Twitch source code and customer data has reportedly been leaked • Hacker News Board

Re: Twitch source code and customer data has reportedly been leaked

#331

Post by tailspin2019 » Wed, Oct 06, 2021, 2:49 PM UTC

AnIdiotOnTheNet wrote: post #278

cableshaft wrote: post #136

Earlier quoted context omitted.

You can't put the toothpaste back in the tube. It's out there now, might as well examine what you can learn from it and discuss it. FB is a business making conscious and deliberate decisions and can be called out on it in part because things like this can happen. I mean they just made such a massive goof that they completely took down their own site, other massive sites they owned, and locked their own employees out…

This is the same logic that a lot of people used during The Fappening. If we think it is immoral to steal this data then we should not condone people copying it and analyzing it as that's just benefiting from someone else doing the dirty work for us.

Hey you’re not really living up to your username there with that morally sound logic.

Re: Twitch source code and customer data has reportedly been leaked

#332

Post by Semaphor » Wed, Oct 06, 2021, 2:50 PM UTC

canada_dry wrote: post #308

Semaphor wrote: post #37

This is somewhat hilarious. Just 5 days ago I was complaining about Twitch’s new "Only verified users" setting which requires me to give them my phone number. One of the reasons I said I’ll not do that was "hacks, leaks". And now this. Sure, I’ll give you my phone number to add TOTP (Why even?) after I’ve just been shown how secure that data is.

This is a readily solvable problem i.e. the only phone number I use/give online is a VOIP# that just redirects to voicemail immediately (and blocks the call if it's on my SPAMMER list of persistent annoyances). For friends/family they have my cell# and it only lets calls through if they're in my contacts.

It’s readily solvable not to require a phone number to add a TOTP app.

Re: Twitch source code and customer data has reportedly been leaked

#333

Post by atatatat » Wed, Oct 06, 2021, 2:50 PM UTC

swarnie wrote: post #125

TwoNineA wrote: post #110

Earlier quoted context omitted.

It was a public concert, freely accessible to anyone.

You must know that's a very atypical business model....

Will it be?

Re: Twitch source code and customer data has reportedly been leaked

#334

Post by JohnWhigham » Wed, Oct 06, 2021, 2:50 PM UTC

theshrike79 wrote: post #268

falcolas wrote: post #250

Earlier quoted context omitted.

Eh, not always. Critical Roll, #1 on the chart with $4.8M, has 24 credited employees, and who knows how much else backing them up. It’s an entertainment corporation that just happens to run on Twitch.

This is just one revenue stream, Twitch subs. No Twitch donations, Patreon, merch sales etc.

It doesn't include bounty payouts and advertising payouts?

Re: Twitch source code and customer data has reportedly been leaked

#335

Post by atatatat » Wed, Oct 06, 2021, 2:51 PM UTC

andrewzah wrote: post #326

adolph wrote: post #322

Earlier quoted context omitted.

Just don't worry about it and go through the password reset anytime you log in.

That doesn't make any sense. Password management isn't really that complicated: Use a password manager, and reset your password if the service has been compromised.

What do you do when the PW manager is compromised?

Re: Twitch source code and customer data has reportedly been leaked

#336

Post by david_allison » Wed, Oct 06, 2021, 2:52 PM UTC

sydthrowaway wrote: post #305

bo1024 wrote: post #302

Earlier quoted context omitted.

I believe so, and this is why the AGPL was created: > The GNU General Public License permits making a modified version and letting the public access it on a server without ever releasing its source code to the public. > The GNU Affero General Public License is designed specifically to ensure that, in such cases, the modified source code becomes available to the community. https://www.gnu.org/licenses/agpl-3.0.en.html

So in theory, FAANG could make billions of a random person's GPL'd code and they'd never know.

This is a common occurrence.

Modifications don't need to be shared back to the community if the software is used internally or behind a webserver.

Re: Twitch source code and customer data has reportedly been leaked

#337

Post by sillysaurusx » Wed, Oct 06, 2021, 2:52 PM UTC

Hi ya'll, I have a question.

My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code.

Any theories how this happened?

Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo.

Did their s3 bucket get popped or something?

Even if their github enterprise got popped, that doesn't explain that streamer payouts down to the dollar were leaked. "Oh yeah, I commit all my stripe data into github. It's for compliance /s"

EDIT: If you want to see how much everyone's making: https://www.reddit.com/r/LivestreamFail/comments/q2gooi/twit...

Re: Twitch source code and customer data has reportedly been leaked

#338

Post by boringg » Wed, Oct 06, 2021, 2:53 PM UTC

Buttons840 wrote: post #279

boringg wrote: post #201

This is going to BLOW up the twitch gaming community with all the infighting now that everyone knows how much everyone else makes. Wow.

Number of subs is often known, and the relative size of channels is known. Unless someone's going to be surprised that someone with double the viewers makes double the money, I doubt there will be any surprises.

I think a lot of the general public / viewer base is not aware of how much money streamers are really making. And I would guess other streamers have a sense but not total amounts. We will see...

Re: Twitch source code and customer data has reportedly been leaked

#339

Post by ryathal » Wed, Oct 06, 2021, 2:56 PM UTC

meibo wrote: post #53

junon wrote: post #51

Earlier quoted context omitted.

It won't work, I don't understand why they're bothering. You can't compete with steam, unless you're trying to hit a niche market.

Amazon has even more money to throw at studios than Epic, so they can just force themselves into it.

It's more than just throwing money at it. EA tried and failed to separate from Steam. Epic might succeed, but it's not going to be because of money, but because Fortnite let them capture young gamers before they got into Steam. Wherever a user gets a critical mass of a library built up first is going to be the winner.

Re: Twitch source code and customer data has reportedly been leaked

#340

Post by beckler » Wed, Oct 06, 2021, 2:56 PM UTC

sillysaurusx wrote: post #337

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

My guess is it was an disgruntled employee who took a copy of all this data.