Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

70TB of Parler users’ messages, videos, and posts leaked by security researchers

cybernews.com

Post reply on HN
Print view View original

361–370 of 1001 posts

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#361

Post by hehehaha »

x86_64Ubuntu wrote: post #74

I've always been amazed at how hackers can exfiltrate so much data with no one even batting an eye. Doing the math, the pure data cost to Parler was $7,700 (($0.15/GB 10) + ($0.11/GB 40) + ($0.09/GB 20)) 1000 => $7,700 https://aws.amazon.com/blogs/aws/aws-data-transfer-prices-re... Even the Chase Bank hack had an astronomical amount of data that didn't appear to set off any alarms.

This so much. Are they not using dashboards? This amount of traffic should have triggered multiple alarms. Makes me think their devs just stopped caring.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#362

Post by LargeWu »

Cthulhu_ wrote: post #330
_bpkv wrote: post #292

Earlier quoted context omitted.

Systems can be complicated and even the smallest detail can be dangerously revealing to a scrutinizing eye. "Allied intelligence noticed each captured tank had a unique serial number. With careful observation, the Allies were able to determine the serial numbers had a pattern denoting the order of tank production. Using this data, the Allies created a mathematical model to determine the rate of German tank production…

Nice, I hadn't heard that one. I did hear that they always ended encoded messages with "heil hitler", giving the decoders a solid lead and verification that the key used was correct. On that note, using UUIDs would be more 'secure' than auto incremented numbers, wouldn't it? I don't like how much space they take up in my URLs though.

That, and always beginning them with a weather report (at least for U-Boats).

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#363

Post by tidepod12 »

guscost wrote: post #73
devwastaken wrote: post #55

Earlier quoted context omitted.

"the media". You're not being honest, you either havent used the platform or are deliberately lying here. Either way a platform that freeley allows the organization of violent mobs has no place, and neither does anybody who supports it.

So logically then, Twitter and all its users should be cancelled for freely allowing Antifa to organize there.

Why do you use antifa as an example when there are much better examples like the Nation of Islam [1] and the Taliban [2] on Twitter?

1: https://www.splcenter.org/fighting-hate/extremist-files/grou... ; https://twitter.com/OfficialNOI

2: https://twitter.com/Zabehulah_M33/status/1343458261459218432

Upgrade your argument!

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#364

Post by sanedigital »

muspimerol wrote: post #258
sanedigital wrote: post #221

Earlier quoted context omitted.

Talk about hyperbole. In no way did even 1% of the population on Parler want mass executions for people like you.

There's no hyperbole in the comment. It can still be a safe haven for extremists even if most of the users are not.

That applies equally to the rest of the internet.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#365

Post by mr_overalls »

foob wrote: post #284
mr_overalls wrote: post #173

Earlier quoted context omitted.

> media told me I create a Parler account myself out of curiosity's sake. The platform had basically no moderation, and was rife with open calls to violence. It was absolutely serving as a recruitment & coordination site for domestic terrorism.

And now information about your account has been leaked, and will be lumped in with more nefarious accounts. I have a feeling that a significant number of people have similarly made accounts out of curiosity. I've had my parents and some less technically inclined friends recently ask me what Parler is because it's been in the news. These aren't people that fall under the alt-right categorization in the slightest, and…

I don't care if my personal information was leaked. I followed discussions, posted a comment or two like, "What evidence do you have for that?" There seemed to be tons of other accounts that did the same, along with accounts by obvious Lefts who were there to troll. I highly doubt there will be blowback for the kind of participation I did.

I am absolutely a privacy advocate. However, in the case where the continued existence of our democracy hinges on rooting out violent domestic terrorists, I am willing to make tradeoffs. At this point, you should think about Parler as a jihadi forum for rednecks.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#366

Post by tehbeard »

Cthulhu_ wrote: post #328
vsareto wrote: post #108

Earlier quoted context omitted.

>and naive engineers who are willingly ignorant in their security practices. Fairly sure we could replace algorithm and data structure whiteboard interviews with security interviews and we'd all be better off

I'm all in favor of getting rid of the leetcode interviews, but it's not an either-or one, coding competency is still the primary concern, security a secondary one. And I don't think an individual developer would have prevented this; this is an issue with the general security and monitoring policies at Parler. I mean how could they create millions of admin accounts and extract 70 TB of data without any alarm bells, f…

I saw a tweet regarding it that the IP rate limiting fell over due to X-forwarded-for header not being correctly handled allowing the bypass of that circuit breaker.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#367

Post by jacquesm »

nilkn wrote: post #356
jacquesm wrote: post #347

Earlier quoted context omitted.

Why would they? Because he did nothing? Or because he was 'present'? Accounts that monitor something are not going to run with the crowd in their act. See also: the historian who documented a lot of the mayhem on the 6th from inside the crowd.

Because they're not going to investigate all 4+ million Parler accounts to distinguish between those involved and those not. Many folks here are just assuming everyone on Parler was a terrorist or complicit in what happened. The poster's name and phone number are now lumped in with everyone else's. All we can hope is they made the effort to use fake information.

I'd hope it would take a bit more than 'present' to be handed a sentence. But time will tell.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#369

Post by sanedigital »

tw04 wrote: post #349
sanedigital wrote: post #221

Earlier quoted context omitted.

Talk about hyperbole. In no way did even 1% of the population on Parler want mass executions for people like you.

I hear this a lot, but it makes no logical sense to me. I see a site that is (in)famous for being full of self-proclaimed right-wing "patriots" who are calling for violence against people due to political beliefs. Someone then decide to associate with these people by joining the site. They may not personally post messages calling for violence, but are now associated with them. And the response is: well sure I'm in th…

Have to been on Reddit, specifically /r/politics? There are calls to violence all the time. Nobody bats an eye because it's calls to violence against the "bad guys."

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#370

Post by ErikVandeWater »

newacct583 wrote: post #88
thomastjeffery wrote: post #39

When you purposefully leak private data, you no longer get to hide behind the title "Security Researcher".

Parler was ground zero for the community that announced and executed the attack on the capitol. Thought leaders there were routinely evoking, imagining, and outright calling for violence, and the crowd was a feedback loop. Fundamentally the Parler community existed to provide a platform for people who had been already banned from Twitter. Frankly the peaceful use of the site was mostly incidental. I think there's a r…

Do you have evidence that more violent activity was planned on Parler than Facebook or Twitter, or even a disproportionate amount?

Edit: I suppose not.

Post reply on HN