Parler Databases Disclosed
twitter.com
Parler Databases Disclosed
1–10 of 168 posts
Re: Parler Databases Disclosed
#2The description of the hack is not accurate. Okta is the service that disclosed the endpoints used.
Re: Parler Databases Disclosed
#3If you're not signed up as a foster/adoptive parent, now is a good time if you want to have an impact. There are going to be a lot of kids flooding into the system from families that felt emboldened to become domestic terrorists by the President and those he surrounds himself with.
Re: Parler Databases Disclosed
#4"Twilio put out at midnight last night. In that Press Release, Twilio accidentally revealed which services Parler was using. Turns out it was all of the security authentications that were used to register a user. This allowed anyone to create a user, and not have to verify an email address, and immediately have a logged-on account.
Well, because of that access, it gave them access to the behind the login box API that is used to deliver content -- ALL CONTENT (parleys, video, images, user profiles, user information, etc) --. But what it also did was revealed which USERS had "Administration" rights, "Moderation" rights.
Well, then what happened, those user accounts that had Administration rights to the entire platform... The hackers, internet warriors, call it what you will, was able to use the forgot password link to change the password. Why? Because Twilio was no longer authenticating emails. This meant, they'd get directly to the reset password screen of that Administration user."
I'm not from the US, but as an outsider, this leaves a really bad taste with how Twilio handled the situation AS A BUSINESS.
Re: Parler Databases Disclosed
#5The description of the hack is not accurate. Okta is the service that disclosed the endpoints used.
Okta is a large, enterprise identity provider. I doubt in the case of a right-wing site existing they'd give out access to that provider on purpose? Did they mess up? I can't find any details about it yet.
Re: Parler Databases Disclosed
#6I find it hard to believe this timing is a coincidence...
Re: Parler Databases Disclosed
#7If you're not signed up as a foster/adoptive parent, now is a good time if you want to have an impact. There are going to be a lot of kids flooding into the system from families that felt emboldened to become domestic terrorists by the President and those he surrounds himself with.
Probably a bigger effect is all the people who lost their jobs to covid. Domestic abuse always follows a large spike in unemployment
Re: Parler Databases Disclosed
#8How would disabling Twilio disable authentication entirely? From what I see it is used to send SMS and maybe Email as well. So I could understand that it would prevent login, registration and password reset if that service is offline, but it shouldn't allow any of these without authentication.
Unless the software skipped authentication entirely when this service was unavailable, which I find hard to imagine. But that seems to be what is claimed right now.
Re: Parler Databases Disclosed
#9If you're not signed up as a foster/adoptive parent, now is a good time if you want to have an impact. There are going to be a lot of kids flooding into the system from families that felt emboldened to become domestic terrorists by the President and those he surrounds himself with.
Probably a bigger effect is all the people who lost their jobs to covid. Domestic abuse always follows a large spike in unemployment
[flagged]
Re: Parler Databases Disclosed
#10If you're not signed up as a foster/adoptive parent, now is a good time if you want to have an impact. There are going to be a lot of kids flooding into the system from families that felt emboldened to become domestic terrorists by the President and those he surrounds himself with.
I can't think of a more effective way to spark a civil war than threatening to take people's children from them.