Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitch is hacked, and its source code leaked

kotaku.com

Post reply on HN
Print view View original

81–90 of 325 posts

Re: Twitch is hacked, and its source code leaked

#81

Post by ThePadawan »

ashtonkem wrote: post #60
ThePadawan wrote: post #41

Earlier quoted context omitted.

I work in a small nation state. That doesn't stop CV-hungry engineers from finding ways to overcomplicate it. (I do agree with you on this topic in general)

You completely misread me.

Oh I'm sorry, here's what I read:

"Building apps is easy as long as you don't have millions of users. For that you have to actually think about bottlenecks, the larger architecture etc."

(I agree with that)

What I wanted to express is that lots of engineers I personally know instead say

"Building apps involves thinking about every bottleneck in advance and optimizing for every possible user scenario and a global user base, regardless if the number of users is only ~100."

Re: Twitch is hacked, and its source code leaked

#84

Post by ganoushoreilly »

63 wrote: post #13
nemothekid wrote: post #2

This is a pretty thorough and high profile hack on a major tech company - this isn't something I'd expect from an Amazon owned property. The hack (allegedly, I haven't downloaded it) includes * Entire git histories * Internal/Private AWS SDKs * Encrypted Password dumps and payout reports It's so comprehensive I'm very curious into how an attacker got that level of access. I can't think of another, large, corporate we…

> It's also strange that someone who has this level of access to what is presumably a multi-billion dollar company decided to just leak the data? Maybe they did try to ransom it, but I'd imagine someone with this kind of access inside Twitch must have had some creative way of making money. Notably, the initial leak didn't actually include the password data which the leaker claims to have, just source code and payment…

Given the torrent is labeled "twitch-leaks-part-one" I'm curious too as to what they have. The torrent breaks out into a lot of compressed volumes, so it's clear this wasn't just a backup file, but a curated collection of files. I'm very curious if we will see any other amazon related leaks come from it.

Either way, I can only imagine the chaos inside as they try to figure out what has transpired here.

Re: Twitch is hacked, and its source code leaked

#86

Post by Raidion »

com2kid wrote: post #32
leros wrote: post #8

Earlier quoted context omitted.

It something I would expect security hardware to have automatically stopped. Even an employee shouldn't be able to download 125GB of stuff without flipping a safety switch somewhere.

> Even an employee shouldn't be able to download 125GB of stuff without flipping a safety switch somewhere. I am trying to recall, but I am pretty sure when I worked in Microsoft Office that a build would pull down many tens of gigabytes of data. 125GB in one day from the build system wouldn't be uncommon!

That's ingress though. Companies should be monitoring and worrying about egress.

Edit: This won't help against a thumbdrive, but that type of thing should be also tracked.

Re: Twitch is hacked, and its source code leaked

#87

Post by axpy906 »

tyingq wrote: post #76
nemothekid wrote: post #28

Earlier quoted context omitted.

> It's possible that this first leak was just to establish trust so they can random or auction password hashes later. Password hashes are relatively useless though? Once the leak is announced I imagine most of the big targets will rotate their credentials. Then the next thing you need to do is spend possibly thousands in CPU time bruteforcing bcrypt hashes. Then I'm not sure what you can even do with those. I'm not c…

>Then I'm not sure what you can even do with those Assume some end users used the same passwords on other, non-twitch accounts. That's what makes hacked passwords valuable, no matter where they came from.

Pretty much this. If they gain one email/username password combination - they can use it elsewhere.

Re: Twitch is hacked, and its source code leaked

#88

Post by treesknees »

echelon wrote: post #45
dolores_ab wrote: post #11

Someone actually started streaming going through the code ... on twitch. https://www.twitch.tv/deepfrieddev

It just got disconnected. The chat had a few Amazon insiders, which was interesting to read their perspectives.

Any bits you recall from the chat?

Re: Twitch is hacked, and its source code leaked

#90

Post by Hokusai »

nemothekid wrote: post #19
Hokusai wrote: post #6

Earlier quoted context omitted.

> this isn't something I'd expect from an Amazon owned property Because you expect Amazon to put security priority over new features and profit? We have very different understandings of what Amazon stands for.

> Because you expect Amazon to put security priority over new features and profit? I don't know what you think Amazon stands for, but Amazon runs the largest cloud hosting service in the world - AWS, which not only runs a large number of other large companies but governments as well. I know, first hand, that their datacenter security protocols are state of the art. Amazon has a much larger surface attack area so if t…

> Amazon has a much larger surface attack area so if they were playing fast and loose with security, chances are we would know already.

I get your point and I am no taking about AWS but about Twitch. Each part of the company has its own incentives. Amazon is well know for not caring about quality nor its employees. In my experience with corporations there is little to no technical sharing between different parts of the company. AWS could have the best SecOps in the world and Twitch could have no security at all. Is your experience different?

Post reply on HN