Twitch is hacked, and its source code leaked

Re:Twitch is hacked, and its source code leaked by ergerger on Wednesday October 06, 2021 @03:56PM (#28777622)

I also worked for Twitch and can confirm what you're saying is true. These repo's any staff member had access to - including non-engineering staff.

Revenue for the longest time was as simple as navigating to a streamers dashboard as staff, but they did finally gate that away from staff who don't need to see that info, however I am sure there are other ways to obtain revenue reporting info.

I am assuming all data - including personal - has been compromised but so far, the data leaked is data that most staff would have access to in some way or another. Some may find that shocking, but this was not a "high level hack"

[ Parent | on HN ]

Re:Twitch is hacked, and its source code leaked by madrox on Wednesday October 06, 2021 @04:00PM (#28777676)

I'm actually very happy to hear they finally added a flag for payout access. It's been years since I was there and my eyes bugged out when I saw what I had access to without needing it.

[ Parent | on HN ]

Re:Twitch is hacked, and its source code leaked by ogn3rd on Wednesday October 06, 2021 @06:22PM (#28779225)

Parent company was no different.

[ Parent | on HN ]

Re:Twitch is hacked, and its source code leaked by bengale on Wednesday October 06, 2021 @05:47PM (#28778914)

Why did non engineers have access to repos?

[ Parent | on HN ]

Re:Twitch is hacked, and its source code leaked by vkou on Wednesday October 06, 2021 @05:50PM (#28778953)

The better question is, why did random engineers have access to the financials of the streamers on the platform, without having to go through a break-glass, audited, emergency access escalation.

[ Parent | on HN ]

Re:Twitch is hacked, and its source code leaked by realyashnag on Wednesday October 06, 2021 @04:47PM (#28778217)

Allegedly it also contains AWS access keys. I feel bad for the engineers who will have to answer for this.

[ Parent | on HN ]