Live data from Hacker News

70TB of Parler users’ messages, videos, and posts leaked by security researchers

cybernews.com

91–100 of 1001 posts

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#91
post #57

While I understand that Twilio is probably not at fault for the actual leak, I'm curious if they gave Parler some time to migrate/shift before cutting them off from their services. It's easy not to care since Parler is the "bad guy" here, but I do think that Internet infrastructure companies need to give a reasonable heads-up before pulling the rug under business customers.

Twilio is far from the top of Parler’s infrastructure problems, to be fair.

The issue is that a “reasonable” heads up here is literally years long for some of these products, especially AWS. It’s hard for these companies to show bad clients the door in a way that isn’t disruptive.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#92
post #73

Earlier quoted context omitted.

"the media". You're not being honest, you either havent used the platform or are deliberately lying here. Either way a platform that freeley allows the organization of violent mobs has no place, and neither does anybody who supports it.

So logically then, Twitter and all its users should be cancelled for freely allowing Antifa to organize there.

Ah yes, Antifa, known for throwing milkshakes, is equivalent to pipe bombs, trucks filled with guns and explosives, and people walking around with zip ties looking for pols to kidnap inside a government building they killed a cop to break into. Right. I forgot.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#93

Where are the comments about how awful it is for people's private messages to be leaked? Or is this okay because the media told me these guys are the bad guys.

"the media". You're not being honest, you either havent used the platform or are deliberately lying here. Either way a platform that freeley allows the organization of violent mobs has no place, and neither does anybody who supports it.

back up a little here. I can find Parler on Google. Does that mean google should be shut down and everyone who supports it shut down as well?

Twitter is used for this kind of thing too. So is whatsapp, signal, telegram etc.

Do we ban all Trump marches/meetups just in case those are used as platforms to organize violence? Why don't we just ban meeting up in public for everyone who voted trump because people can use their mouths to arrange violent mobs too.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#94
post #8

This story truly terrifies me: my team owns my company's sign up page. (I speak for myself and not them, of course). Sounds like Parler, fearing that their OTP provider might go down, decided to fail-open, ie: if the dependency throws an exception, presume there's something wrong with the dependency and that the code provided is acceptable. It never occurred to them that the dependency could be down permanently, or t…

Pretty clear where their priorities lay, huh. Breaking the security of their users is less important than getting new users.

Nah man, I won't criticize too hard. There but for the grace of god goes I, you know?

I've had flakey dependencies. I've thought "maybe fail open is okay in this one case". You're growth hacking your company and you don't want to be held back because a dependency can't handle your scale. And hey, if a few fraudulent accounts get in, we'll just clean them up later. Cost benefit analysis here, right?

But the road to hell is paved with trying to improve user experience.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#95
post #34

Could these "Researchers" be prosecuted under CFAA? Purposely accessing information known to be private? EDIT: accidently wrote DMCA

I think the extracting of the data will definitely go to court as a violation of the CFAA. The publishing of the data might also fall under the DMCA but it sounds less plausible to me. I'm not a lawyer so take this with a grain of salt.

Publishing the data could be DMCA’d by the authors of the original messages.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#96

When you purposefully leak private data, you no longer get to hide behind the title "Security Researcher".

Would it be any better if it was sent to Wikileaks and published there?

Yes, because WikiLeaks is very diligent in scrubbing sensitive private information from leaks.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#97

Earlier quoted context omitted.

Huh? Wikileaks is where people go to publish evidence of government crimes, not Granddad's chats with his friends.

Wikileaks leaked John Podesta's emails, including such criminal activity as his recipe for risotto.

It's generally a good idea for leakers to be selective about their releases (Snowden did a better job than Manning in that area IMO). I guess Wikileaks is between a rock and a hard place, because if they started editorializing then that would lead to political bias.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#99

When you purposefully leak private data, you no longer get to hide behind the title "Security Researcher".

Parler was ground zero for the community that announced and executed the attack on the capitol. Thought leaders there were routinely evoking, imagining, and outright calling for violence, and the crowd was a feedback loop. Fundamentally the Parler community existed to provide a platform for people who had been already banned from Twitter. Frankly the peaceful use of the site was mostly incidental. I think there's a r…

I generally agree that information from here related to the attack is in the public interest. But this is going to also reveal people who had no part of it. I don't think it's fair to justify revealing innocent peoples data.

Re: 70TB of Parler users’ messages, videos, and posts leaked by security researchers

#100

Where are the comments about how awful it is for people's private messages to be leaked? Or is this okay because the media told me these guys are the bad guys.

"the media told me these guys are the bad guys"

and what do you think they are?

Post reply on HN