Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitch is hacked, and its source code leaked

kotaku.com

Post reply on HN
Print view View original

101–110 of 325 posts

Re: Twitch is hacked, and its source code leaked

#101

Post by vineyardmike »

jandrese wrote: post #35
toomuchtodo wrote: post #14

Earlier quoted context omitted.

That's 6.25GB/day over a 20 day working month. More time, less data per work day, harder to detect.

And it might be disguised as a video stream coming out of the video streaming servers. But it could also be a 128GB thumb drive plugged into the system somewhere.

> And it might be disguised as a video stream coming out of the video streaming servers.

Just log in to FB messenger or Discord and egress it as small data chunks that way. Lots of people have private chats on work computer for practical purposes.

Discord allows for bots, so you could easily write a script to chunk data and egress, and another to re-assemble.

Re: Twitch is hacked, and its source code leaked

#102

Post by ergerger »

skilled wrote: post #4
nemothekid wrote: post #2

This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…

I'm hoping we will get to see a transparent report (from hacker or Twitch) on how this happened. I think anyone would be excited to hack Twitch as the site alone - or any big platform for that matter - but this is quite literally someone just downloading the entire Twitch ecosystem and publishing it online.

Twitch has not been known to be transparent about anything.

Re: Twitch is hacked, and its source code leaked

#103

Post by Zababa »

runawaybottle wrote: post #15

Does it take a genius to figure out how to build twitch? It’s a modern crud app with video streaming.

You don't need a genius. You need a few good people, and a lot of hands. I think the best way to look at things like Twitch is to compare them to cathedrals, bridges, things like that. You might be able to have the idea and sketch the plans by yourself, but it's physically impossible to build it yourself.

Re: Twitch is hacked, and its source code leaked

#104

Post by Philip-J-Fry »

dolores_ab wrote: post #83
dolores_ab wrote: post #11

Someone actually started streaming going through the code ... on twitch. https://www.twitch.tv/deepfrieddev

They were banned for 14 days -- https://www.reddit.com/user/coder_ent/comments/q2q24x/banned...

They = you. It's fine to be honest, you're not exactly making it unobvious.

Re: Twitch is hacked, and its source code leaked

#105

Post by javajosh »

Retric wrote: post #69
javajosh wrote: post #51

Earlier quoted context omitted.

How often do devs delete and re-clone?

Clean OS install or new hardware should both be daily events at even mid sized companies. Because even if it’s once every 2-4 years per developer that still becomes extremely common in aggregate.

Yes, but GP said "every engineer, regularly" which seems odd.

Re: Twitch is hacked, and its source code leaked

#106

Post by vineyardmike »

lamontcg wrote: post #73
koolba wrote: post #9

Earlier quoted context omitted.

How much of this is a holdover of lax security practices from before they were acquired? I can’t imagine AWS being managed in a way where local network access gives you keys to the kingdom. Then again, EC2 instance profiles do let you do quite a bit.

Conflating AWS security with twitch security is probably the wrong way to think about it. Within Amazon those are almost going to be two entirely separate companies, with very different security focuses. The idea that Amazon is monolithic and uniform wasn't true when I left there in 2006, and I'm certain it is less so now. And that isn't just that its related to the merger, but that fundamentally its different busine…

But does twitch not share the same Amazon wide git service? Could most of Amzn code be leaked or compromised? Seems like all of amazon internals that shares security measures is at risk...

Re: Twitch is hacked, and its source code leaked

#108

Post by vineyardmike »

Hokusai wrote: post #90
nemothekid wrote: post #19

Earlier quoted context omitted.

> Because you expect Amazon to put security priority over new features and profit? I don't know what you think Amazon stands for, but Amazon runs the largest cloud hosting service in the world - AWS, which not only runs a large number of other large companies but governments as well. I know, first hand, that their datacenter security protocols are state of the art. Amazon has a much larger surface attack area so if t…

> Amazon has a much larger surface attack area so if they were playing fast and loose with security, chances are we would know already. I get your point and I am no taking about AWS but about Twitch. Each part of the company has its own incentives. Amazon is well know for not caring about quality nor its employees. In my experience with corporations there is little to no technical sharing between different parts of t…

> In my experience with corporations there is little to no technical sharing between different parts of the company.

Amazon is all about sharing efforts with the company. That's the whole point of AWS - its a monetization of this efforts. Most older AWS services started out as internal services that someone realized was generally useful.

Post reply on HN