News for hackers. Stuff that matters.

A comment on A Twitter app bug was used to match 17M phone numbers to user accounts. Parent comment

Re:A Twitter app bug was used to match 17M phone numbers to ... by krick on Tuesday December 24, 2019 @06:56PM (#21875756)
You answered your own question yourself it that thread it seems:

> API hole explanation is excluded as people with 100% private accs got police visits.

Still, thanks for sharing, that's hell of a story. I don't speak Chinese and have no idea what's ShadowSocksR and why this Doubi guy was so hated by Chinese govt for that. Would appreciate more details.

[ Parent | on HN ]
Re:A Twitter app bug was used to match 17M phone numbers to ... by baybal2 on Tuesday December 24, 2019 @07:16PM (#21875839)
As it is speculated now, this API leak also leaked private accounts as "privacy" check was possibly done client side.

Doubi was one of main developers of Shadowsocks, a traffic obfuscation tool to jump the Chinese firewall.

As said, the guy openly defied Chinese 3 letter services for years, and even trolled a number of agents whom he managed deanonymise himself.

[ Parent | on HN ]