4 ms·

So what you’re saying is that you discovered a vulnerability that leaked the private information of your users, said absolutely nothing for 6 months, then fina

So what you’re saying is that you discovered a vulnerability that leaked the private information of your users, said absolutely nothing for 6 months, then finally came clean, but only because you were forced to because people were selling data on the deep web. Please take your “sorry” and shove it where the sun doesn’t shine. You don’t “take our privacy seriously”. This is utterly ridiculous and unacceptable, and in a fair world you would be punished heavily for it. Edit: an earlier version of this comment criticised Twitter for not doing an investigation earlier to uncover the fact that a leak occurred. This accusation was based on me misreading the press report - see one of the child comments for details. I’ve removed that part of the comment.

gameshot911 4y ago
>didn’t bother to do an investigation into whether it leaked data (which clearly is possible, because you’ve done it now) It sounds like they confirmed the exploit by looking at the hacked data, not by a renewed search of previously available logs.
- HL33tibCe7 4y ago
  Yeah, I misread that part. Edited my comment.
winternett 4y ago
The methods to scrape numbers from social media have been published on YouTube for ages now. They share those numbers publicly because they themselves run services that share user data with other companies openly... Twitter (for example) is used as an authentication service with Disqus and a few other online apps too, an online comment service which could easily save/track sensitive ID data across comments on multiple sites unwittingly to the user, so it's a really shady overreach if that is indeed the case. These numbers are gathered under the guise of security, but they are used for entirely different purposes. I think the real fault is in them forcing users to enter this type of data to begin with, because that makes the only options to surrender your data to them or to not use the app at all. It would be interesting to see if numbers from verified accounts were included in the leak, that would be very telling.
deleted 4y ago
[deleted]
deleted 4y ago
[deleted]

gameshot911 4y ago

>didn’t bother to do an investigation into whether it leaked data (which clearly is possible, because you’ve done it now) It sounds like they confirmed the exploit by looking at the hacked data, not by a renewed search of previously available logs.

HL33tibCe7 4y ago
Yeah, I misread that part. Edited my comment.

winternett 4y ago

The methods to scrape numbers from social media have been published on YouTube for ages now. They share those numbers publicly because they themselves run services that share user data with other companies openly... Twitter (for example) is used as an authentication service with Disqus and a few other online apps too, an online comment service which could easily save/track sensitive ID data across comments on multiple sites unwittingly to the user, so it's a really shady overreach if that is indeed the case. These numbers are gathered under the guise of security, but they are used for entirely different purposes. I think the real fault is in them forcing users to enter this type of data to begin with, because that makes the only options to surrender your data to them or to not use the app at all. It would be interesting to see if numbers from verified accounts were included in the leak, that would be very telling.

deleted 4y ago

[deleted]

deleted 4y ago

[deleted]