Twitch source code and customer data has reportedly been leaked • Hacker News Board

Re: Twitch source code and customer data has reportedly been leaked

#281

Post by Shalomboy » Wed, Oct 06, 2021, 2:13 PM UTC

hnick wrote: post #116

dannyw wrote: post #34

Earlier quoted context omitted.

The leak contains much more than this FYI, there's a hundred gigabytes of code and resources from dozens of repositories. Looks like someone dumped everything on their github enterprise. I wonder if this'll lead to software engineers in big companies having more restricted access to code?

Dozens? The 4chan post said "almost 6,000 internal Git repositories". We don't use git at work (TFS, yay), and we definitely aren't on their scale, but that seems high to me. Do they have a repo for every class? Is this normal?

TFS converting to Git/Azure DevOps here. Be the change you want to see in the world! There's a chance that some of the people in your org that don't use TFS could use the organizational tools built into GitHub/GitLab/BitBucket/DevOps. If you get enough teams on board with that platform that also happens to use Git, then you can make that push to IT!

Re: Twitch source code and customer data has reportedly been leaked

#282

Post by boringg » Wed, Oct 06, 2021, 2:13 PM UTC

tiborsaas wrote: post #220

boringg wrote: post #196

Earlier quoted context omitted.

Am I the only one a bit disappointed by the gross earnings for the top 5 earners given how much the media has ben hyping the money made by e-gamers. For some reason I would have thought they would make more money over 2 years. Top earner was grossing $ 9.6M ($4.8M/yr), 10th was $2.9M($1.4M/yr), at 81 you drop below $1M (500k/yr) on twitch pre-tax revenue. After 81 you drop below the %1M over two years threshold. Actu…

Are you kidding? 4.8M / year is stellar revenue. Much much more than most people make in a lifetime. It's even more interesting that for 50k gross, you have to beat this guy "DEMOLITION_D" at the #4432 place.

That is literally the top earner in the community made up by a team of people.

The media/VC etc community has been hyping e-gaming as the new sports domain. That said the top salary for a sports player is $168M / year for one player (Lionel Messi) and number 99 is $35M/year (source: https://en.wikipedia.org/wiki/List_of_largest_sports_contrac...)

It really shows how much of a step change there is between the sports & e-sports and I would be curious how much of this Twitch is keeping to themselves instead of paying out.

Not to mention how much uptime e-gamers have to put in.

Re: Twitch source code and customer data has reportedly been leaked

#283

Post by runnerup » Wed, Oct 06, 2021, 2:15 PM UTC

bluecatswim wrote: post #152

meheleventyone wrote: post #76

Earlier quoted context omitted.

Isn't that the basis of the economy with the increasing wealth gap and so on? It's not really materially different to paying Disney millionaires to go watch the latest Marvel movie.

>It's not really materially different to paying Disney millionaires to go watch the latest Marvel movie. I feel like it's substantially different, you are paying Disney the money to watch the movie, you don't really care about the actors or other people who worked on it. On the other hand, twitch users pay for the sake of paying money, it's closer to something like strip clubs.

I mean....sure, I guess, if you're only talking about the top 10 or maybe top 200 streamers.

My favorite twitch streamer, 'x5_pig' (996th highest earner on twitch) only grossed $186,000 over 24 months, and lives in a fairly HCOL area in Australia. I'm happy to give him $5 or so to help make sure that he continues to stream an EOL game, Starcraft2.

Sure, he has other revenue streams as well but I can only imagine the risk he takes by sticking with a game that's been EOL'd. When Blizzard shuts down the servers I imagine he'll have no career left at all and will likely have to start over in a totally different career. I'd be surprised if he could start streaming some other strategy game and maintain enough earnings.

I pay him $5/month to help swing his risk-reward balance in favor of continuing to produce the content that I most enjoy vegetating to after my 12 hour day of coding/troubleshooting/collaborating.

Sure, he has other revenue streams (YouTube, announcing for major tournaments, etc). But I imagine for him it may be important to earn enough over the 10 year life of Starcraft2 to mostly-retire in case he ends up without a "real" career.

In fact, sometimes I wonder whether income tax brackets could potentially include consideration for short-lived high earning careers. Seems it might be slightly broken to tax someone who has a stable $1MM/year income for 30+ years (e.g. car dealership owner) the same % as someone who makes $1MM this year, but next year might be earning $40,000 working at that car dealership (athletes, streamers, windfalls, etc). Seems like it might make sense to allow people to "defer" earnings to future years, as long as income tax is eventually paid in full. This could allow people who unexpectedly earn $1MM for just one year to spread out those earnings over 10 years and pay a more appropriate % as taxes. Not sure what else this could break though, or how much of a problem it really solves vs. other things legislators could be spending time on.

Re: Twitch source code and customer data has reportedly been leaked

#284

Post by Loughla » Wed, Oct 06, 2021, 2:15 PM UTC

ta988 wrote: post #259

Loughla wrote: post #184

Earlier quoted context omitted.

This is a, maybe, long way to get to this, but keep with me. I have always been fascinated by understanding what is edible, useful, or "traditionally medicinal" in the natural world around me. I have spent decades of my life learning about how to use, propagate, and cultivate most plants, animals, fungi, and minerals (not the propagate part here) in an area +/- 100 miles from where I live. I've taught a couple of Sta…

Don't they have helpers like gamers do?

So then there's even more pressure to perform, at a higher level even, to pay for the lives of myself at least one other human entirely. I still don't get it.

Re: Twitch source code and customer data has reportedly been leaked

#285

Post by andrewzah » Wed, Oct 06, 2021, 2:16 PM UTC

jeremyjh wrote: post #172

vsareto wrote: post #114

Earlier quoted context omitted.

Just spend 2 minutes and change your password instead of spending 2 minutes thinking about whether you should.

Then you would not be solving the problem because you need to change everywhere else you used that same password.

Use a password manager.

Re: Twitch source code and customer data has reportedly been leaked

#286

Post by sydthrowaway » Wed, Oct 06, 2021, 2:17 PM UTC

Couldn't help but contrast this to another item on the front page.. the irony of video game streamers making many times more than the lifetime earnings of Nobel Prize winners :)

Re: Twitch source code and customer data has reportedly been leaked

#287

Post by CapricornNoble » Wed, Oct 06, 2021, 2:19 PM UTC

Gravyness wrote: post #258

lemoncookiechip wrote: post #31

Link to the leak: https://boards.4channel.org/g/thread/83691438 Top 10k Streamers by Revenue: https://pastebin.com/LjmaPNam Contains the following data points: 'ad_share_gross', 'sub_share_gross', 'bits_share_gross', 'bits_developer_share_gross', 'bits_extension_share_gross', 'prime_sub_share_gross', 'bit_share_ad_gross', 'fuel_rev_gross', 'bb_rev_gross' (TTS donations, 3rd party revenue like OnlyFans, Patreon, Amazo…

Post was just deleted and the archiver removed the links: https://warosu.org/g/thread/83691438 , anyone have mirrors?

What is HN's policy on sharing magnet links?

magnet:?xt=urn:btih:N5BLZ6XECNEHHARHJOVQAS4W7TWRXCSI&dn=twitch-leaks-part-one&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce

Re: Twitch source code and customer data has reportedly been leaked

#288

Post by treesknees » Wed, Oct 06, 2021, 2:19 PM UTC

polote wrote: post #200

dannyw wrote: post #34

Earlier quoted context omitted.

The leak contains much more than this FYI, there's a hundred gigabytes of code and resources from dozens of repositories. Looks like someone dumped everything on their github enterprise. I wonder if this'll lead to software engineers in big companies having more restricted access to code?

> I wonder if this'll lead to software engineers in big companies having more restricted access to code? I don't think that Twitch has closed source code because they want to keep code private. It's probably more a matter of don't want to show commit message in case there are some bad words inside it. And don't want to show the world in case their source code look bad. Twitch without its code source can't work yeah,…

You don't think the largest streaming platform on the planet wants to keep their intellectual property a secret? This isn't about being embarrassed over some comments, it's about completely revealing the algorithms that move streams to the promoted views, limitations of their filtering systems, the time it takes for someone to count as a 'viewer'... there are many pieces that are no longer secret and can now be manipulated by people trying to promote content or game the recommendation system or bypass filtering.

There is also the issue of security. I'm sure people will be combing through the source code to find anything they can exploit, even if it's a simple XSS attack. It could either be sold/used for malicious actions or submitted to the bug bounty program for the reward money.

Re: Twitch source code and customer data has reportedly been leaked

#289

Post by andrewzah » Wed, Oct 06, 2021, 2:19 PM UTC

ryandrake wrote: post #232

lopis wrote: post #185

Earlier quoted context omitted.

What do you mean? You think all coders are security engineers? All code has dependencies, often dozens of them. You might just need a single vulnerability in a trusted third party library to allow this to happen. These are humans creating these products. I would say that SPECIALLY because of the size of these products, vulnerabilities are inevitable.

> What do you mean? You think all coders are security engineers? Now, imagine using that argument when a bridge falls down. "What do you mean? You think all the bridge builders were safety engineers? Bridge components rely on different dependencies, often dozens at the same time. You just need one point of failure and boom, it collapses. These are humans creating these bridges. I would say that SPECIALLY because of t…

Comparing bridges to a streaming service is nonsensical, frankly.

People die when bridges collapse. People get mildly inconvenienced if twitch is slow or down.

Accordingly bridge construction takes security & safety much more seriously throughout the project. And it's orders of magnitude more expensive to build and check bridges for safety issues, etc.

Re: Twitch source code and customer data has reportedly been leaked

#290

Post by Semaphor » Wed, Oct 06, 2021, 2:19 PM UTC

AnIdiotOnTheNet wrote: post #269

Semaphor wrote: post #37

This is somewhat hilarious. Just 5 days ago I was complaining about Twitch’s new "Only verified users" setting which requires me to give them my phone number. One of the reasons I said I’ll not do that was "hacks, leaks". And now this. Sure, I’ll give you my phone number to add TOTP (Why even?) after I’ve just been shown how secure that data is.

I don't really get this. My phone number is apparently already known by every scammer and spammer on earth, which is why I never answer calls from people I don't know, so what am I losing? Meanwhile, Twitch has had a significant bot spamming problem.

I’m also subscribed to a few channels. I’m pretty sure that is a far stronger signal that I’m not a bot than getting my phone number. And unlike most people, I only had 2 or 3 spam calls, and maybe 10 spam SMS on the number I’ve had for almost 20 years.