3 ms·
The description of the hack is not accurate. Okta is the service that disclosed the endpoints used.
by kodah 6y ago
The description of the hack is not accurate. Okta is the service that disclosed the endpoints used.
- codefined 6y agoOkta is a large, enterprise identity provider. I doubt in the case of a right-wing site existing they'd give out access to that provider on purpose? Did they mess up? I can't find any details about it yet.
- kodah 6y agoI won't speculate on their intent, but by publicly commenting on disabling the account it looks like it opened the door for the hackers, again, if any of this is true. It's entirely possible that Parler stored all of their data in S3, with metadata documents, and someone managed to find some creds in the app to list the object storage. These practices and this kind of vulnerability are both common.
- nikolay 6y agoIt just a scare tactic to discourage the use of Parler. It's so poorly written that it sounds like a kid.
- Cthulhu_ 6y agoNot that they need much to discourage Parler, lol.
- nikolay 6y agoI mean, to scare off the existing users of Parler, but, I guess, shutting the whole thing down by the Big Tech Cartel was more efficient. I just don't get how people get away with abusing an undocumented API to fetch and publish PII - something that's illegal. Remember how people did the same with with T-Mobile and got into a huge trouble? Until we keep having these double standards, there always will be polarization and tensions! And how is this mess good for America and the world?!