Live data from Hacker News

Twitch is hacked, and its source code leaked

kotaku.com

141–150 of 325 posts

Re: Twitch is hacked, and its source code leaked

#141
post #119

Earlier quoted context omitted.

Here are a few screenshots of go and php: https://sizeof.cat/post/twitch-leaks/ . WARNING: do not click the link, copy it and paste it in new tab.

?

They check the referrer, see it's from HN and redirect to an image instead.

So by copy + paste into a new tab, it will lose the HN referrer.

Re: Twitch is hacked, and its source code leaked

#142
post #67

Earlier quoted context omitted.

Everything is just a crud app with a few extra steps.... yet you're not Zuckerberg or Dorsey

I’m so misread, Twitch is a lot of luck, so is all of these companies. Show me the the source code for luck. I don’t give a fuck if you leaked a video streaming crud app code lol.

This perspective is immature at best, but genuinely ignorant of how tech works at twitch scale.

Re: Twitch is hacked, and its source code leaked

#144

This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…

There were no encrypted password dumps. No production secrets were leaked (according to the article). What's here is no more than what your average Twitch engineer has access to.

Yes, that included payout data. Anyone with "staff" access to the site (which any employee can have) has access to any streamer's dashboard, which includes payout data.

I don't think this was an attack. Based on the data so far I think it was a disgruntled engineer. Obviously if more gets leaked later I may revise that opinion.

Re: Twitch is hacked, and its source code leaked

#147
post #87
post #76

Earlier quoted context omitted.

>Then I'm not sure what you can even do with those Assume some end users used the same passwords on other, non-twitch accounts. That's what makes hacked passwords valuable, no matter where they came from.

Pretty much this. If they gain one email/username password combination - they can use it elsewhere.

I would be very deeply concerned if Twitch, a multi-billion dollar company owned by Amazon, does not properly hash and salt the passwords of its users.

Re: Twitch is hacked, and its source code leaked

#148
post #144

This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…

There were no encrypted password dumps. No production secrets were leaked (according to the article). What's here is no more than what your average Twitch engineer has access to. Yes, that included payout data. Anyone with "staff" access to the site (which any employee can have) has access to any streamer's dashboard, which includes payout data. I don't think this was an attack. Based on the data so far I think it wa…

So much for information compartmentalization. Does the typical engineer need access to payment details for their daily work?

Re: Twitch is hacked, and its source code leaked

#149
post #69

Earlier quoted context omitted.

How often do devs delete and re-clone?

Clean OS install or new hardware should both be daily events at even mid sized companies. Because even if it’s once every 2-4 years per developer that still becomes extremely common in aggregate.

I think the tech giants have warped some people's expectations of what a "mid-sized" company is. I work for a mid-sized company where we roll our own ERP system and we probably average about two clean OS installs per year across the entire development team.

Re: Twitch is hacked, and its source code leaked

#150

This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…

Facebook [2011] was pretty bad…

https://www.theguardian.com/technology/2012/feb/17/facebook-...

…except Mangham didn’t ever get to release his spoils to The Internet?

Post reply on HN