News for hackers. Stuff that matters.

A comment on 70TB of Parler users’ messages, videos, and posts leaked by security researchers. Parent comment

Re:70TB of Parler users’ messages, videos, and posts leaked ... by nullc on Monday January 11, 2021 @11:46AM (#25731521)
> no security measure circumvention took place

You don't consider exploiting 2fa fail-open being triggered by deplatforming by their 2fa provider being used to mass password reset accounts and vacuum up their private messages not a security circumvention?

What about using a arbitrary content type upload on their video subdomain to implement an XSS attack to allow them to download all videos, including ones sent privately between users?

[ Parent | on HN ]
Re:70TB of Parler users’ messages, videos, and posts leaked ... by judge2020 on Monday January 11, 2021 @01:02PM (#25732965)
https://github.com/ArchiveTeam/parler-grab/blob/master/parle...

There might have been other attacks in the way you describe, but it doesn't seem to be used by the team behind archiving the content.

https://archive.org/details/archiveteam_neparlepas

[ Parent | on HN ]