unpredictable, you kno…
Yeah, sure buddy. Financed by the Mercers[1], are you kidding me. [1] https://edition.cnn.com/2020/11/15/media/rebekah-mercer-parl...
So what? The operation could have been approved only in the last few weeks or so. It is this "account verification" thing that convinced me. Even Facebook does not encourage you to upload a driving license, ffs.
Re: Parler Databases Disclosed
#45If there is one lesson to be learned from these last few weeks it is that you can not rely on any external service if you do anything which goes against the dominant political narrative. I have never been on Parler's site so I can not check the veracity of their supposed implied or direct support for seditious acts but that does not seem to matter anyway, it is enough to stand accused to be considered a witch and burned at the stake.
Build your own is the device, keep your equipment on your own premises, make sure not to have single points of failure - that implies you need to have a backup access provider just in case your internet connection gets cancelled. Don't rely on electronic payment processors, you can use them but make sure to have a backup. Don't rely on a single bank, have multiple accounts, preferably in more than one country.
It is a sad thing that it has to come to this but I think we'll eventually end up with politicised service institutions which cater to "progressives", others which cater to "conservatives". They won't state this directly but it will be known that a conservative builder is better of at this bank and that insurance company, he'll prefer to buy this coffee and that brand of razor, etc. A shame, really, the more divided society becomes, the harder it will be to find a common cause when such is needed, e.g. in case of a national emergency like an epidemic.
Re: Parler Databases Disclosed
#46I find it hard to believe this timing is a coincidence...
Nobody is claiming that it's a coincidence.
They're claiming that the "we're not providing services to Parler any more" public statements of Twilio unintentionally provided the information necessary to perform the hacks.
Re: Parler Databases Disclosed
#47AWS gives 5Gbps connectivity to instances, according to https://docs.aws.amazon.com/whitepapers/latest/ec2-networkin...
So, if the sum total of Parler was 70 Terabytes, as claimed... the transfer time would be 38 hours, if it was hosted on one instance... but it obviously wasn't. It was more likely only a matter of minutes.
This shows a new type of cloud hosting vulnerability. Your entire corporations infrastructure could be mirrored faster than you could notice.
Re: Parler Databases Disclosed
#48I don't know why but what's happening to Parler doesn't feel right at all...
While it does feel reactionary (if that's the right word) that the services are only now revoking doing business with Parler, they are within their rights to stop the contract one-sidedly. I'm actually fairly sure that in the contract they don't even have to state a reason, but don't quote me on that.
Something something free market.
Re: Parler Databases Disclosed
#49The explanation is a jumbled mess, but I think there are two key parts here:
1. Somebody reverse engineered the iOS app, which allowed them to access Parler's API and enumerate all of the content on the app
2. The Twilio shutdown affected SMS verification for new account registration, meaning people were now able to programmatically create many new user accounts which they could combine with #1 to scrape all the data without being rate limited