3 ms·
You're being awfully charitable. It's on the order of magnitude of royal fuck-up. How can any user expect to be safe on Reddit anymore? This is the sort of sit
by yarou 10y ago
You're being awfully charitable.
It's on the order of magnitude of royal fuck-up.
How can any user expect to be safe on Reddit anymore?
This is the sort of situation that irrevocably damages trust.
What's the guarantee that this won't happen again?
What bothers me more is that this sort of functionality exists in the first place. All it would take is one compromised admin account, and boom, you can rewrite somebody's entire comment history without it being logged anywhere.
- thecatspaw 10y agothe functionality is probably a UPDATE comments where id=x set content="newcontent"
- iguana 10y agoOperationally, the CEO should probably not have write access to a master DB.
- thecatspaw 10y agothe CEO is one of the original developers as I understand it, which is probably why he has access to it. but you are right, he should not have it
- ryanSrich 10y agoSo since the founding of Reddit in 2005 and now—we're expected to believe that Reddit hasn't hired a single security expert, engineer or otherwise which has rightfully removed any unnecessary access to user data? This seems incredible to me.
- leereeves 10y agoI seriously doubt he individually looked up comment ids and updated them with database commands. And if he did this for "about an hour" as he said, he clearly didn't use ... WHERE content='fuck u/spez' It seems likely there's code in the front end that gives him the ability to edit user's comments in his browser. That should not exist.
- Natanael_L 10y agoHe probably just scripted it. There doesn't need to be any default functionality for it, if you know how the database works.
- ryanlol 10y agoDo you honestly believe that they didn't have existing tools for this? Instead, the CEO logged into the production DB and manually edited individual comments there? Give them some credit, surely even Reddit staff aren't that terrible.
- samstave 10y agoYou know what I have just considered.... Recall when they were trying to sell "social media influencing" services to STRATFOR? [0] [1] What tools did they create for that "product"; * An astroturfing account mgmt platform? Mass comment editing tool? * Deep comment search tool? * comment-graph showing cross /r/ posts by a user to develop a profile of the person? * Tools to seek out what users from reddit were which users on FB, Google+, Youtube etc. These all above are just the most obvious off the top of my head. The schema for reddit comments is (at least when I last looked at it) is fairly simple and it would be easy to create such tools against that data. Are there any third party services that allow for this. Especially if you think about DLing the comment blob and then do these retroactively against all comments in the past to graph out the personal-profiles of each user.... BRB, need to head out to get more tin-foil.... for the Turkey! not, /r/conspiracy [0] https://www.reddit.com/r/subredditcancer/comments/3818ti/never_forget_reddits_founder_met_with_stratfor_an/ https://www.reddit.com/r/subredditcancer/comments/3818ti/nev... [1] https://www.reddit.com/r/The_Donald/comments/5a3ofc/we_were_right_reddit_is_selling_our_data_to/ https://www.reddit.com/r/The_Donald/comments/5a3ofc/we_were_...
- rahrahrah 10y agoDude I didn't know this. Thank you so much for sharing. Wtf. BTW next time add link to source instead of cancerous subreddits. https://search.wikileaks.org/gifiles/?viewemailid=282044 https://search.wikileaks.org/gifiles/?viewemailid=282044
- icedchai 10y agoYou seem to have a pretty warped perspective. It's a internet message board, not an emergency room operating table.