Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitch source code and customer data has reportedly been leaked

videogameschronicle.com

Post reply on HN
Print view View original

341–350 of 617 posts

Re: Twitch source code and customer data has reportedly been leaked

#341

Post by vsareto »

andy_ppp wrote: post #277
csark11 wrote: post #137

Earlier quoted context omitted.

It can still be cracked

This is the SHA 256 of a phrase... go for it! 7BB7DB877943832837046863EF45C252D3A08C92A273F7B665210A6E12701095

If this is a phrase to unlock a bitcoin account with 1000 bitcoins in it, then you can easily convince people to try and brute force it.

Do you have Amouranth's or xQcOW's salted hash from this leak? Might be worth trying to brute force it.

You try on those kinds of accounts because they might have re-used it or the password might be patterned or not completely random, which gives you a chance that the credential might give you access elsewhere.

Re: Twitch source code and customer data has reportedly been leaked

#342

Post by MrStonedOne »

thinkingemote wrote: post #157

From another site a user commented that it might have proprietary modifications to ffmpeg which is LGPL/GPL (I think?). Would a leak be considered to be distribution, could others legally take these modifications and merge them into the upstream project? I imagine other free software might have modifications too.

The GPL can't actually force them to license their downstream changes, just revoke their ability to use the upstream project if they don't, and sue for infringement for damages.

Re: Twitch source code and customer data has reportedly been leaked

#343

Post by cableshaft »

tailspin2019 wrote: post #156
cableshaft wrote: post #136

Earlier quoted context omitted.

You can't put the toothpaste back in the tube. It's out there now, might as well examine what you can learn from it and discuss it. FB is a business making conscious and deliberate decisions and can be called out on it in part because things like this can happen. I mean they just made such a massive goof that they completely took down their own site, other massive sites they owned, and locked their own employees out…

> might as well examine what you can learn from it and discuss it. Thats the sort of high minded thing that WE might do here, but I worry about how this data is going to be weaponised against a whole bunch of people just trying to make a living from things they're passionate about. I'm not a streamer (yet?) but I kind of see Twitch as this haven for a bunch of people who, until the advent of streaming, didn't really…

Oh no, I definitely feel bad for the people who had their data leaked and worry what some malicious people will do about it, but posting about it on HN isn't going to change that.

I've done a tiny bit of streaming myself at some point, and keep meaning to do a bit more. I'll never have any significant following, but it's a cool website. It sucks that's it's gotten out there, but it's too late, it's out.

Might as well satisfy my morbid curiosity of how much some streamers are making on that site, which is about all I'm doing with this data.

Re: Twitch source code and customer data has reportedly been leaked

#344

Post by canada_dry »

dhimes wrote: post #319
canada_dry wrote: post #308

Earlier quoted context omitted.

This is a readily solvable problem i.e. the only phone number I use/give online is a VOIP# that just redirects to voicemail immediately (and blocks the call if it's on my SPAMMER list of persistent annoyances). For friends/family they have my cell# and it only lets calls through if they're in my contacts.

How much does your VOIP cost?

I use voip.ms and is pay-as-you-go so it's nominal e.g. $1-2/mnth. It allows setting up all sorts of call handling rules (time-of-day, CID lists, call trees).

Re: Twitch source code and customer data has reportedly been leaked

#345

Post by ryanlol »

sillysaurusx wrote: post #337

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

> but I can't recall seeing a payment database next to a source code repo.

I suspect you just haven’t looked at what the BI team has been up to. This seems like exactly the kind of stuff BI folks always leave on git.

Re: Twitch source code and customer data has reportedly been leaked

#346

Post by willmorrison »

1121redblackgo wrote: post #208
corobo wrote: post #197

Earlier quoted context omitted.

Isn't this the exact argument search engines have been fighting for years in relation to piracy? The data hasn't been provided, a link to the data has been provided

Sure. Morally what do you think is the right thing to do?

That’s up to the person posting it and there shouldn’t be a rule deciding either way for them.

Re: Twitch source code and customer data has reportedly been leaked

#347

Post by andrewzah »

atatatat wrote: post #335
andrewzah wrote: post #326

Earlier quoted context omitted.

That doesn't make any sense. Password management isn't really that complicated: Use a password manager, and reset your password if the service has been compromised.

What do you do when the PW manager is compromised?

Cry? Realistically speaking, this isn't going to happen without physical access to your computer or malware, though. So don't leave your computer unattended and don't download sketchy things.

Expecting people to simply memorize a unique, strong password for every single website that they use is unrealistic. Of course, no solution is perfect, but that doesn't mean we shouldn't improve the current situation of people reusing passwords with maybe slight modifications per website.

Re: Twitch source code and customer data has reportedly been leaked

#348

Post by ssklash »

sillysaurusx wrote: post #337

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

Also a pentester. My guess is they just had really broad access to Twitch's systems, not that card data and source code were together. Given the amount and range of data, wide-ranging access to their infrastructure is the only thing that makes sense to me here.

Re: Twitch source code and customer data has reportedly been leaked

#349

Post by nightski »

theshrike79 wrote: post #260
falcolas wrote: post #246

Earlier quoted context omitted.

Number 1 is Critical Roll. Their website lists 24 employees (many of whom are professional actors), and I’m sure there’s more behind the scenes. Salaries add up quickly.

I'm pretty sure that Critical Role isn't the main income for most people. Also: 4.8M/24 people is still 200k per head. Even if you assume that various costs take 50% of the revenue, they're all still making 6 figures for a thing that's pretty much a side hustle for most of them.

Critical role is making a ton more than just Twitch revenue.

Also it started out being a side gig but most of them have switched to it as their primary gig. They are starting campaign 3 this fall.

Post reply on HN