lundi 11 janvier 2021

Parler gets owned

https://twitter.com/mattsheffield/st...73748450918402

Quote:

This Parler user explains it quite well here. Because of yet more security flaws at Parler, it's now possible for all that "free speech" to be shared and archived with the world, even if the posters tried to erase their not-at-all innocent videos and GPS data.

In slightly more technical terms, it seems as though Parler never closed some of their developer-friendly security holes (sort of the programming equivalent of game cheat codes made by devs) and as a result, their anyone with the right knowledge could have admin access.

Parler never actually deleted anything its users posted. And, stupidly, they also kept it accessible to admin users.

This meant that anyone with admin access could still download it.

Once Parler's two factor authentication feature was disabled, because it was designed for developer convenience rather than security, anyone with the knowledge could become an administrator. And that's how Parler just got owned.

People have been downloading the raw videos, photos, and text posts by the gigabyte and archiving it for later public distribution.

All that perfect, totally harmless free speech will still be searchable, even now that Amazon locked out Parler from its servers.

I haven't confirmed this yet but it's possible that among the not-actually-deleted data might be the archived photos of the state identification cards that Parler invited users who wanted to be verified to upload.
Look forward to massive Wikileaks-type data dumps.

Attached Images
File Type: jpg parler data.jpg (48.8 KB)


via International Skeptics Forum https://ift.tt/2LJNI07

Aucun commentaire:

Enregistrer un commentaire