Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitch source code and customer data has reportedly been leaked

videogameschronicle.com

Post reply on HN
Print view View original

561–570 of 617 posts

Re: Twitch source code and customer data has reportedly been leaked

#561

Post by unclekev »

kevinsundar wrote: post #535
sillysaurusx wrote: post #337

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

Hardcoded database creds in code. Saw a post earlier with credentials to an rds instance. It said there were more examples. EDIT Found it again: https://sizeof.cat/post/twitch-leaks/#secrets-exposed

You need to open that link incognito. (If clicking through from HN)

The site you linked to detects if the referrer url is HN and instead displays only an image saying "HACKER NEWS - A DDoS MADE OF FINANCE-OBSESSED MAN-CHILDREN AND BROGRAMMERS" instead of the content you are trying to link too.

OK Then...

Re: Twitch source code and customer data has reportedly been leaked

#562

Post by unclekev »

epse wrote: post #557
_hilro wrote: post #509

Earlier quoted context omitted.

Nobody is putting production databases in to commit history. At the size of twitch, there's also no way any application dev has access to production. > credentials like a password for a database is (even more common). ??? What cowboy outfit is putting things which grant access to production customer data in to git?

Twitch, it seems https://sizeof.cat/post/twitch-leaks/#secrets-exposed

You need to open that link incognito. (If clicking through from HN)

The site you linked to detects if the referrer url is HN and instead displays only an image saying "HACKER NEWS - A DDoS MADE OF FINANCE-OBSESSED MAN-CHILDREN AND BROGRAMMERS" instead of the content you are trying to link too.

wtf

Re: Twitch source code and customer data has reportedly been leaked

#563

Post by ehsankia »

mkishi wrote: post #496
NaturalPhallacy wrote: post #475

Earlier quoted context omitted.

I can't help but love the fact that PaymoneyWubby (a fat ginger nerd who makes interesting content, at least on youtube) makes more than pokimaine and Amouranth whose primary feature seems to be young, attractive, and female. Perhaps there's a tiny bit of justice in the world.

Donations probably dwarf subscription earnings, I'm not sure it's that black and white.

Indeed. A comment above also estimated sub money to be ~1/4 of streamer's earnings, but as you mention that can vary quite widely, and in my experience it does quite so for female streamers. Pre-OF sex work is quite a lot like that too, you generally have a few whales making up ~90% of your revenue on cam sites, which is not great. On Twitch too, in my experience looking at "top donators", it's usually just a few handful of people giving big sums to female streamers.

Re: Twitch source code and customer data has reportedly been leaked

#564

Post by Factorium »

junon wrote: post #51
jsiepkes wrote: post #7

> An unreleased Steam competitor, codenamed Vapor, from Amazon Game Studios The choosing of the name Vapor is probably no accident when the main competitor is Steam. Just like when IBM launched the "Eclipse foundation" which was arguably based on one of Sun's most prized possessions; Java.

It won't work, I don't understand why they're bothering. You can't compete with steam, unless you're trying to hit a niche market.

Its easy to compete with Steam:

- 10-15% commission

- Exclusives

- Curation/quality control

- Integrated anti-piracy

- Forums/modding/game guides

- User profiles/achievements/gamification

- Less generous regional pricing (like on consoles) in exchange for slightly lower overall pricing

- 5% cashback into wallets, like Nintendo eShop

Epic only does some of these things, which is why its struggling. Its lack of social features is a major reason for low engagement on the platform, probably driven by Tencent and Chinese censorship restrictions (in the same way that the Steam forums are unavailable in China).

Re: Twitch source code and customer data has reportedly been leaked

#565

Post by throwaway2037 »

sydthrowaway wrote: post #280
thinkingemote wrote: post #157

From another site a user commented that it might have proprietary modifications to ffmpeg which is LGPL/GPL (I think?). Would a leak be considered to be distribution, could others legally take these modifications and merge them into the upstream project? I imagine other free software might have modifications too.

Can you use GPL code internally (ie run your backend) if you never publish it?

Yes, it is valid. Consider for example: If you are an embedded hardware company. You modify GCC to support a new target / platform. Then, you can compile C code and create binaries for your embedded hardware.

As long as GCC is not distributed, this is a perfectly valid use case for GPL'd software.

Less abstract: Facebook famously has massive internal patches for MySQL, which is GPL'd. And of course, Google has massive internal patches for Linux kernel, which is also GPL'd.

Re: Twitch source code and customer data has reportedly been leaked

#566

Post by 14u2c »

d3nj4l wrote: post #23
dijit wrote: post #15

Earlier quoted context omitted.

I worked for Nokia for a brief moment in time and the Nokia E71 (or another in that line) was internally codenamed "BeeBee" (like: blackberry) which was comical to me given that the phone looked a lot like a contemporary era blackberry. https://en.wikipedia.org/wiki/Nokia_E71 https://en.wikipedia.org/wiki/BlackBerry_Curve

The E71 was a god tier device. Owned one for a good bit as a teen and it was the perfect phone for that time IMO. You could even WhatsApp on it until relatively recently.

Almost the exact same situation for me except it was the E61. I remember playing DOOM on it for the first time and being quite impressed.

Re: Twitch source code and customer data has reportedly been leaked

#567

Post by qwerty456127 »

Every time this happens (which feels like almost every week already) I feel sorry for the people whose data leaked but a part of me says "good, perhaps another case will add to the critical mass and the society will finally realize amassing personal data in digtal databases is madness". Everything which can should be anonymized, the rest should only save the essential data needed to fulfill its very function. Whatever is not digital yet should never be.

Re: Twitch source code and customer data has reportedly been leaked

#568

Post by emodendroket »

trey-jones wrote: post #437
Arrath wrote: post #406

Earlier quoted context omitted.

It is quite nice, I think I paid for 1 game of the 14 in my epic library.

I wonder how much I paid over the last 15 years for the 198 games in my Steam library. Not that much, I suspect between all the Humble Bundles and steam sales of yore. Nevertheless I was pissed when I had to get Origin in order to even play Mass Effect 3, and I never even considered the epic store, so I think the theory of library investment is sound. Steam has a good head start on a lot of us.

Everybody hated Steam when it was new too and with the frequent Epic game giveaways people will eventually have large catalogs of Epic games they grabbed on a lark. Between that and a number of highly desired sequels being exclusive to the platform I can't see why they wouldn't be able to eventually make inroads.

Re: Twitch source code and customer data has reportedly been leaked

#569

Post by werid »

NaturalPhallacy wrote: post #475
stunt wrote: post #254

https://www.twitchearnings.com/

I can't help but love the fact that PaymoneyWubby (a fat ginger nerd who makes interesting content, at least on youtube) makes more than pokimaine and Amouranth whose primary feature seems to be young, attractive, and female. Perhaps there's a tiny bit of justice in the world.

and yet all the other women who aren't earning much gets blamed for stealing viewers and money from guys who aren't the last bit entertaining.

justice? hardly.

Re: Twitch source code and customer data has reportedly been leaked

#570

Post by tgsovlerkhgsel »

brutal_chaos_ wrote: post #519
tgsovlerkhgsel wrote: post #485

Earlier quoted context omitted.

Rule 35, quoted either as "if there is no porn of it, it will be made" or "if there is no porn of it, you are required to make it".

> 34

Rule 34 is "There is porn of it", I was explaining Rule 35.
Post reply on HN