581–590 of 617 posts
Earlier quoted context omitted.
Also a pentester. My guess is they just had really broad access to Twitch's systems, not that card data and source code were together. Given the amount and range of data, wide-ranging access to their infrastructure is the only thing that makes sense to me here.
Are you guys (other commenter) are professional pentesters? How do you become one? Do you freelance or work full time 8-5?
Earlier quoted context omitted.
Can you use GPL code internally (ie run your backend) if you never publish it?
I believe so, and this is why the AGPL was created: > The GNU General Public License permits making a modified version and letting the public access it on a server without ever releasing its source code to the public. > The GNU Affero General Public License is designed specifically to ensure that, in such cases, the modified source code becomes available to the community. https://www.gnu.org/licenses/agpl-3.0.en.html
Earlier quoted context omitted.
Only someone on this website would call 122k per year middle class. This is why America is divided. Even if you're the only breadwinner in your household this is solidly above the 85th percentile in income. That's practically the definition of upper class.
To me upper class means you don't work.
Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…
My guess is it was an disgruntled employee who took a copy of all this data.
Earlier quoted context omitted.
Only someone on this website would call 122k per year middle class. This is why America is divided. Even if you're the only breadwinner in your household this is solidly above the 85th percentile in income. That's practically the definition of upper class.
To me upper class means you don't work.
Earlier quoted context omitted.
Mmm... well, if you're received what you consider to be toxic interactions on twitter, reddit and even here, but not on 4chan, have you considered that the common factor is perhaps not that all of these platforms are toxic... ...but that your views are considered problematic by quite a lot of people? Perhaps that could be some cause for self reflection before you universally declare the entire platform here hostile a…
People on 4chan will call you slurs and insults but it is never personal, part of it is due to the anonymous nature. People here will be personally vicious and hostile. > ...but that your views are considered problematic by quite a lot of people? You do not know what my views are. It's as if you are trying to prove me right honestly. (btw, I am not posting on reddit nor on twitter, nor 4chan for that matter) Plus the…
I’m just going to politely remind you that on HN your entire comment history per account is public.
Earlier quoted context omitted.
I don't really get this. My phone number is apparently already known by every scammer and spammer on earth, which is why I never answer calls from people I don't know, so what am I losing? Meanwhile, Twitch has had a significant bot spamming problem.
Which came first? You giving your phone number away online, or the scam calls?
Earlier quoted context omitted.
People on 4chan will call you slurs and insults but it is never personal, part of it is due to the anonymous nature. People here will be personally vicious and hostile. > ...but that your views are considered problematic by quite a lot of people? You do not know what my views are. It's as if you are trying to prove me right honestly. (btw, I am not posting on reddit nor on twitter, nor 4chan for that matter) Plus the…
> You do not know what my views are I’m just going to politely remind you that on HN your entire comment history per account is public.
Also, something that I did not mention before
> ...but that your views are considered problematic by quite a lot of people?
This is not a justification for toxicity.
Earlier quoted context omitted.
There are several ways why this could have happened. 1) The payment-data were just artifacts left on some file-server or from a process, which was accessible from dev-space. 2) No real systems were accessed and everything, it's all from a bad backup-server or poorly managed worker-pool. 3) Multiple Persons got hacked. 4) Exit-Scam of one or more Workers who just had broad enough access for some reason. 5) Twitch's se…
> and the git-history seems also be missing. The article says otherwise: "The entirety of Twitch’s source code with commit history “going back to its early beginnings”"