Live data from Hacker News

70TB of Parler users’ messages, videos, and posts leaked by security researchers

cybernews.com

161–170 of 1001 posts

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#161

Where are the comments about how awful it is for people's private messages to be leaked? Or is this okay because the media told me these guys are the bad guys.

I'm surprised to see how many people can not think for themselves but follow what media is telling them. I hope I don't do that myself but try to understand the matter and follow principles rather than sides.

What I'm surprised the most is that with these complex and not obvious questions (at least to me) people without any shadow of a doubt are certain that it is right for big tech to censor Trump, shut down parler and take political sides like it happened.

Maybe Trump is bad but at least i want to see his stupidity or his wrongdoing rather than other people to chew the news and feed me like im an infant.

To me these questions require philosophical debates and dialogue (even with myself) to understand f it is right for a company to impose their political worldview on their clients - I don't feel it is right.

But if others take these positions very easily, to me that is an indication that they got these ideas from somebody else rather than thought them through.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#162
post #51

Where are the comments about how awful it is for people's private messages to be leaked? Or is this okay because the media told me these guys are the bad guys.

Don't worry, the "hacked material" rule on twitter will prevent anything derived from this being posted on twitter. Right???

Applying the rules uniformly means Twitter should wait 4 yrs and then ban them. I am sure you will agree to that.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#163

This sounds like an incredible fuckup by Twilio. If it's true that their authentication verification was the entrypoint, they could be liable for leaking an enormous amount of personal information.

How is this Twilio’s doing? Parler was not a customer when this happened. This was Parler being held together by duct tape and not having choices. This is what happens when a young and populated site dependent on services loses all of said services. That is to say: you are a fool to trust websites, especially Parler.

I think that depends on Twilio's knowledge and intent. If the specific purpose for suspending services was to allow unauthorized access, that's conspiracy.

It'd be as if a bank's security guard quit and walked off the job the day of a bank heist. He has the right to quit, but not a right to coordinate with the robber and leave his post for the purpose of assisting in illegal activity.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#165
post #161

Where are the comments about how awful it is for people's private messages to be leaked? Or is this okay because the media told me these guys are the bad guys.

I'm surprised to see how many people can not think for themselves but follow what media is telling them. I hope I don't do that myself but try to understand the matter and follow principles rather than sides. What I'm surprised the most is that with these complex and not obvious questions (at least to me) people without any shadow of a doubt are certain that it is right for big tech to censor Trump, shut down parler…

You are currently witnessing the result of defunding humanities in favor of technical education.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#166
post #68
post #8

This story truly terrifies me: my team owns my company's sign up page. (I speak for myself and not them, of course). Sounds like Parler, fearing that their OTP provider might go down, decided to fail-open, ie: if the dependency throws an exception, presume there's something wrong with the dependency and that the code provided is acceptable. It never occurred to them that the dependency could be down permanently, or t…

There's a surprising amount of insecure code in the wild; and naive engineers who are willingly ignorant in their security practices. I'd assume that Parler's engineers motivations had more to do with politics than providing a secure platform for protecting dissidents under duress. (Or, if we look at the history of a recent major war, the mediocre engineers working for the other side thought they were the good guys.)

[deleted]

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#167

Where are the comments about how awful it is for people's private messages to be leaked? Or is this okay because the media told me these guys are the bad guys.

The ramifications of this will absolutely set a record for the future as the inevitable reverse will happen. People are forgetting that if they're ok with this sort of behavior now, it'll be difficult for them to argue-against or prevent the same behavior when their opposites are in control.

>The ramifications of this will absolutely set a record for the future as the inevitable reverse will happen.

Will happen? Try has happened. Partisan hacking has been a thing for a decade. Remember the DNC emails? Remember weev?

>People are forgetting that if they're ok with this sort of behavior now

What does it matter if I'm okay with it? Nobody consulted me before breaking into Parler. In fact, they didn't take my opinion into account at all. Sure, grey-hats are somewhat motivated by public opinion, but even Mitch McConnell gave a floor speech on Wednesday angry enough to incite a few keyboard taps.

>it'll be difficult for them to argue-against or prevent the same behavior

Because American politics consistently punishes hypocrisy, right?

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#168

When you purposefully leak private data, you no longer get to hide behind the title "Security Researcher".

Would it be any better if it was sent to Wikileaks and published there?

If you hack a source and send it to Wikileaks, do you qualify as "security researcher"? This is what we're taking about.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#169
post #94

Earlier quoted context omitted.

Nah man, I won't criticize too hard. There but for the grace of god goes I, you know? I've had flakey dependencies. I've thought "maybe fail open is okay in this one case". You're growth hacking your company and you don't want to be held back because a dependency can't handle your scale. And hey, if a few fraudulent accounts get in, we'll just clean them up later. Cost benefit analysis here, right? But the road to he…

So, you agree with what I said.

Yeah, but you said it with what looked like a lot of sarcasm and criticism.

I said it with a tone of "Oh shit, I could have done exactly the same thing". Empathy.

But it's a fun point of the nuances of language, isn't it? Maybe I misunderstood you.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#170

Wiki says Parler is a team of 30 people, So realistically, does that mean like 10 devs running a social network with 5-10 million users? I imagine its pretty ceazy there right now after getting booted off AWS, google just banned u off play store, so cant use them, i assume they cant use microsoft because theyll ban them there as well, it would be cool to see if they are able to get things up and running again. (Ive n…

I was thinking about it this morning. They probably didn't have an easy time finding new employees too because of the nature and controversy associated with the site, potentially part of the reason for lack of moderation.

Not defending, just observing. It's interesting from a business/development perspective when it comes to rapid scale and team size.

Post reply on HN