Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[TD1]

I would be quite amused if some coppers knelt for the Trumpists.

[Naturegirl1999]

I would be quite amused if some coppers knelt for the Trumpists.

it took me a bit to realize you were talking about cops, I was thinking why would copper creatures care about Trump!

[Superdorf]

So hey.

Let's all take a moment to appreciate this guy.

[MorleyDev]

I love the dumb look on the guy in fronts face in the video. He literally glances at the hall to the chamber like "Duuuuh welll he's not going that way so it must not be important let's follow this police officer chap he's clearly leading us where we want to go oh my goodness where did these other officers come from".

[Flying Teasets]

So hey.

Let's all take a moment to appreciate this guy.

Interesting name.

[Vector]

Yeah, between that and the guy who runs Parler having the last name Monster, Twitter has been blowing up saying "we all need to apologize to Hideo Kojima."

[Caz]

Did you guys hear about the Parler database hack? Very lol.

[nenjin]

I dunno. Getting their illegal activity info to the Feds and local law enforcement is one thing. Just doxxing people that you don't agree with politically though......well.....just imagine if the tables were turned, and people were trying to organize to stop a fascist administration from seizing control.

[Vector]

You know, around the GamerGate period, it was not unheard of for trans women to be doxxed and SWATTed on Twitter for being trans on the internet.

Please note that I'm not saying anything like "people should be doxxed for their political speech," what I'm saying is that this idea of "if the tables were turned" is silly. The tables have been turned for a long, long time.

[Cthulhu]

It wasn't a hack, it was just incredibly shitty web design.  Photo function didn't scrub exif data, deleted posts weren't actually deleted but marked invisible, and shitty API that didn't check for the deletion flag when somebody told it to download everything on the site.  I think there may have been a couple "hacks" but the big one was all publicly available data that anybody could've gotten.

I like to shitpost about how God of War is a political allegory:  The whole story is how the gods gave Kratos the power to kill a god because he wanted to use it on somebody they didn't like.  Then he decided to use it on them and they got mad.

[Rolan7]

deleted posts weren't actually deleted but marked invisible

This part strikes me as shitty but not in the "incompetence" sense like the rest of the incident.  Maybe I'm misattributing malice, but I suspect they wanted to keep that data.

[Telgin]

That's not uncommon in API design and is something I've even built into APIs I'd created before because... yeah, sometimes you want to recover data that was "deleted."  Not sure how that meshes with privacy laws these days though.

And allowing that archived data to be retrieved by clients is a different matter completely, and definitely shows some negligence on their part.

[MetalSlimeHunt]

If the postmortem I read was accurate, when their authentication service dropped them it accidentally let people just make administrator accounts if they wanted to, and so people did and then imaged the entire site with their admin rights, including all the scanned drivers licenses that these morons uploaded to get the VIP role.

[MorleyDev]

Flagging deleted posts as deleted instead of actually hard deleting them was once standard practice in software design.

Modern privacy regulations and general 'not wanting to keep the history of the planet' have altered this, better practice now is to keep something 'deleted' for a period of days before hard deleting it. But since this platform was explicitly built to be a modern platform that rejects modernity I doubt the developers paid much attention/respect to the "don't keep things forever" and "the state demands you respect people's privacy" thing.

Then there are the '9-to-5' developers who don't keep up with the advancing landscape except to the extent their (often non-technical) managers force them to (since to them it's just viewed as a job like any other, where they do what they're told, and there's no standards enforcing keeping up to date). Businesses that exclusively employ what I call 'sausage factory developement' often use what becomes regarded as bad practices for years after the people paying attention stop.

[Cthulhu]

If the postmortem I read was accurate, when their authentication service dropped them it accidentally let people just make administrator accounts if they wanted to, and so people did and then imaged the entire site with their admin rights, including all the scanned drivers licenses that these morons uploaded to get the VIP role.

I've heard two different stories, which may be two separate incidents.  One of them was ArchiveTeam and they just downloaded everything via the API, for whatever reason the site wasn't designed to prevent this or limit what could be pulled.  No admin accounts needed.