Live data from Hacker News

Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

vice.com

261–270 of 640 posts

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#261
post #254
post #246

Earlier quoted context omitted.

> You have likely confessed to a crime. What crime, exactly? I doubt what he did is any kind of crime. Honestly, some PMs would probably do the exact same thing (e.g. focusing on the "customer" by de-prioritizing "tech debt" to work on "higher priority" work). Edit: not to say it wasn't unethical, but the bar for criminal conduct is not the same.

> Basically a startup I worked for 12 years ago were fucking me big time on compensation so I purposefully argued against encrypting the database knowing how shoddy their security was. I didn't allow ANYONE to secure the backend. 4 years later, their database gets leaked and they get "acquired" for an "undisclosed amount" which usually means they sold themselves at a huge discount pending lawsuits. I don't know, the…

There isn't a very strong argument, then.

You have an anonymous comment that claims to have caused a data beach of unknown data from an unknown company. No users are even mentioned.

I feel like it's a strange thing to call out as a compelling argument.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#262
post #244

Earlier quoted context omitted.

You have no honor as a person and as an employee. And even worse, terrible problem solving skills. Did it occur to you the people you thought your fisting could have just replicated the same abuse elsewhere? Why not officially report them so they could have been on the book for these transgressions industry-wide? How was not quitting the shitty job on top of your list here?

are you kidding me? Do you think we have rule of law in Canada? Our laws are a joke compared to United States. Who the hell am I going to report to exactly? Who will take it seriously?

[deleted]

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#263

Earlier quoted context omitted.

Dates were represented as strings in "YYYYMMDD" format (so today would be "20210113053923") instead of UNIX timestamps Such a representation naturally avoids the Y2K38 problem, and could go beyond Y10K. It's traditional in Windows and DOS (neither of which have the Y2K38 problem) to store timestamps as a structure of fields. The other things you noted I agree with, however.

If they're using a javascript 53bit int representation for the seconds (or an int64_t cast down to a javascript big int) then it's a Y142711K problem, by which point the Imperium of Mankind will hopefully have settled on a more robust format.

That's how we ended up with the 2038 problem!

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#264
post #144

I genuinely believe that this is a case of incompetence willful or not. Who knows, maybe someone at parler knew and never raised the issue because they were disgruntled and actively shot down security measures....kind of like what I did before Basically a startup I worked for 12 years ago were fucking me big time on compensation so I purposefully argued against encrypting the database knowing how shoddy their securit…

I really hope they find you, prosecute you, and you never work in software again. Thanks for ruining a company for the countless others who were staying there, regardless of your experience, because they believed in what they were doing, and working towards their own personal goals. I don't know the details, but I know if someone did that to a company that I was invested in, I would be devastated.

Please go away, never to return. Go be a bartender or some other profession where being an asshole will get you ahead. Leave software to people who still care about ethics and have empathy for customers and coworkers.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#265
post #157
post #117

Earlier quoted context omitted.

> GPS coordinates—unlike most social media sites, Parler does not strip metadata from media its users upload, which, crucially, could be useful for law enforcement OH SHI- This is a colossal mess up, on epic proportions.

Indeed. The level of security failure was pretty incredible. They named media serially (So, pics/1.jpg, pics/2.jpg, etc.) and did not have any validation that you were allowed to access what you were grabbing so it was literally as easy as possible to grab everything. Oh, and did I mention that private messages were also fully accessible?

So Gab's strategy (fork Mastodon) looks solid for security but they hit performance issue because Mastodon isn't made for such scale.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#266

Earlier quoted context omitted.

You can build on Java + SpringBoot + MySQL + Linux + Docker Compose, then what else do you really need? I mean there's tons of technology stacks to choose from, but people get lazy and take the easy way out rather than learning to scale servers themselves. Get on Linode. It's base on Linux instances. If you build on Linux you are "free" and not "owned"

Linode and Digital Ocean docs also are leagues ahead of AWS. They cover a lot of stuff. I didn’t even know what fail2ban was when one of my VPS’s got hacked. Went through all their docs, they cover a lot and really helped me understand how much I didn’t know while at the same time providing guides on getting up to speed. AWS won’t tell you about those things because they sell you security, so you remain a dumbass abo…

[deleted]

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#267

Also embarrassing: https://www.vice.com/en/article/n7vqew/the-hacker-who-archiv... > donk_enby had originally intended to grab data only from the day of the Capitol takeover, but found that the poor construction and security of Parler allowed her to capture, essentially, the entire website. That ended up being 56.7 terabytes of data, which included every public post on Parler, 412 million files in all—including 150 m…

I'm curious where someone just gets 56.7 tb of storage that quickly.

I believe the person that pulled it down is a digital archivist. I’m sure she has plenty of storage laying around for such occasions.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#268
post #180

Earlier quoted context omitted.

Look the RCMP isn't going to raid a startup because they find human rights violation going on Sure we got watchdogs but those are meant for blue collar workers with union. > However, Canada is also filled with self-righteous descendants (I mean it culturally) of puritans who take it upon themselves to adjudicate others. I 100% AGREE. When I dated an 18yo everybody flipped and said I was the worst. > (Quebec excepted.…

I have to say... that having this conversation flip to you talking about your love for the youngest legally permissible women is very disconcerting.

"Don't feed egregious comments by replying; flag them instead."

https://news.ycombinator.com/newsguidelines.html

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#269
post #144

I genuinely believe that this is a case of incompetence willful or not. Who knows, maybe someone at parler knew and never raised the issue because they were disgruntled and actively shot down security measures....kind of like what I did before Basically a startup I worked for 12 years ago were fucking me big time on compensation so I purposefully argued against encrypting the database knowing how shoddy their securit…

We detached this subthread from https://news.ycombinator.com/item?id=25771209 and marked it offtopic.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#270
post #133
post #117

Earlier quoted context omitted.

> GPS coordinates—unlike most social media sites, Parler does not strip metadata from media its users upload, which, crucially, could be useful for law enforcement OH SHI- This is a colossal mess up, on epic proportions.

Due to the people involved, Parler is almost certainly not a honeypot setup by the FBI, CIA, or some other government organization. However some of the details that have leaked out over the last week made me wonder how little of the site would have changed if that was the intended purpose.

this is true "female body inspector" shirt clientele though
Post reply on HN