Live data from Hacker News

70TB of Parler users’ messages, videos, and posts leaked by security researchers

cybernews.com

371–380 of 1001 posts

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#371
post #68

Earlier quoted context omitted.

There's a surprising amount of insecure code in the wild; and naive engineers who are willingly ignorant in their security practices. I'd assume that Parler's engineers motivations had more to do with politics than providing a secure platform for protecting dissidents under duress. (Or, if we look at the history of a recent major war, the mediocre engineers working for the other side thought they were the good guys.)

>and naive engineers who are willingly ignorant in their security practices. Fairly sure we could replace algorithm and data structure whiteboard interviews with security interviews and we'd all be better off

Replace fizz buzz with spotting SQL injection issues.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#372

Earlier quoted context omitted.

Data, evidence? The threat is in giving the fascist terrorist 1% a microphone not that the other 99% happen to be listening. Parler was lax in policing that 1%.

> The threat is in giving the fascist terrorist 1% a microphone The problem with fascist terrorists is not their rhetoric, it's their violence. Allow them to speak their mind and you lower their need for violent action and everyone else gets to show that their ideas are horribly flawed. It's amusing to think that people seriously believe there are huge swathes of people just ripe to become neo-nazis because someone g…

>It's amusing to think that people seriously believe there are huge swathes of people just ripe to become neo-nazis because someone gave a rousing speech or wrote some tweets - how do you manage not to succumb to these rhetorical titans?

Given that exactly this happened 90 years ago and caused the deaths of tens of millions, people are needless to say cautious.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#373
I tried to sign up for Parler out of curiosity when I heard it was being removed from app stores, but as soon as it required a phone number for account registration I deleted the app.

I'm surprised it also didn't require a social security number and credit card as well. /s

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#374
post #68
post #8

This story truly terrifies me: my team owns my company's sign up page. (I speak for myself and not them, of course). Sounds like Parler, fearing that their OTP provider might go down, decided to fail-open, ie: if the dependency throws an exception, presume there's something wrong with the dependency and that the code provided is acceptable. It never occurred to them that the dependency could be down permanently, or t…

There's a surprising amount of insecure code in the wild; and naive engineers who are willingly ignorant in their security practices. I'd assume that Parler's engineers motivations had more to do with politics than providing a secure platform for protecting dissidents under duress. (Or, if we look at the history of a recent major war, the mediocre engineers working for the other side thought they were the good guys.)

"Cool, I found a package for this"

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#375
When Edward Snowden leaked information, he went through a journalist gatekeeper to do so as responsibly as possible.

Even the Hunter Biden story went through the NY Post.

This doesn't feel like a responsible, good-faith effort to save the republic. It feels like an attack on one's political enemies.

Using the euphemnism "security researcher" in this case doesn't help. Perhaps underhanded tactics are needed to prevent evidence destruction, but call them what they are. Don't pretend they are curious academics or a corporation hardening their systems.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#376

Earlier quoted context omitted.

> the biggest attack on the US since 9/11 This is an absolutely disgusting and disgraceful thing to say.

No, it is factually correct. They said 'since', not larger than. In the meantime, since 9/11 there have as far as I know it not been any larger attacks within the US on the United States itself. If you know of any then please correct me.

> on the United States itself.

What does "on the United States itself" mean and why does 9/11 meet that standard but not, say, the Pulse nightclub shooting?

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#377
post #68
post #8

This story truly terrifies me: my team owns my company's sign up page. (I speak for myself and not them, of course). Sounds like Parler, fearing that their OTP provider might go down, decided to fail-open, ie: if the dependency throws an exception, presume there's something wrong with the dependency and that the code provided is acceptable. It never occurred to them that the dependency could be down permanently, or t…

There's a surprising amount of insecure code in the wild; and naive engineers who are willingly ignorant in their security practices. I'd assume that Parler's engineers motivations had more to do with politics than providing a secure platform for protecting dissidents under duress. (Or, if we look at the history of a recent major war, the mediocre engineers working for the other side thought they were the good guys.)

> I'd assume that Parler's engineers motivations had more to do with politics than providing a secure platform for protecting dissidents under duress.

If one is to look at the LinkedIn for the tech leadership of Parler it would not be a stretch to say that they are way outside of their depth technologically speaking.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#378
post #202
post #68

Earlier quoted context omitted.

There's a surprising amount of insecure code in the wild; and naive engineers who are willingly ignorant in their security practices. I'd assume that Parler's engineers motivations had more to do with politics than providing a secure platform for protecting dissidents under duress. (Or, if we look at the history of a recent major war, the mediocre engineers working for the other side thought they were the good guys.)

To be fair, it's probably hard for a network like Parler to attract top talent. I mean, they explicitly advertised themselves as the "free speech social network" (i.e. "all hate speech welcome, we won't censor anyone except maybe Trump parody accounts") - would you want to work for such a company, or have it on your resume in the future?

For the very reasons people work in ad tech, Facebook, et. al. Not everyone is a wannabe politician or a wannabe future founder/leader/influencer/celebrity with the accompanying delusions of grandeur.

A lot of people just want to lead normal lives with their friends and family. I envy them. Truly.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#379
post #51

Where are the comments about how awful it is for people's private messages to be leaked? Or is this okay because the media told me these guys are the bad guys.

Don't worry, the "hacked material" rule on twitter will prevent anything derived from this being posted on twitter. Right???

Since it's WARC and is going to end up on archive.org (archive.org is going to host it, but a different org 'archive team' are the ones who downloaded it), twitter isn't going to stop it from being posted since it's just going to show up as a link to web.archive.org. Arguably this isn't 'hacked data' since it's stuff that was wget'd and no security measure circumvention took place.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#380

Earlier quoted context omitted.

Talk about hyperbole. In no way did even 1% of the population on Parler want mass executions for people like you.

According to Wikipedia, there are 4,000,000 active Parler users. You think you can assert with confidence that there are not 40,000 people with Parler accounts who want mass executions? I'd like to think you're right, but I'm not as confident as you are. Not after watching someone beat a Capitol Police officer to death with a flag pole flying the American Flag. People think they are defending their country against ev…

The data is public now—if you're so certain, go find me a single post on Parler calling for mass executions.
Post reply on HN