Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Parler Databases Disclosed

twitter.com

Post reply on HN
Print view View original

161–168 of 168 posts

Re: Parler Databases Disclosed

#161

Post by Tostino »

cycrutchfield wrote: post #49

The explanation is a jumbled mess, but I think there are two key parts here: 1. Somebody reverse engineered the iOS app, which allowed them to access Parler's API and enumerate all of the content on the app 2. The Twilio shutdown affected SMS verification for new account registration, meaning people were now able to programmatically create many new user accounts which they could combine with #1 to scrape all the data…

I don't believe they were actually rate limiting per account regardless. The "hacker" Set later in the day on Twitter that there was a misunderstanding that the account creation script was related at all to the data scraping. Just that it was actually possible, but unnecessary because they didn't rate limit per account.

Re: Parler Databases Disclosed

#162

Post by dang »

Benjmhart wrote: post #23
osgovernment wrote: post #9

Earlier quoted context omitted.

[flagged]

Cope harder loser.

Obviously you can't post like this or https://news.ycombinator.com/item?id=25710342 to HN, regardless of how wrong someone is or you feel they are. We ban accounts that do this.

I'm not going to ban you right now, because although you've broken the site guidelines in the past, it looks like you've mostly posted good comments. But if you don't start following them, we'll have to ban you next time. If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the spirit of this site to heart, we'd be grateful.

Re: Parler Databases Disclosed

#163

Post by rbanffy »

nunez wrote: post #139
rbanffy wrote: post #87

Earlier quoted context omitted.

> this leaves a really bad taste with how Twilio handled the situation AS A BUSINESS. I wouldn't blame Twilio. It's entirely Parler's fault they allowed an unvalidated account to successfully register and log in. Of course, it's also entirely the intruder's fault they exploited the wide open security hole.

Agreed. It’s a bit of column A and column B. Twilio shouldn’t have disclosed the services that Parler were using. Parler should not have allowed unverified users to log in ESPECIALLY if they’re dealing with PII. (Verified Parlers submitted photos of their licenses.) Either way, this feels like something that will end in a lawsuit.

I doubt Parler will survive long enough.

Re: Parler Databases Disclosed

#164

Post by SideburnsOfDoom »

nkoren wrote: post #129
traveler01 wrote: post #123

Earlier quoted context omitted.

> While it does feel reactionary (if that's the right word) that the services are only now revoking doing business with Parler, they are within their rights to stop the contract one-sidedly. I'm actually fairly sure that in the contract they don't even have to state a reason, but don't quote me on that. Yeah most of these services are doing that to avoid being associated with Parler and these Trump movements. But it…

Yep, there are no good choices here. Parler is an organizing venue for Trump supporters attempting to overturn a democratic election and/or storm the capitol, which also has a rather anti-democratic feel to it, no? So you can think of it as a trolley problem with "democracy" strapped to both sets of tracks. Since democracy will be a casualty, to one extent or another, in both the "do nothing" and "do something" optio…

> the service providers must ask themselves: which scenario will hurt democracy worse

Adendum: why _must_ they ask themselves that? Do you think Facebook ever has acted in that way? Do you think that Fox News does?

It would be nice, but recognise that none of these are entities dedicated to maximising democracy. They have been behaving otherwise for decades. They won't spontaneously change of their own accord.

https://www.nytimes.com/2018/11/06/technology/myanmar-facebo...

Re: Parler Databases Disclosed

#165

Post by leafen »

eyko wrote: post #134
dsr_ wrote: post #113

Earlier quoted context omitted.

Electricity is a public utility, not a right. A public utility is a regulated entity that must supply anyone in their region who follows the rules -- and, in general, if you break the rules but then fix your behavior, they must allow you service again. The existence of a public utility does not forbid a private competitor, but the scale advantage of a public utility is generally overwhelming unless you have specializ…

It would be useful to clarify what "follow the rules" here means, in the USA (for us non-USA audiences). It probably varies in different countries, but in most cases doesn't it simply refer to fair usage? Make your payments in time and don't put excessive strain on the grid by powering your inter-dimensional portal. Does ideology or clandestine activity matter in how you use electricity? Of course, a court order coul…

iirc a county in california recently switched off some youtubers' electric because they were hosting big get togethers despite social distancing rules. which seems to go a bit beyond fair usage. not sure if it was 100% legally sound, but they probably had to be at least reasonably confident in the move, since they could reasonably expect PR

Re: Parler Databases Disclosed

#166

Post by scotty79 »

scotty79 wrote: post #19

Wait. So how did it work exactly? Why would you get to reset password after clicking "I forgot password?" I thought password reset flow is initiated from the email link not from "Forgot password" link and just paused till email link is clicked.

Apparently nothing like that actually happened https://www.wired.com/story/parler-hack-data-public-posts-im...

Al they got was just published data that they easily scraped.

Re: Parler Databases Disclosed

#167

Post by nikolay »

Cthulhu_ wrote: post #50
nikolay wrote: post #12

Earlier quoted context omitted.

It just a scare tactic to discourage the use of Parler. It's so poorly written that it sounds like a kid.

Not that they need much to discourage Parler, lol.

I mean, to scare off the existing users of Parler, but, I guess, shutting the whole thing down by the Big Tech Cartel was more efficient. I just don't get how people get away with abusing an undocumented API to fetch and publish PII - something that's illegal. Remember how people did the same with with T-Mobile and got into a huge trouble? Until we keep having these double standards, there always will be polarization and tensions! And how is this mess good for America and the world?!

Re: Parler Databases Disclosed

#168

Post by saargrin »

Renaud wrote: post #115
saargrin wrote: post #101

Earlier quoted context omitted.

that would be cool if they also implemented the same policy towards other violent/inciteful players and terror organizations

They should, and many do. Once you start peddling in calls to violence against people, no just ideas, then you should lose access to your platform and well deserve to be investigated. Being complacent with these things gets people killed. You can have free speech all you want but are also responsible for what you say. Free speech doesn't mean you get a free pass without consequences.

except their efforts are largely focused and selective

switch to arabic language and you will see things that could be easily identified as violent propaganda,yet they stay up because FB censorship system is not interested in enforcing rules in that sector

from what i hear its pretty much the same for India

Post reply on HN