News for hackers. Stuff that matters.
Re:Pirate Bay founder thinks Parler’s inability to stay onli... by kevindurb on Wednesday January 13, 2021 @09:25PM (#25771047)
If I remember correctly mongo stores the id in “_id” and has a getter for “id” so maybe they just iterated all the keys of the model when they stringified their output
Re:Pirate Bay founder thinks Parler’s inability to stay onli... by kijin on Wednesday January 13, 2021 @10:37PM (#25771573)
Elasticsearch, too. In either case, it looks like they're just piping raw backend responses to the API endpoint without removing unnecessary fields.
Re:Pirate Bay founder thinks Parler’s inability to stay onli... by developer2 on Wednesday January 13, 2021 @11:12PM (#25771881)
Yep, that's an indication of Elasticsearch being used (and not transforming documents to a standard representation that strips such fields).
Re:Pirate Bay founder thinks Parler’s inability to stay onli... by ashtonkem on Wednesday January 13, 2021 @11:29PM (#25772023)
It seems like they basically just exposed a lot of data directly, as apparently most of their APIs didn’t enforce any authentication or hide records that had been soft deleted.

Apparently the records were strictly sequential, which I don’t believe is true for Mongo which IIRC includes the node ID in part of it.