Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

vice.com

Post reply on HN
Print view View original

191–200 of 640 posts

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#191

Post by missedthecue »

f430 wrote: post #161
Exmoor wrote: post #157

Earlier quoted context omitted.

Indeed. The level of security failure was pretty incredible. They named media serially (So, pics/1.jpg, pics/2.jpg, etc.) and did not have any validation that you were allowed to access what you were grabbing so it was literally as easy as possible to grab everything. Oh, and did I mention that private messages were also fully accessible?

I am convinced this was an inside job. There is simply no way someone can be this incompetent without willful intent.

Ever worked for a startup? This is what "move fast, break things" does.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#192

Post by developer2 »

kijin wrote: post #164
kevindurb wrote: post #97

Earlier quoted context omitted.

If I remember correctly mongo stores the id in “_id” and has a getter for “id” so maybe they just iterated all the keys of the model when they stringified their output

Elasticsearch, too. In either case, it looks like they're just piping raw backend responses to the API endpoint without removing unnecessary fields.

Yep, that's an indication of Elasticsearch being used (and not transforming documents to a standard representation that strips such fields).

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#193

Post by f430 »

kodah wrote: post #172
f430 wrote: post #144

I genuinely believe that this is a case of incompetence willful or not. Who knows, maybe someone at parler knew and never raised the issue because they were disgruntled and actively shot down security measures....kind of like what I did before Basically a startup I worked for 12 years ago were fucking me big time on compensation so I purposefully argued against encrypting the database knowing how shoddy their securit…

You have likely confessed to a crime. If not a crime, you have committed a serious software-related ethical violation and should not work in software again.

What is the bigger crime? Telling people to work 80 hours a week without overtime? Threatening female coworkers with bad reviews if they dont go on a date? Calling me racial slurs and stealing my lunch? I can go on and on my man you weren't there

I don't need to work in software, I have others work in it for me.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#194

Post by true_religion »

f430 wrote: post #180
excannuck wrote: post #165

Earlier quoted context omitted.

We have the Royal Canadian Mounted Police which is the same thing. A federal level police force tasked and empowered with investigating these types of crimes. We also have provincial level human rights courts And we do have labor watchdogs, again, the courts, and in Canada they lean very heavily towards workers in interpreting very strict labor laws. However, Canada is also filled with self-righteous descendants (I m…

Look the RCMP isn't going to raid a startup because they find human rights violation going on Sure we got watchdogs but those are meant for blue collar workers with union. > However, Canada is also filled with self-righteous descendants (I mean it culturally) of puritans who take it upon themselves to adjudicate others. I 100% AGREE. When I dated an 18yo everybody flipped and said I was the worst. > (Quebec excepted.…

I have to say... that having this conversation flip to you talking about your love for the youngest legally permissible women is very disconcerting.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#195

Post by lovich »

f430 wrote: post #180
excannuck wrote: post #165

Earlier quoted context omitted.

We have the Royal Canadian Mounted Police which is the same thing. A federal level police force tasked and empowered with investigating these types of crimes. We also have provincial level human rights courts And we do have labor watchdogs, again, the courts, and in Canada they lean very heavily towards workers in interpreting very strict labor laws. However, Canada is also filled with self-righteous descendants (I m…

Look the RCMP isn't going to raid a startup because they find human rights violation going on Sure we got watchdogs but those are meant for blue collar workers with union. > However, Canada is also filled with self-righteous descendants (I mean it culturally) of puritans who take it upon themselves to adjudicate others. I 100% AGREE. When I dated an 18yo everybody flipped and said I was the worst. > (Quebec excepted.…

Is this a bit? You started off with admitting to crime and then start bringing up how you’re dating women young enough to make everyone upset with you, completely unrelated to the original post or your own criminal admission

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#196

Post by jpollock »

bitcoinmoney wrote: post #186
WClayFerguson wrote: post #168

I've been telling developers for years if you build your infrastructure on top of tons of 3rd party services like Google Cloud or AWS then you basically don't own it, and can be shut down any day, against your will. Web companies should build on "Linux" only, as their base platform, so they own everything above that. I was a fan of Parler but building on AWS was a huge mistake, and they should have realized they were…

Why can’t they just backup regularly and redeploy somewhere? Isn’t it as easy as backing up a DB and restoring?

When you build on top of "linux", yes. However, many cloud services are built on top of S3 or App Engine or other proprietary services.

This means that they can only be run on that provider.

They can be faster to develop, at the risk of not being able to move later.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#197

Post by dcgoss »

Talanes wrote: post #182
excannuck wrote: post #176

Earlier quoted context omitted.

That doesn't make sense....

Possibly a joke about their profile, which says they are selling a car and to comment an offer on any of their comments. If not, then I'm as lost as you are.

Look at the username

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#198

Post by f430 »

lovich wrote: post #195
f430 wrote: post #180

Earlier quoted context omitted.

Look the RCMP isn't going to raid a startup because they find human rights violation going on Sure we got watchdogs but those are meant for blue collar workers with union. > However, Canada is also filled with self-righteous descendants (I mean it culturally) of puritans who take it upon themselves to adjudicate others. I 100% AGREE. When I dated an 18yo everybody flipped and said I was the worst. > (Quebec excepted.…

Is this a bit? You started off with admitting to crime and then start bringing up how you’re dating women young enough to make everyone upset with you, completely unrelated to the original post or your own criminal admission

Look man different countries have different age of consent. I'm not about to incriminate myself here.

For you people who think the RCMP is going to bust down my condo door you are mistaken. I didn't mention where I worked.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#199

Post by simlevesque »

f430 wrote: post #158
philsnow wrote: post #154

Earlier quoted context omitted.

So report them to the FBI or local equivalent for the "human rights violations", instead of engaging in willful negligence and then fucking bragging on the internet about how brave you were? I doubt there were any "human rights violations", as reporting them seems like a much better (and much easier) way to screw over the people involved than not encrypting the database.

We don't have FBI in Canada Nor do we have any labour watchdogs I'd like to live in a country where developers were protected.

Are you joking ? I live in Canada and we do have ways to fight workplace discrimination. But instead you decided to do something wrong, you are part of the problem. I hope I never have to work with someone like you.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#200

Post by margaretdouglas »

WClayFerguson wrote: post #178
gameswithgo wrote: post #175

Earlier quoted context omitted.

according to parler they did what you suggest

Parler used AWS. I suggested avoid AWS. What am I missing. I might be missing something.

AWS is a suite of services. One of those is EC2, which is just virtual servers hosted by Amazon/AWS. A virtual server is no different than a physical server from the perspective of the guest operating system, regardless of if it is Linux or not. Linux is just the software running on the server, it has nothing to do with ownership. The only way "running on AWS" is problematic is if you tied yourself to their non-generic services like ECS or Beanstalk.

tl/dr: building on AWS and building on Linux are not mutually exclusive. One represents hardware the other software.

Post reply on HN