Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitch source code and customer data has reportedly been leaked

videogameschronicle.com

Post reply on HN
Print view View original

401–410 of 617 posts

Re: Twitch source code and customer data has reportedly been leaked

#401

Post by MAGZine »

robjan wrote: post #173
PUSH_AX wrote: post #160

Earlier quoted context omitted.

I've never worked in this way (when I've been part of the org), is it that common? What are the benefits of making everyone fork repos vs branching off the original repo?

I don't think that's a common workflow within companies. In every org I have worked at, forking is explicitly disabled

I worked at a large gaming company and that was definitely the collaboration model.

Before per-branch controls, the only way to disable write access (while maintaining read access, pull-request privs, etc) to a repository's blessed branches was forks.

Re: Twitch source code and customer data has reportedly been leaked

#402

Post by acoard »

wizzairflyer wrote: post #396
stevefan1999 wrote: post #309

Here's a link to the data: bWFnbmV0Oj94dD11cm46YnRpaDpONUJMWjZYRUNORUhIQVJISk9WUUFTNFc3VFdSWENTSSZkbj10d2l0Y2gtbGVha3MtcGFydC1vbmUmdHI9dWRwJTNBJTJGJTJGb3Blbi5zdGVhbHRoLnNpJTNBODAlMkZhbm5vdW5jZQ==

I'm very curious to have a peek but isn't downloading stolen material a crime? And wouldn't this be compounded by the fact that with torrent systems you are also helping redistributing it further?

At most, it would be copyright infringement if Twitch (or Amazon) claimed copyright ownership of the code, which I assume they do.

There's no such "trade secrets" laws or anything like that you're violating. Perhaps the hacker has broken laws of unlawful access (i.e. hacking), but you certainly aren't just by downloading it. It's as bad as downloading a song or streaming a movie on a sketchy website. In practice, I've never heard of anyone getting sued for downloading code in a large leak.

When the Windows source code got leaked, so many people looked at it, including FAANG engineers. As long as you don't bring any of that stuff to work you're fine. That includes the knowledge[0]

[0] https://en.wikipedia.org/wiki/Clean_room_design

Re: Twitch source code and customer data has reportedly been leaked

#403

Post by dilyevsky »

matheusmoreira wrote: post #167
swarnie wrote: post #74

Earlier quoted context omitted.

Wagies donating to millionaires is probably the funniest thing i can imagine.

Yeah, it's so absurd it's hilarious. Seeing people make millions of USD for playing games and mentioning others in a live stream made me seriously rethink the value of my own work.

Now look at them yo-yos, that's the way you do it!

Re: Twitch source code and customer data has reportedly been leaked

#404

Post by oauea »

sillysaurusx wrote: post #337

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

some of the leaked code has embedded credentials in it

Re: Twitch source code and customer data has reportedly been leaked

#405

Post by Miner49er »

meheleventyone wrote: post #243
Miner49er wrote: post #132

Earlier quoted context omitted.

The thing with Twitch streaming is that you can do it from almost anywhere. So, $50k is maybe a bit high for a living wage. Plus, Twitch is probably just one source of income for many content creators. For many it's not their primary source, but just a side source. YouTube, Patreon, OnlyFans, outside sponsors, or even esports may be where they make most of their money.

> The thing with Twitch streaming is that you can do it from almost anywhere. So, $50k is maybe a bit high for a living wage. The thing is the power law curve is so strong that if we take the top ten thousand which sets a living wage at approximately $11.5k which is definitely not a living wage in a lot of places people stream from then that only improves things to the top 0.04% (of those trying to make it). > Plus,…

There's no way it includes all 3rd party revenue. Many big YouTubers have a Twitch, and occasionally stream on it, and they maybe make very little on their Twitch but would be near the top of this list from YouTube revenue. Dream, for example.

Re: Twitch source code and customer data has reportedly been leaked

#406

Post by Arrath »

tyrfing wrote: post #399
ryathal wrote: post #339

Earlier quoted context omitted.

It's more than just throwing money at it. EA tried and failed to separate from Steam. Epic might succeed, but it's not going to be because of money, but because Fortnite let them capture young gamers before they got into Steam. Wherever a user gets a critical mass of a library built up first is going to be the winner.

> Wherever a user gets a critical mass of a library built up first is going to be the winner. This is where they've been throwing money at the problem: giving away a ridiculous amount of games for free. https://www.theverge.com/2021/4/12/22380895/epic-games-store...

It is quite nice, I think I paid for 1 game of the 14 in my epic library.

Re: Twitch source code and customer data has reportedly been leaked

#408

Post by throwrqX »

h_anna_h wrote: post #384
throwrqX wrote: post #374

Earlier quoted context omitted.

This is patently ridiculous. The biggest boards on 4chan, particularly /pol/ have widespread support for the genocide of Jews, black people, Muslims and women. Well maybe not all women, a more common view is instead that they should be enslaved to men. This kind of correction should give an idea of what kind of ideas are popular there.

4chan is not only /pol/. The culture between boards is vastly different. Although I do not disagree, /pol/ specifically is toxic. And it's not as if reddit does not have its own share of similar forums.

Of course 4chan is not just /pol/ but it is the biggest board, and together with /b/ contribute to plenty of hateful content as I mentioned. The culture between boards is different but /pol/ refugees in particular have been spreading to other boards for several years now and it's very annoying because even if a small group of them decide to visit a board regularly then they can ruin the culture because of relative sizes between the boards. Reddit and Twitter have their own problems, particularly with echo chambers but the biggest subreddit on reddit isn't spewing anywhere near the same kind of shit as the biggest board on 4chan does.

Re: Twitch source code and customer data has reportedly been leaked

#409

Post by garyfirestorm »

ssklash wrote: post #348
sillysaurusx wrote: post #337

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

Also a pentester. My guess is they just had really broad access to Twitch's systems, not that card data and source code were together. Given the amount and range of data, wide-ranging access to their infrastructure is the only thing that makes sense to me here.

Are you guys (other commenter) are professional pentesters? How do you become one? Do you freelance or work full time 8-5?

Re: Twitch source code and customer data has reportedly been leaked

#410

Post by netflixandkill »

andy_ppp wrote: post #118
astrange wrote: post #58

Earlier quoted context omitted.

> PS: Make sure to change your Twitch (and possibly Prime) password. Twitch is already prompting users to do so based on Reddit posts. This is not worth worrying about. If Twitch is making you reset your password, that means you don’t need to hurry because they’ve already locked your account. If your password hash leaked, the important thing isn’t Twitch, it’s every other place you used the same password.

Shouldn’t the hash be salted and useless elsewhere?

Outside of the same authentication domain with bad auth token practices (windows) the hash almost always is useless elsewhere. Salting increases the complexity and thus size of hash tables or hash comparison (rainbow tables), but if your manage to break or brute force the entries, salted or not, the secret often is reused by many users.
Post reply on HN