Twitch source code and customer data has reportedly been leaked

Re:Twitch source code and customer data has reportedly been ... by iuri1 on Wednesday October 06, 2021 @02:57PM (#28776858)

Either database dumps are in commit history (very common) or credentials like a password for a database is (even more common).

A third reason would be finding a security flaw in the source code and exploiting it.

[ Parent | on HN ]

Re:Twitch source code and customer data has reportedly been ... by _hilro on Wednesday October 06, 2021 @07:52PM (#28779976)

< Either database dumps are in commit history (very common

Nobody is putting production databases in to commit history. At the size of twitch, there's also no way any application dev has access to production.

> credentials like a password for a database is (even more common).

??? What cowboy outfit is putting things which grant access to production customer data in to git?

[ Parent | on HN ]

Re:Twitch source code and customer data has reportedly been ... by maverwa on Thursday October 07, 2021 @05:55AM (#28784262)

I know projects that do or did put their production database credentials, which had full read and write access, in git.

And no, thats not a clever thing to do, neither is there a good reason to do it. But people do things you do not like and theres little you can do about it.

I would like to live in a world where you were right, but I am not. Sadly.

[Edit] dumps though are another thing. Not seen that, yet.

[ Parent | on HN ]

Re:Twitch source code and customer data has reportedly been ... by epse on Thursday October 07, 2021 @01:24AM (#28782388)

Twitch, it seems https://sizeof.cat/post/twitch-leaks/#secrets-exposed

[ Parent | on HN ]

Re:Twitch source code and customer data has reportedly been ... by unclekev on Thursday October 07, 2021 @02:22AM (#28782863)

You need to open that link incognito. (If clicking through from HN)

The site you linked to detects if the referrer url is HN and instead displays only an image saying "HACKER NEWS - A DDoS MADE OF FINANCE-OBSESSED MAN-CHILDREN AND BROGRAMMERS" instead of the content you are trying to link too.

wtf

[ Parent | on HN ]

Re:Twitch source code and customer data has reportedly been ... by rollo on Thursday October 07, 2021 @05:27AM (#28784045)

Sounds accurate.

[ Parent | on HN ]

Re:Twitch source code and customer data has reportedly been ... by gyata97 on Friday October 08, 2021 @03:39PM (#28803271)

Lol at the image when you don’t open in incognito

[ Parent | on HN ]