Live data from Hacker News

Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

vice.com

271–280 of 640 posts

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#271

Earlier quoted context omitted.

Why can’t they just backup regularly and redeploy somewhere? Isn’t it as easy as backing up a DB and restoring?

If you restrict yourself to only the set of AWS functionality that is common to all hosting providers, you can do that. But not only is that very hard to do, it basically negates the premise of AWS in general. There are also lots of areas that you can’t do this, such as IAM and network rules, so you have to build an abstraction on top of it that’ll work with open source tools on a separate host.

Premise of AWS for me: reasonably priced (not cheap!) linux VM, close to the backbone, essentially total control of the VM, easy provisioning of new disk storage when required (i.e. EC2 with a smidgeon of EBS)

The rest of it? I think I understand why some systems need/want it, but no thanks.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#272
post #144

I genuinely believe that this is a case of incompetence willful or not. Who knows, maybe someone at parler knew and never raised the issue because they were disgruntled and actively shot down security measures....kind of like what I did before Basically a startup I worked for 12 years ago were fucking me big time on compensation so I purposefully argued against encrypting the database knowing how shoddy their securit…

I really hope they find you, prosecute you, and you never work in software again. Thanks for ruining a company for the countless others who were staying there, regardless of your experience, because they believed in what they were doing, and working towards their own personal goals. I don't know the details, but I know if someone did that to a company that I was invested in, I would be devastated. Please go away, nev…

Attacking another user like this will get you banned here, regardless of how wrong they are or you feel they are. Please review https://news.ycombinator.com/newsguidelines.html and stick to the rules when posting here. They don't stop applying in cases like this, and we're trying to avoid the online callout/shaming culture here.

https://hn.algolia.com/?query=online%20shaming%20by%3Adang&s...

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#273

Also embarrassing: https://www.vice.com/en/article/n7vqew/the-hacker-who-archiv... > donk_enby had originally intended to grab data only from the day of the Capitol takeover, but found that the poor construction and security of Parler allowed her to capture, essentially, the entire website. That ended up being 56.7 terabytes of data, which included every public post on Parler, 412 million files in all—including 150 m…

A different take on Parler's connection (or not) to the events of 6 Jan 2021: https://web.archive.org/web/20210112145206/https://greenwald...

he continues to be a shocking disappointment, the worst kind of contrarian. you gotta think snowden regrets going to him.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#274
post #180

Earlier quoted context omitted.

We have the Royal Canadian Mounted Police which is the same thing. A federal level police force tasked and empowered with investigating these types of crimes. We also have provincial level human rights courts And we do have labor watchdogs, again, the courts, and in Canada they lean very heavily towards workers in interpreting very strict labor laws. However, Canada is also filled with self-righteous descendants (I m…

Look the RCMP isn't going to raid a startup because they find human rights violation going on Sure we got watchdogs but those are meant for blue collar workers with union. > However, Canada is also filled with self-righteous descendants (I mean it culturally) of puritans who take it upon themselves to adjudicate others. I 100% AGREE. When I dated an 18yo everybody flipped and said I was the worst. > (Quebec excepted.…

You've posted way, way too many unsubstantive and flamebait comments to HN, including in this thread. The swerve here to a completely off-topic flamewar amounts to trolling. Please stop now.

https://news.ycombinator.com/newsguidelines.html

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#275
post #241

Earlier quoted context omitted.

I have to say... that having this conversation flip to you talking about your love for the youngest legally permissible women is very disconcerting.

what the hell is wrong with dating an 18 yo? I can't believe this puritanical bullshit in North America. In Japan you can legally date Jyoshi Kousei schoolgirls and nobody gives a damn. I'm not saying I'm into that, I SPECIFICALLY mentioned they were 18 and now everybody thinks I'm Jeffrey Epstein for christs sake I'm sick of puritans in this country judging people like me because they are jealous. They know their wi…

Just because it is legal does not mean it is not strange. Usually people frown upon such a large age gap not because it would be illegal to be in that relationship but because the difference in age, maturity, and life experience would make such pairings unconventional and often exploitative.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#276
post #261
post #254

Earlier quoted context omitted.

> Basically a startup I worked for 12 years ago were fucking me big time on compensation so I purposefully argued against encrypting the database knowing how shoddy their security was. I didn't allow ANYONE to secure the backend. 4 years later, their database gets leaked and they get "acquired" for an "undisclosed amount" which usually means they sold themselves at a huge discount pending lawsuits. I don't know, the…

There isn't a very strong argument, then. You have an anonymous comment that claims to have caused a data beach of unknown data from an unknown company. No users are even mentioned. I feel like it's a strange thing to call out as a compelling argument.

> You have an anonymous comment that claims to have caused a data beach of unknown data from an unknown company. No users are even mentioned.

I don't think you can even call it that, since he didn't cause the breach. It's hard to even liken it any employee repeatedly and deliberately leaving the door to a store unlocked, which eventually gets robbed. Since I get the impression the stuff he's talking about would have probably been inside some kind of perimeter defense.

IANAL, the best I can make of it from a legal perspective is some kind of negligence, but that's a tort, not a crime. So he may not have to worry so much about the RMCP, but rather losing his car to pay damages to his employer.

I think there's a compelling argument for an ethical violation, but I'm still not seeing a criminal one.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#277
post #161
post #157

Earlier quoted context omitted.

Indeed. The level of security failure was pretty incredible. They named media serially (So, pics/1.jpg, pics/2.jpg, etc.) and did not have any validation that you were allowed to access what you were grabbing so it was literally as easy as possible to grab everything. Oh, and did I mention that private messages were also fully accessible?

I am convinced this was an inside job. There is simply no way someone can be this incompetent without willful intent.

You'd be surprised how incompetent people can be when it comes to security. Nothing i have heard so far would really surprise me for a small startup with very rapid growth.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#278

Earlier quoted context omitted.

If you restrict yourself to only the set of AWS functionality that is common to all hosting providers, you can do that. But not only is that very hard to do, it basically negates the premise of AWS in general. There are also lots of areas that you can’t do this, such as IAM and network rules, so you have to build an abstraction on top of it that’ll work with open source tools on a separate host.

Premise of AWS for me: reasonably priced (not cheap!) linux VM, close to the backbone, essentially total control of the VM, easy provisioning of new disk storage when required (i.e. EC2 with a smidgeon of EBS) The rest of it? I think I understand why some systems need/want it, but no thanks.

Depends on what you’re doing.

At the scale $EMPLOYER works at, AWS built in services are key. Things like DynamoDB global tables are extremely hard to run on your own, and things similar to AuroraDB and Kinesis can be run on your own but they take up a lot of personnel hours better spent focusing on product. We could probably eliminate those services and self-run, but it would be an extremely unwise usage of company time and money.

But we also run services in multiple continents with the need to handle clients doing silly things like getting into airplanes and flying into another continent. Your situation might not benefit as much from AWS specific services, so YMMV.

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#279

Earlier quoted context omitted.

Perhaps Parler did not realize that being aligned with conservatism was grounds for deplatforming. I am sure they will learn as will the whole world.

Let's hope so! The more we diversify our social media consumption as a society the better off we all are. Well, other than Jack and Mark.

I didn't read Dorsey's actual tweets, but here's what the Guardian said about them:

>Dorsey underscored in his tweets a need for a new “open decentralized standard for social media”.

https://www.theguardian.com/technology/2021/jan/13/trump-twi...

Re: Pirate Bay founder thinks Parler’s inability to stay online is 'embarrassing'

#280

Also embarrassing: https://www.vice.com/en/article/n7vqew/the-hacker-who-archiv... > donk_enby had originally intended to grab data only from the day of the Capitol takeover, but found that the poor construction and security of Parler allowed her to capture, essentially, the entire website. That ended up being 56.7 terabytes of data, which included every public post on Parler, 412 million files in all—including 150 m…

I'm curious where someone just gets 56.7 tb of storage that quickly.

Im more curious how someone pulls down 56 terabytes in a very short period of time without sysadmins at parler noticing. I'm surprised they didn't unintentionally DoS them.
Post reply on HN