Live data from Hacker News

Wikimedia narrows down the app sendin 90M requests to a pic of flower

phabricator.wikimedia.org

11–20 of 105 posts

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#11
> 12. By this time, we had isolated the app and were convinced that this is the one that is fetching the image on startup. We could not find the image anywhere in the app, confirming our theory that it fetches the image but does not display it.

The analysis stops right when things start to become interesting. I was hoping there'd be a decompiled code snippet to see what the app in question is actually doing with the image, since it's not displaying it.

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#12
> [...] We will thus hold back the banning of the url for now, awaiting for confirmation of the desired effect to reduce the potential harmful impact on the application users. Given how much "sample code" we found around the internet using that url, it might still be a good idea to merge the patch later just to prevent this from happening again.

Looks like a case that the developers carelessly copied and pasted some "sample code" into the app...

> [...] it seems that there is no good way to get in touch with them through email (I sent an email to all publicly available channels, only to get back an autoresponder that assumes I'm an user of the app and asking for my phone number). I eventually resorted to DM their CEO on twitter.

Resorting to Twitter for support is increasingly common. The importance of having an "abuse@" email (and possibly some social media bots to DM all sysops when a mail arrives)...

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#14

> it is a popular chat/social media mobile app used in India Indians of Hacker News, what are the likely candidates?

Considering that this seems to have been code accidentally left in while copy pasting from a tutorial, it's very hard to say, without doing the exact same investigation the Wikimedia team did.

There are a lot of apps that have launched in India around that time frame with huge numbers of users thanks to nationalistic rhetoric. They are terrible apps, but they are made in India terrible apps, and that apparently is enough to get a large following in India of late.

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#15

> it is a popular chat/social media mobile app used in India Indians of Hacker News, what are the likely candidates?

ShareChat may be? Or some video apps like TikTok

Moj? That was the seemingly most viable TikTok alternative that cropped up.

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#16

TL;DR The thread doesn't name the specific app, but it's Indian, likely a social Android app, probably Say Namaste or Mutton TV. The right app was found by installing apps and checking the connection logs.

Wasn't say namaste. I suggested that within the thread and contacted them, but ssingh has said it's not them.

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#18

Earlier quoted context omitted.

Wikimedia is simply trying to be polite and not to publicly shame the company.

It could provoke an angry mob, which doesn't help anybody.

Given that it doesn't display it, and that the image u.r.i. is frequently used in example code rather than something with example.com, it was almost certainly an innocent mistake of copying example code.

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#19
post #7

Earlier quoted context omitted.

Any idea why they don't name the app?

Wikimedia is simply trying to be polite and not to publicly shame the company.

In addition to that, one of the culprits here is a widespread sample code that was carelessly copied to a popular app. Shaming does penalize the other culprit but not that one.
Post reply on HN