Live data from Hacker News

Twitch is hacked, and its source code leaked

kotaku.com

41–50 of 325 posts

Re: Twitch is hacked, and its source code leaked

#41

Does it take a genius to figure out how to build twitch? It’s a modern crud app with video streaming.

Everything is easy to build until a small nation state’s worth of people want to use it at once.

I work in a small nation state.

That doesn't stop CV-hungry engineers from finding ways to overcomplicate it.

(I do agree with you on this topic in general)

Re: Twitch is hacked, and its source code leaked

#42
post #8

Earlier quoted context omitted.

It something I would expect security hardware to have automatically stopped. Even an employee shouldn't be able to download 125GB of stuff without flipping a safety switch somewhere.

If the bulk of it is a git repo, it's probably expected that every engineer will download it regularly.

Case against monorepos?

Re: Twitch is hacked, and its source code leaked

#43

Earlier quoted context omitted.

Trying to protect against leaking developers/employees is like trying to protect against lone gunman terrorists: useless. And, if you try anyway, it is likely to cause more annoyance to everyone involved than actual protection (think TSA).

I disagree. Locking down and logging access to raw data like password hashes or payout information to only those who absolutely need it doesn't cause much annoyance and is very useful. It protects the company against rogue employees (not even strictly malicious, but also curious employees who want to see more than they should). It limits exposure if an employee's account gets hacked (my pet theory for this Twitch hac…

Adding to your pet theory I think that WFH has led to a lot of people being casual about their workplace security. For example, leaving a laptop unattended at a Starbucks.

This is just a guess but I wouldn't be surprised if companies have to start taking stricter precautions with their security in a WFH world.

Re: Twitch is hacked, and its source code leaked

#44
I'd be interested if someone could get their own instance of Twitch up and running from this leak. Someone mentioned internal API's, which would have to be reworked to avoid detection, but it'd be interesting to host it on AWS just to see how long it takes to get shut down.

How would current AWS policies hold up? Obviously the code would be illegally acquired, but do they have detection mechanisms in place?

Re: Twitch is hacked, and its source code leaked

#46

Earlier quoted context omitted.

Netflix & Youtube in shambles.

I found out how to destroy reddit. Just fork their repos! https://github.com/reddit

Sadly, Reddit stopped updating the public repo for their main application in 2017:

https://github.com/reddit-archive/reddit

Post reply on HN