Live data from Hacker News

Twitch source code and customer data has reportedly been leaked

videogameschronicle.com

571–580 of 617 posts

Re: Twitch source code and customer data has reportedly been leaked

#571
post #51

Earlier quoted context omitted.

It won't work, I don't understand why they're bothering. You can't compete with steam, unless you're trying to hit a niche market.

Its easy to compete with Steam: - 10-15% commission - Exclusives - Curation/quality control - Integrated anti-piracy - Forums/modding/game guides - User profiles/achievements/gamification - Less generous regional pricing (like on consoles) in exchange for slightly lower overall pricing - 5% cashback into wallets, like Nintendo eShop Epic only does some of these things, which is why its struggling. Its lack of social…

10-15% would not convince publishers.

Exclusives are anti-consumer and doesn't convince users if we follow what Epic did.

It's easy to say "curation/quality control" but to come up with a method and algorithmic way of doing it well is insanely difficult.

Anti-piracy is just called DRM and it's not really foolproof nor always desired. GoG is successful in catering that niche. It also requires a good understanding of reverse engineering hardening, so much easier said than done.

Forums/modding/whatever, yeah sure perhaps "simple" but quite extensive. Even for a large company, code doesn't write itself (well, not any code you want to rely on, at least).

I don't really get the console pricing aspect, sorry.

Cashback isn't a free thing, it's a marketing campaign - even if it runs indefinitely. I don't think that would work by itself, it's a bit of a gimmick.

Epic is struggling because of their anti consumer strategies, aggressive and oftentimes reckless CEO, seemingly constant and very public lawsuits with huge companies, and trying to stay relevant outside of Fortnite.

I agree that lack of social contributed to it but is far from the only problem. For example, Epic doesn't have a cart. It's been a widely requested feature, but they focus on other things.

Tencent is a cancer upon this world and I have little base respect for companies that go with them.

Re: Twitch source code and customer data has reportedly been leaked

#572

Hi ya'll, I have a question. My wife and I can't wrap our brains around the fact that payment info was leaked alongside source code . Any theories how this happened? Former pentester btw. I saw a lot of interesting things during my time, but I can't recall seeing a payment database next to a source code repo. Did their s3 bucket get popped or something? Even if their github enterprise got popped, that doesn't explain…

There are several ways why this could have happened. 1) The payment-data were just artifacts left on some file-server or from a process, which was accessible from dev-space. 2) No real systems were accessed and everything, it's all from a bad backup-server or poorly managed worker-pool. 3) Multiple Persons got hacked. 4) Exit-Scam of one or more Workers who just had broad enough access for some reason. 5) Twitch's se…

> and the git-history seems also be missing.

The article says otherwise: "The entirety of Twitch’s source code with commit history “going back to its early beginnings”"

Re: Twitch source code and customer data has reportedly been leaked

#573
post #557

Earlier quoted context omitted.

Twitch, it seems https://sizeof.cat/post/twitch-leaks/#secrets-exposed

You need to open that link incognito. (If clicking through from HN) The site you linked to detects if the referrer url is HN and instead displays only an image saying "HACKER NEWS - A DDoS MADE OF FINANCE-OBSESSED MAN-CHILDREN AND BROGRAMMERS" instead of the content you are trying to link too. wtf

Sounds accurate.

Re: Twitch source code and customer data has reportedly been leaked

#574

Earlier quoted context omitted.

Hardcoded database creds in code. Saw a post earlier with credentials to an rds instance. It said there were more examples. EDIT Found it again: https://sizeof.cat/post/twitch-leaks/#secrets-exposed

You need to open that link incognito. (If clicking through from HN) The site you linked to detects if the referrer url is HN and instead displays only an image saying "HACKER NEWS - A DDoS MADE OF FINANCE-OBSESSED MAN-CHILDREN AND BROGRAMMERS" instead of the content you are trying to link too. OK Then...

If you're using Firefox you can prevent the browser from sending the Referer by going to `about:config` and setting `network.http.sendRefererHeader` to 0.

Re: Twitch source code and customer data has reportedly been leaked

#575
post #509
post #461

Earlier quoted context omitted.

Either database dumps are in commit history (very common) or credentials like a password for a database is (even more common). A third reason would be finding a security flaw in the source code and exploiting it.

Nobody is putting production databases in to commit history. At the size of twitch, there's also no way any application dev has access to production. > credentials like a password for a database is (even more common). ??? What cowboy outfit is putting things which grant access to production customer data in to git?

I know projects that do or did put their production database credentials, which had full read and write access, in git.

And no, thats not a clever thing to do, neither is there a good reason to do it. But people do things you do not like and theres little you can do about it.

I would like to live in a world where you were right, but I am not. Sadly.

[Edit] dumps though are another thing. Not seen that, yet.

Re: Twitch source code and customer data has reportedly been leaked

#576
post #302

Earlier quoted context omitted.

I believe so, and this is why the AGPL was created: > The GNU General Public License permits making a modified version and letting the public access it on a server without ever releasing its source code to the public. > The GNU Affero General Public License is designed specifically to ensure that, in such cases, the modified source code becomes available to the community. https://www.gnu.org/licenses/agpl-3.0.en.html

So in theory, FAANG could make billions of a random person's GPL'd code and they'd never know.

AWS did this with a bunch of stuff including Elastic.

https://www.elastic.co/blog/why-license-change-AWS

Re: Twitch source code and customer data has reportedly been leaked

#577

Earlier quoted context omitted.

Totally fine. My issue is with the streamers who promote socialism to their fans and say that wealth should be distributed, meanwhile pocketing a huge paycheck. I guess there's a market for stupidity. It's both funny and sad.

Since when did socialism mean you’re not allowed to make money and get rich?

Because socialists want to take everyone else’s money and redistribute it, so then nobody can be rich?

Re: Twitch source code and customer data has reportedly been leaked

#578

Earlier quoted context omitted.

Why wouldn’t you start a business, and pay blue collar workers what they deserve?

Because that's not the field of work I chose for myself. I do see construction workers on a daily basis though. I also know the owner of a construction company, he's part of my extended family. The wealth disparity between the workers and my family member is obscene. There's no way I'll ever believe they couldn't be paid better wages.

There’s a very large nearly endless supply of laborers that can do this type of work though. The more niche your skill set the higher you can demand in pay. This is economics 101. You are putting this into a moral space that doesn’t reflect economic realities.

Re: Twitch source code and customer data has reportedly been leaked

#579

Earlier quoted context omitted.

Because that's not the field of work I chose for myself. I do see construction workers on a daily basis though. I also know the owner of a construction company, he's part of my extended family. The wealth disparity between the workers and my family member is obscene. There's no way I'll ever believe they couldn't be paid better wages.

There’s a very large nearly endless supply of laborers that can do this type of work though. The more niche your skill set the higher you can demand in pay. This is economics 101. You are putting this into a moral space that doesn’t reflect economic realities.

So? There are so many economic realities which we explicitly disallow. Monopolies, for example. Why should this exploitation be allowed to go on?
Post reply on HN