Someone actually started streaming going through the code ... on twitch.
Twitch is hacked, and its source code leaked
11–20 of 325 posts
Re: Twitch is hacked, and its source code leaked
#12This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…
> this isn't something I'd expect from an Amazon owned property Because you expect Amazon to put security priority over new features and profit? We have very different understandings of what Amazon stands for.
EC2, Amazon's cash cow, competes with nearly identical offerings from Microsoft and Google, and is not a place where additional features are often all that valuable to customers. Any sort of breach like this on EC2 would seriously hurt Amazon's bottom line and they know it.
Re: Twitch is hacked, and its source code leaked
#13This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…
> It's also strange that someone who has this level of access to what is presumably a multi-billion dollar company decided to just leak the data? Maybe they did try to ransom it, but I'd imagine someone with this kind of access inside Twitch must have had some creative way of making money.
Notably, the initial leak didn't actually include the password data which the leaker claims to have, just source code and payment data which has been verified by several affected streamers. It's possible that this first leak was just to establish trust so they can random or auction password hashes later.
Re: Twitch is hacked, and its source code leaked
#14This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…
It something I would expect security hardware to have automatically stopped. Even an employee shouldn't be able to download 125GB of stuff without flipping a safety switch somewhere.
That's 6.25GB/day over a 20 day working month. More time, less data per work day, harder to detect.
Re: Twitch is hacked, and its source code leaked
#15Does it take a genius to figure out how to build twitch? It’s a modern crud app with video streaming.
Re: Twitch is hacked, and its source code leaked
#16This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…
Does anyone know if Twitch employees have two factor auth? Having access to an employee's account would be the easiest way to pull this off.
It'd be strange if they don't have two factor auth, of course, but it's just as strange to have this large of a hack.
I think if it is a simple case of an employee account takeover, then the attack would "work" to some extent at any company. Larger companies typically have strict data access requirements, though. Good luck finding the few employees who have raw access to Google password hashes, for example. And even more luck knowing how to get that data if you do.
Re: Twitch is hacked, and its source code leaked
#17This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…
It something I would expect security hardware to have automatically stopped. Even an employee shouldn't be able to download 125GB of stuff without flipping a safety switch somewhere.
Trying to protect against leaking developers/employees is like trying to protect against lone gunman terrorists: useless.
And, if you try anyway, it is likely to cause more annoyance to everyone involved than actual protection (think TSA).
Re: Twitch is hacked, and its source code leaked
#18Does it take a genius to figure out how to build twitch? It’s a modern crud app with video streaming.
Just stream the video, it’s easy!
Re: Twitch is hacked, and its source code leaked
#19This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…
> this isn't something I'd expect from an Amazon owned property Because you expect Amazon to put security priority over new features and profit? We have very different understandings of what Amazon stands for.
>Because you expect Amazon to put security priority over new features and profit?
I don't know what you think Amazon stands for, but Amazon runs the largest cloud hosting service in the world - AWS, which not only runs a large number of other large companies but governments as well. I know, first hand, that their datacenter security protocols are state of the art.
Amazon has a much larger surface attack area so if they were playing fast and loose with security, chances are we would know already.
Re: Twitch is hacked, and its source code leaked
#20Does it take a genius to figure out how to build twitch? It’s a modern crud app with video streaming.
I mean doing Youtube is even easier; it's just a wrapper around HTML5 video.