5 ms·
>In a press release announcing the decision, Twilio revealed which services Parler was using. This information allowed hackers to deduct that it was possible to
by grawprog 6y ago
>In a press release announcing the decision, Twilio revealed which services Parler was using. This information allowed hackers to deduct that it was possible to create users and verified accounts without actual verification.
>With this type of access, newly minted users were able to get behind the login box API used for content delivery. That allowed them to see which users had moderator rights and this in turn allowed them to reset passwords of existing users with simple “forgot password” function. Since Twilio no longer authenticated emails, hackers were able to access admin accounts with ease.
So these 'security researchers' are random hackers that illegally gained access to accounts and servers are actively doxxing people and this behaviour's now being praised?
Apart from being illegal, I seem to recall severe backlash against several instances of doxxing in the past, which is exactly what these people have done.
I wonder if people would still be cheering this on if 70TB worth of twitter information had been leaked instead.
- arbitrage 6y agoYou ask questions like you don't know the answer you're already looking for. Hate speech is not protected. Take your fascist apologies somewhere else.
- deleted 6y ago[deleted]
- beerandt 6y agoYea, there's no reason 70TB of downloaded data and millions of user accts (with each requiring an additional attack iteration) were needed to prove a security weakness. Let alone the creation of a coordinated, decentralized network of machines to exploit the attack and maximize data extraction. "Security Researchers" The doublespeak is getting maddening.
- Craighead 6y agoDomestic terrorists deserve no quarter. There is no double speak, this group of insurrectionists wanted to destroy the rule of law. Pettifoging this reality to play the 1984 card is weak.
- ibrault 6y agoCurious as to how you would define this as doxxing? The information contained in this "hack" is just an archival of all publicly-posted information on Parler, it is comparable to someone archiving my LinkedIn page and calling it doxxing.
- grawprog 6y agoPrivate messages are public? Also, it's hard to tell from the article, but it seems like there's phone.numbers and id involved as well.
- ibrault 6y agoI have not seen any indication that private messages are included in this. As the person indicates, phone numbers are only included if they were posted on Parler by the users themselves, but yes from what I can tell the IDs are the most "private" part of the leak. Although one could argue that they are still "public" given that Parler publicly exposed the information.
- grawprog 6y agoI have to point out. Messages being leaked is actually in the title of the article. >70TB of Parler users’ messages, videos, and posts leaked by security researchers
- deleted 6y ago[deleted]
- smileybarry 6y agoThe article itself never defines "messages" and, from context, it seems like they referred to users' [public] posts as "users' messages" -- not DMs/PMs. EDIT: A clarification on Twitter from ~9h ago: "since a lot of people seem confused about this detail and there is a bullshit reddit post going around: only things that were available publicly via the web were archived. i don't have you e-mail address, phone or credit card number. unless you posted it yourself on parler." https://twitter.com/donk_enby/status/1348666166978424832 https://twitter.com/donk_enby/status/1348666166978424832