Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitch source code and customer data has reportedly been leaked

videogameschronicle.com

Post reply on HN
Print view View original

461–470 of 617 posts

Re: Twitch source code and customer data has reportedly been leaked

#461

Post by iuri1 »

sillysaurusx wrote: post #337

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

Either database dumps are in commit history (very common) or credentials like a password for a database is (even more common).

A third reason would be finding a security flaw in the source code and exploiting it.

Re: Twitch source code and customer data has reportedly been leaked

#462

Post by colinmhayes »

jandrese wrote: post #435
bluefirebrand wrote: post #273

Earlier quoted context omitted.

I hate to break it to you, but 200k/yr is in the top 4% of earners in America. That's not "middle class" by any stretch of the imagination.

After taxes, insurance, retirement, etc... you're taking home maybe $100k of that. That's "modest home in a nicer suburb" level money.

In the bay and LA sure. Everywhere else in the country you're living large. Even NYC 200k is doing pretty well.

Re: Twitch source code and customer data has reportedly been leaked

#463

Post by iuri1 »

AnIdiotOnTheNet wrote: post #269
Semaphor wrote: post #37

This is somewhat hilarious. Just 5 days ago I was complaining about Twitch’s new "Only verified users" setting which requires me to give them my phone number. One of the reasons I said I’ll not do that was "hacks, leaks". And now this. Sure, I’ll give you my phone number to add TOTP (Why even?) after I’ve just been shown how secure that data is.

I don't really get this. My phone number is apparently already known by every scammer and spammer on earth, which is why I never answer calls from people I don't know, so what am I losing? Meanwhile, Twitch has had a significant bot spamming problem.

Probably not everyone has disposable phone numbers or even know how to manage them, or even choose not to do it out of a personal decision

Re: Twitch source code and customer data has reportedly been leaked

#464

Post by saurik »

Buttons840 wrote: post #279
boringg wrote: post #201

This is going to BLOW up the twitch gaming community with all the infighting now that everyone knows how much everyone else makes. Wow.

Number of subs is often known, and the relative size of channels is known. Unless someone's going to be surprised that someone with double the viewers makes double the money, I doubt there will be any surprises.

I was under the impression that Twitch streamers were able to be directly tipped by viewers (as opposed to being paid by the view or something by some centralized payment distribution point) and so while there would of course be a correlation on viewers to income, the variance is going to be high... some people are going to be much better at monetizing their user base than others, and I would at least expect the streamer's charm, business model, and audience targeting to swamp a mere 2x difference in viewers.

Re: Twitch source code and customer data has reportedly been leaked

#465

Post by Semaphor »

sirclueless wrote: post #457
Semaphor wrote: post #332

Earlier quoted context omitted.

It’s readily solvable not to require a phone number to add a TOTP app.

The point isn't to authenticate control of an account, it's to tie the account to some kind of expensive-to-replicate real-world cost, ideally one that most potential customers are already paying for. Phone numbers are nice because the marginal cost to a customer is low (they probably already have one) while the marginal cost to a bad actor is high (it's expensive to acquire many of them or to change one once it's be…

My current phone contract: 3.99€/month

My current twitch subscriptions: 11.97€/month

I can’t really see how they need my phone number to make it too expensive to be a bot.

And if that is the thing, then that’d makes them even more shady, claiming it’s for account security when it’s for their bit protection.

Re: Twitch source code and customer data has reportedly been leaked

#466

Post by jandrese »

colinmhayes wrote: post #462
jandrese wrote: post #435

Earlier quoted context omitted.

After taxes, insurance, retirement, etc... you're taking home maybe $100k of that. That's "modest home in a nicer suburb" level money.

In the bay and LA sure. Everywhere else in the country you're living large. Even NYC 200k is doing pretty well.

I don't think you've been keeping up with home prices and insurance costs around the country. $100k take home isn't all that anymore. You're not food stamp poor, but it's easy to be house poor at that income level, especially if you're shooting for a better school district. Health insurance costs eat up so much of that it is not funny, even if you are healthy. If you or someone in your family comes down with an expensive medical condition you'll be in real trouble.

Re: Twitch source code and customer data has reportedly been leaked

#467

Post by [deleted] »

sillysaurusx wrote: post #337

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

[deleted]

Re: Twitch source code and customer data has reportedly been leaked

#468

Post by colinmhayes »

jandrese wrote: post #466
colinmhayes wrote: post #462

Earlier quoted context omitted.

In the bay and LA sure. Everywhere else in the country you're living large. Even NYC 200k is doing pretty well.

I don't think you've been keeping up with home prices and insurance costs around the country. $100k take home isn't all that anymore. You're not food stamp poor, but it's easy to be house poor at that income level, especially if you're shooting for a better school district. Health insurance costs eat up so much of that it is not funny, even if you are healthy. If you or someone in your family comes down with an expen…

True, these people are all self employed, so insurance costs would be pretty large. If you're making 200k I'd still say you've probably got at least 100 left over after taxes and insurance. That affords you a 600k house using the 30% of income rule if you can get the down payment together.

Re: Twitch source code and customer data has reportedly been leaked

#469

Post by rasz »

jandrese wrote: post #266
falcolas wrote: post #246

Earlier quoted context omitted.

Number 1 is Critical Roll. Their website lists 24 employees (many of whom are professional actors), and I’m sure there’s more behind the scenes. Salaries add up quickly.

That works out to $200k/year for each employee, which after you account for benefits is a solid middle class income, assuming they don't live in downtown San Francisco or something. It's basically a regular job at that point.

They all live in LA actually :)

Re: Twitch source code and customer data has reportedly been leaked

#470

Post by [deleted] »

sillysaurusx wrote: post #337

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

[deleted]
Post reply on HN