Gab Has Been Breached • Hacker News Board

Re: Gab Has Been Breached

#51

Post by millstone » Thu, Mar 04, 2021, 7:08 AM UTC

It doesn't seem right that the big players like Facebook and Twitter enjoy much better security. Is there really no open source offering that just gets this stuff right? A Twitter-in-a-box, like WordPress is a blog-in-a-box, but secure this time?

Apparently Gab used Mastodon. Is Mastodon intrinsically hard to secure?

Re: Gab Has Been Breached

#52

Post by zz_throwaway_zz » Thu, Mar 04, 2021, 7:09 AM UTC

dillondoyle wrote: post #31

totalZero wrote: post #15

Earlier quoted context omitted.

Thanks, and wow... he sounds like a perpetual drain on the energy and sanity of all of the people around him.

The stuff he is tweeting from the official Gab twitter is truly hellishly insane ! "As per my policy of not communicating with non-Christian and/or communist journos, I will not be replying to this non-story. " https://twitter.com/getongab/status/1366954798524887042

He's right though..

Re: Gab Has Been Breached

#53

Post by walrus01 » Thu, Mar 04, 2021, 7:09 AM UTC

dt3ft wrote: post #46

If you just want to know how the breach[1] happened: it was SQL injection, where string interpolation was used to construct a query, rather than use parametrized queries. [1] https://arstechnica.com/gadgets/2021/03/rookie-coding-mistak...

drop table fash;

Re: Gab Has Been Breached

#54

Post by [deleted] » Thu, Mar 04, 2021, 7:10 AM UTC

[deleted]

Re: Gab Has Been Breached

#55

Post by wyoh » Thu, Mar 04, 2021, 7:10 AM UTC

Welp, time to change my passwords I guess.

Re: Gab Has Been Breached

#56

Post by gkoberger » Thu, Mar 04, 2021, 7:11 AM UTC

dillondoyle wrote: post #31

totalZero wrote: post #15

Earlier quoted context omitted.

Thanks, and wow... he sounds like a perpetual drain on the energy and sanity of all of the people around him.

The stuff he is tweeting from the official Gab twitter is truly hellishly insane ! "As per my policy of not communicating with non-Christian and/or communist journos, I will not be replying to this non-story. " https://twitter.com/getongab/status/1366954798524887042

Just for context, the situation being referenced here is that Gab claims Donald Trump is verified on the platform but the address associated with the account is really the CEO's email (Kuhcoon was his YC company).

Re: Gab Has Been Breached

#57

Post by Intermernet » Thu, Mar 04, 2021, 7:11 AM UTC

dt3ft wrote: post #46

If you just want to know how the breach[1] happened: it was SQL injection, where string interpolation was used to construct a query, rather than use parametrized queries. [1] https://arstechnica.com/gadgets/2021/03/rookie-coding-mistak...

Little Jimmy Tables strikes again.

Re: Gab Has Been Breached

#58

Post by [deleted] » Thu, Mar 04, 2021, 7:11 AM UTC

sumedh wrote: post #29

gkoberger wrote: post #12

Earlier quoted context omitted.

I edited my comment. The full quotes are much worse. Here's the details: https://techcrunch.com/2016/11/12/pro-trump-ceo-gets-booted-...

> YC’s private social network, Bookface They could not find a better name than Bookface?

[deleted]

Re: Gab Has Been Breached

#59

Post by camjohnson26 » Thu, Mar 04, 2021, 7:12 AM UTC

dt3ft wrote: post #46

If you just want to know how the breach[1] happened: it was SQL injection, where string interpolation was used to construct a query, rather than use parametrized queries. [1] https://arstechnica.com/gadgets/2021/03/rookie-coding-mistak...

I thought bcrypt had built in salts, how was he able to reverse those hashes for simple passwords? Any better algorithm to use or recommendation on salting?

Re: Gab Has Been Breached

#60

Post by tibbydudeza » Thu, Mar 04, 2021, 7:12 AM UTC

gkoberger wrote: post #4

bsmith0 wrote: post #2

Wow, it is actually shocking how disgusting the CEO's comments are.

Yeah, he's the worst. I knew him in YC, and actually liked him. But I watched him spiral as he wasn't able to raise money for his startup, including starting to go to Trump rallies "out of curiosity". His FB posts began to include worse and worse rhetoric. It was crazy to watch him get radicalized in realtime. It ended in him harassing some (minority) YC founders who said they were scared by saying we should "Build t…

He really drunk the kool-aid becoming part of the cult. It is not everyday you see the CEO of a company saying "Gab Does Not Negotiate With Criminal Demons".