News for hackers. Stuff that matters.

A comment on 70TB of Parler users’ messages, videos, and posts leaked by security researchers. Parent comment

Re:70TB of Parler users’ messages, videos, and posts leaked ... by judge2020 on Monday January 11, 2021 @11:14AM (#25730910)
Since it's WARC and is going to end up on archive.org (archive.org is going to host it, but a different org 'archive team' are the ones who downloaded it), twitter isn't going to stop it from being posted since it's just going to show up as a link to web.archive.org. Arguably this isn't 'hacked data' since it's stuff that was wget'd and no security measure circumvention took place.
[ Parent | on HN ]
Re:70TB of Parler users’ messages, videos, and posts leaked ... by nullc on Monday January 11, 2021 @11:46AM (#25731521)
> no security measure circumvention took place

You don't consider exploiting 2fa fail-open being triggered by deplatforming by their 2fa provider being used to mass password reset accounts and vacuum up their private messages not a security circumvention?

What about using a arbitrary content type upload on their video subdomain to implement an XSS attack to allow them to download all videos, including ones sent privately between users?

[ Parent | on HN ]
Re:70TB of Parler users’ messages, videos, and posts leaked ... by judge2020 on Monday January 11, 2021 @01:02PM (#25732965)
https://github.com/ArchiveTeam/parler-grab/blob/master/parle...

There might have been other attacks in the way you describe, but it doesn't seem to be used by the team behind archiving the content.

https://archive.org/details/archiveteam_neparlepas

[ Parent | on HN ]
Re:70TB of Parler users’ messages, videos, and posts leaked ... by 1024core on Monday January 11, 2021 @01:57PM (#25734228)
Why can't I download these files from archive.org? All of the interesting files are marked as "not available for download"
[ Parent | on HN ]
Re:70TB of Parler users’ messages, videos, and posts leaked ... by judge2020 on Monday January 11, 2021 @03:13PM (#25735806)
Maybe because it's still being imported, but the archive.org team probably needs to review it and make it more widely available (ie. on web.archive.org).
[ Parent | on HN ]
Re:70TB of Parler users’ messages, videos, and posts leaked ... by 1024core on Monday January 11, 2021 @05:23PM (#25738349)
If "the team needs to review it", I guess we're going to have another gatekeeper?
[ Parent | on HN ]