Live data from Hacker News

Twitch source code and customer data has reportedly been leaked

videogameschronicle.com

501–510 of 617 posts

Re: Twitch source code and customer data has reportedly been leaked

#501

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

I hope these people are paying their taxes...

Re: Twitch source code and customer data has reportedly been leaked

#502
post #254

https://www.twitchearnings.com/

Just goes to show you how small the top is in streaming. Based on this data, and assuming twitch payouts are about a quarter the average streamer's income, about 300-400 twitch streamers get paid more than the total comp of senior staff engineers where I work. Let's be generous and say that these people have no staff to pay (false assumption, e.g. Pestily has stated that he pays hundreds of thousands on salaries for…

Getting paid 7 figures for writing code? That is an anomaly and is not in line with reality. Just doing a cursory Google search for Senior Software Engineer salaries puts the average at ~122k [0], nowhere close to the amount one of those Twitch streamers makes. I wouldn't call it rich either, maybe middle class or upper-middle class at best.

[0] https://www.indeed.com/career/senior-software-engineer/salar...

Re: Twitch source code and customer data has reportedly been leaked

#503

Earlier quoted context omitted.

IBM weren't the only people to play that game. The codename for the SGI Indigo was also Eclipse, for similar reasons, iirc.

And where do explorers like to go? On safaris.

...wow. Genuinely can't believe that has never occurred to me.

Re: Twitch source code and customer data has reportedly been leaked

#504

Earlier quoted context omitted.

Just goes to show you how small the top is in streaming. Based on this data, and assuming twitch payouts are about a quarter the average streamer's income, about 300-400 twitch streamers get paid more than the total comp of senior staff engineers where I work. Let's be generous and say that these people have no staff to pay (false assumption, e.g. Pestily has stated that he pays hundreds of thousands on salaries for…

Getting paid 7 figures for writing code? That is an anomaly and is not in line with reality. Just doing a cursory Google search for Senior Software Engineer salaries puts the average at ~122k [0], nowhere close to the amount one of those Twitch streamers makes. I wouldn't call it rich either, maybe middle class or upper-middle class at best. [0] https://www.indeed.com/career/senior-software-engineer/salar...

Remember that this data covers slightly more than two years of payouts. So under my (admittedly low-information) assumptions, streamer #400 gets 750k in revenue annually.

Also, you linked to the wrong job title. I said "senior staff" software engineer, which where I work is two rungs above senior engineer. http://levels.fyi has comp estimates for a bunch of the big tech cos. $750k far from an unreasonable amount for someone to make in this line of work, and plenty of folks make a lot more than that.

Re: Twitch source code and customer data has reportedly been leaked

#505

Earlier quoted context omitted.

https://xkcd.com/305/

Rule 35, quoted either as "if there is no porn of it, it will be made" or "if there is no porn of it, you are required to make it".

Or simply change your perspective on what porn is, and it's already there.

"Feet pics when?!?"

Re: Twitch source code and customer data has reportedly been leaked

#506

Earlier quoted context omitted.

[potentially off topic] > if you're not ready to write extensive reports.. it's probably 75% of the job Do you happen to have a system for building these out? As a techie, I imagine you've tried something like text-expander or similar... but I see a lot of people unsatisfied that they end up building their own tools.

Yes, We have a few tools that fill in based on scan data, with typical points of data, but a lot of what we're doing requires it's presented in a few different perspectives. Generally we provide a couple reports, the Highly Technical (with notes, logs of actions, etc. This can be hundreds of pages, but it's meant to be a reference for the engineering teams fixing what we found. We also sometimes provide full screen c…

Wow -- thank you kindly for the thorough answer. It looks like you have the reporting down to a science (given how effective that comment was and how quickly you turned it around! :).

I've seen a lot of professions where in depth reporting still requires humans in the loop, and I think that will always be the case.

There's a small hope I have that one day writing will be a bit more like programming -- as in selecting a 'class' for a structure of a section / paragraph / thesis you want to communicate, which then provides typed functions for potential inputs -> outputs, freeing up human brain cycles for more interesting ideas.

Re: Twitch source code and customer data has reportedly been leaked

#507
post #317

Earlier quoted context omitted.

Sports and Entertainment has always been a way to leap frog hard work. I am not saying at all it is not deserved. I am quite ok with them earning millions. But it does make a lot of us pull this comparison, both in achievements for humanity and in effort spent in their endeavors. I personally never played or wish to play the fame lottery, I prefer the hard work path.

I am guessing the most popular streamers have gotten where they are by hard work. Yes some is luck, attractiveness, etc. But that's true in all careers. Just because they're playing games doesn't mean they aren't working. Athletes get insane amounts of money to play games. They exert themselves more physically, but I expect being a top steamer day in and out isn't a cake walk either.

Yeah, a lot of people, especially younger folks that want to be a streamer, miss the fact that people don't watch streamers just to watch someone play a game, they watch them because the streamer is entertaining.

Unless you're an absolute god at whatever game you're playing, nobody wants to simply watch you play a game. People come for the live commentary and audience interaction.

Being a successful stream takes charisma and cleverness, and being clever and charismatic for 3+ hours straight to entertain your audience can be exhausting.

Re: Twitch source code and customer data has reportedly been leaked

#509
post #461

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

Either database dumps are in commit history (very common) or credentials like a password for a database is (even more common). A third reason would be finding a security flaw in the source code and exploiting it.

Nobody is putting production databases in to commit history. At the size of twitch, there's also no way any application dev has access to production.

> credentials like a password for a database is (even more common).

??? What cowboy outfit is putting things which grant access to production customer data in to git?

Re: Twitch source code and customer data has reportedly been leaked

#510
post #444
post #425

Earlier quoted context omitted.

By better systems, I hope you are also including, to name a few: Remote Play, Remote Play Together, Game Streaming, Screenshot capture, Controller API that also works in Desktop, a project to help Linux compatibility with zero effort from the game devs. I think people just consider Steam as a store, but it has become much more than that.

Never got as far as Remote Play or Game Streaming but would have been trivial for us to do so given the backend infrastructure we had already written. Game overlays and capture were working fine, and the controller API was designed to support any number of controllers (Steam's support is great but their interfaces are subpar, in our opinion). We were also able to pull from a well known database of controller configur…

Have you approached Valve?
Post reply on HN