Parler got owned in their dying stages - They dumped EVERYTHING including media with unscrubbed metadata [up: see threadmark for accurate summary]

[Veliladon]

Mod edit: the below embedded tweet is largely inaccurate. See the bottom of the OP + threadmarks for more accurate information on the breach.

Their 2FA failed in a spectacular way allowing hackers to spam the creation of admin accounts.

Reddit - Dive into anything

www.reddit.com

Click to shrink...

Every Deleted Parler Post, Many With Users' Location Data, Has Been Archived

In the wake of the violent insurrection at the U.S. Capitol by scores of President Trump’s supporters, a lone researcher began an effort to catalogue the posts of social media users across Parler, a platform founded to provide conservative users a safe haven for uninhibited “free speech” — but...

gizmodo.com

Click to shrink...

 

[Richter1887]

 

[Razmos]

Apparently even stuff that was "deleted" is still visible to admin accounts lmao

 

[Greigor the FellHand]

Now please hand it all over to every media, and every gov organization.

Parlor was the one that required the social security number//drivers license to be uploaded to right?

 

[Jisgsaw]

Asked in another topic: is Parler also operating in Europe? Because if yes, the EU could also dunk on them for those violatons to GDPR...

( the description of how the hack was done may be false however, though that doesn't change much)

 

[m_dorian]

Parler owners were probably secret Antifa/leftists/communists/martian people with a plot to dismantle the true patriots.

 

[Razmos]

Parler owners were probably secret Antifa/leftists/communists/martian people with a plot to dismantle the true patriots.

Click to shrink...

Republicans in a few days "We sure are glad that Parler, the notorious ANTIFA hive, was shut down"

 

[Rover]

Imagine taking a political and conspiratorial stance against 'big tech', but not understanding the fundamental issues at all, and trusting a new and fledgling social media startup with a lot of personal data and incriminating posts.

 

[Deleted member 44129]

So basically....

 

[Deleted member 7051]

Why are these guys so worried? I thought you had nothing to fear as long as you didn't do anything wrong. 🤔

 

[chefbags]

Monday morning already starting off well Lmao.

 

[RagnarokX]

Now please hand it all over to every media, and every gov organization.

Parlor was the one that required the social security number//drivers license to be uploaded to right?

Click to shrink...

The hackers made it all public.

 

[Humidex]

 

[NookSports]

Apparently even stuff that was "deleted" is still visible to admin accounts lmao

Click to shrink...

Let this be a lesson on almost everything you do online. Most social media places simply set a flag like: "deleted=true" when they "deleted" your content

 

[Deleted member 81119]

Is this going to get the hackers in trouble? I'd hate for all this data to be considered inadmissible evidence or whatever...

 

[Imperfected]

Parler owners were probably secret Antifa/leftists/communists/martian people with a plot to dismantle the true patriots.

Click to shrink...

Ugh, fucking Snakes always up in my plots. I just want to make giant robots, get off my back!

 

[Duxxy3]

 

[Indy in the Fridge]

I can't imagine the amount of pants shitting that's occurring right now.

 

[RagnarokX]

Is this going to get the hackers in trouble? I'd hate for all this data to be considered inadmissible evidence or whatever...

Click to shrink...

That would only be if the police obtained it illegally. The hackers aren't police.

 

[Deleted member 81119]

That would only be if the police obtained it illegally. The hackers aren't police.

Click to shrink...

Okay phew!

 

[BassForever]

Is this going to get the hackers in trouble? I'd hate for all this data to be considered inadmissible evidence or whatever...

Click to shrink...

Some of these people never have to face charges for their lives to be ruined by this. Being put on no fly lists, being publicly shamed and losing employment, being banned from multiple platforms like facebook/twitter/etc.

 

[n00bp]

This is fucking amazing 😂

 

[MrRob]

Unemployment numbers about to jump in that sub-group.

 

[Dr. Mario]

Internet Warriors? This sounds kind of fake. Has anybody seen the datadump? I thought the no fly lists were hoaxes too.

Edit: the original tweet sounds more convincing.

 

[artsi]

I'm not sure if law enforcement is allowed to use hacked data as evidence, hacking is still a crime even if the target is rotten.
But I'd say they (Parler and their users) got what's coming for them.

 

[acheron_xl]

I always expected this country to eventually have a fascist problem. I never thought they'd be so goddamned stupid.

 

[Syriel]

Apparently even stuff that was "deleted" is still visible to admin accounts lmao

Click to shrink...

Imagine taking a political and conspiratorial stance against 'big tech', but not understanding the fundamental issues at all, and trusting a new and fledgling social media startup with a lot of personal data and incriminating posts.

Click to shrink...

California AG going to have fun with that under CCPA.

 

[Wrexis]

"Internet Warriors" sounds like script kiddies.

I'm glad it was done, but will this hold up in court? Unlikely.

 

[MrMysterio]

Glad Antifa has mandatory IT-classes, so that kind of stuff just doesn't happen.

 

[RagnarokX]

People on the hacker's twitter thread have posted some crazy examples from the hack. There were hit lists of politicians they wanted to murder and shit.

 

[DeltaRed]

I'm just saying if you're concerned about authorities seeing your internet history because you've threatened to murder people maybe you're not the good guys

 

[ShapeDePapa]

Parler owners were probably secret Antifa/leftists/communists/martian people with a plot to dismantle the true patriots.

Click to shrink...

LaLiLuLeLo

 

[Veliladon]

 

[Palette Swap]

Looking forward to that VLOOKUP matching lawmakers lol

 

[jiggle]

Reddit - Dive into anything

www.reddit.com

what does this mean?

 

[Toumari]

Oops.

 

[Piston]

Internet Warriors? This sounds kind of fake. Has anybody seen the datadump? I thought the no fly lists were hoaxes too.

Edit: the original tweet sounds more convincing.

Click to shrink...

This doesn't confirm anything either but a reaction from the Parler side.

 

[Vitet]

I'm not sure if law enforcement is allowed to use hacked data as evidence, hacking is still a crime even if the target is rotten.
But I'd say they (Parler and their users) got what's coming for them.

Click to shrink...

Is this even considered hacking? They got access to administrative privileges using the site tools only by resetting passwords (as it's described on the post). Sure, they used other tools to create accounts and collect data but the first step is so dumb easy it's seems surreal.

 

[RagnarokX]

"Internet Warriors" sounds like script kiddies.

I'm glad it was done, but will this hold up in court? Unlikely.

Click to shrink...

Well, the head of the hack is a 26 year old woman.

And why wouldn't it hold in court? The police didn't do the hack.

 

[JaggedSac]

Is this verified to be true?

 

[Jisgsaw]

Reddit - Dive into anything

www.reddit.com

what does this mean?

Click to shrink...

The the hacking method described may be inaccurate.
I haven't seen the content of the hack disputed though.

 

[artsi]

Is this even considered hacking? They got access to administrative privileges using the site tools only by resetting passwords (as it's described on the post). Sure, they used other tools to create accounts and collect data but the first step is so dumb easy it's seems surreal.

Click to shrink...

I can't say because I'm not from US, and not that familiar with local laws.

But I work in cybersecurity in Europe and that could definitely be prosecuted here, "you're not allowed to enter the house even if you see the door is unlocked" type of situation.

They even took steps to keep harvesting and spreading private user data even if the security problem was identified in time and they (Parler) tried to fix it.

 

[jiggle]

The the hacking method described may be inaccurate.
I haven't seen the content of the hack disputed though.

Click to shrink...

Ah ok
thnx

 

[Crimsonskies]

Holy shit 70 TERRABYTES ??

Parler requires a phonenumber to register meaning a lot of people should probably be a little concerned about having the FBI suddenly show up.

Especially since deleted posts are still visible to admin accounts lol

 

[pink]

The true Patriots reveal themselves

 

[RagnarokX]

I always expected this country to eventually have a fascist problem. I never thought they'd be so goddamned stupid.

Click to shrink...

It's like if the day of the Reichstag fire Hitler held a rally where he told his followers he wanted to burn down the Resichstag. And then his followers videotaped themselves setting the fire and told the news they did it.

 

[Wrexis]

And why wouldn't it hold in court? The police didn't do the hack.

Click to shrink...

I mean how do you prove the data is genuine? So you present a file to an agency saying X said to kill Y.
I assume the agency would need to get the original data to confirm.

 

[Hecht]

Neat. Reading material for later.

 

[Ramsay]

Say it with me: once it's on the Internet, it's there forever.

 

[.Detective.]

Can we officially call this The Trumpenning now?

It is likely one of the largest own-goals'/self-inflicted digital damage in a long while