6 ms·
> GPS coordinates—unlike most social media sites, Parler does not strip metadata from media its users upload, which, crucially, could be useful for law enforcem
by f430 6y ago
> GPS coordinates—unlike most social media sites, Parler does not strip metadata from media its users upload, which, crucially, could be useful for law enforcement
OH SHI-
This is a colossal mess up, on epic proportions.
- dvdbloc 6y agoA mess up if you intended to protect your users...
- slg 6y agoDue to the people involved, Parler is almost certainly not a honeypot setup by the FBI, CIA, or some other government organization. However some of the details that have leaked out over the last week made me wonder how little of the site would have changed if that was the intended purpose.
- throwanem 6y agoIt would probably have been more secure.
- KMag 6y agoSufficiently advanced incompetence is indistinguishable from malice.
- tlrobinson 6y agoHah, this is great. If you don't get the references, it's Hanlon's Razor ("Never attribute to malice that which is adequately explained by stupidity") plus Arthur C. Clarke's "3rd law" ("Any sufficiently advanced technology is indistinguishable from magic.") Apparently it's called Grey's Law: https://www.urbandictionary.com/define.php?term=Grey%27s%20Law https://www.urbandictionary.com/define.php?term=Grey%27s%20L...
- nullsense 6y agoDoes that make it a "quotemanteau"? Wait... Is that a thing? Are there more of these?
- riffraff 6y agoI vote for "quotemanteau" to be officially sanctioned! But I would say the specific case is merely a snowclone[0] of "any sufficiently X is indistinguishable from Y" [0] https://en.wikipedia.org/wiki/Snowclone https://en.wikipedia.org/wiki/Snowclone
- nullsense 6y agoIt appears to have the properties of both in this case. That is to say it's a snowclone where the substitutions come from another quote. I guess quotemanteaus are a special kind of unique snowclone. You could take "with great power comes great responsibility" and form the snowclone "with great X comes great Y" and then take the quote "the medium is the message" and use those in your snowclone to make the quotemanteau "with a great medium comes a great message" Hmm... I feel like I should try concoct more of these. They're fun.
- frays 6y agoThank you for the explanation.
- patates 6y agoMore like, sufficiently advanced malice is indistinguishable from common incompetence :)
- xkcd-sucks 6y agoIt's pretty well demonstrated that Three Letter Agencies really like enticing idiots people into fantasy situations well above their competency in order to generate terrorism convictions so it's always a possibility even if there's no demonstrable third party malicious action
- pc86 6y agoAnd in this case there is demonstrable malicious action.
- astronautjones 6y agothis is true "female body inspector" shirt clientele though
- pelliphant 6y agothey would have required authentication for their api calls if that was the case... Besides that, probably not much. =)
- Exmoor 6y agoIndeed. The level of security failure was pretty incredible. They named media serially (So, pics/1.jpg, pics/2.jpg, etc.) and did not have any validation that you were allowed to access what you were grabbing so it was literally as easy as possible to grab everything. Oh, and did I mention that private messages were also fully accessible?
- f430 6y agoI am convinced this was an inside job. There is simply no way someone can be this incompetent without willful intent.
- redisman 6y agoLet me introduce you to every early stage startup in the world. Plenty of mature companies also have completely abysmal security practices
- missedthecue 6y agoEver worked for a startup? This is what "move fast, break things" does.
- vlovich123 6y agoI have but only at competent ones. Nothing this flagrantly bad.
- redisman 6y agoI’ve seen not quite this bad but definitely in the same order of magnitude
- nafey 6y agoThis happens at established firms as often as startups.
- bawolff 6y agoYou'd be surprised how incompetent people can be when it comes to security. Nothing i have heard so far would really surprise me for a small startup with very rapid growth.