News of the Cyber World

[kyonides]

Stolen Twitch source code, creator payment data revealed in apparent data leak

Source code underpinning the live streaming service Twitch has reportedly leaked, exposing information about some company plans and payment data from popular accounts on the service.

Twitch, a subsidiary of Amazon, is a popular service that broadcasts esports, live music and other events to audiences that have numbered millions at a time.

An anonymous user of the message board 4chan — home to hackers and trolls alike — posted a 125-gigabyte torrent file that they allege includes all of Twitch’s code, including information about internal security tools, three years of payment history to Twitch “creators” and data related to proprietary software. The poster hinted that more details would be forthcoming, with the stated goal of “foster[ing] more user disruption and competition in the online video streaming space,” as the Video Game Chronicle first reported on Wednesday.

In a statement, Twitch confirmed a breach had occurred.

“Our teams are working with urgency to understand the extent of this,” a spokesperson said in an email. “We will update the community as soon as additional information is available. Thank you for bearing with us.”

I wonder if it really was a misconfiguration only.

Facebook blames networking issues, not a cyberattack, for long downtime

Facebook, Instagram and WhatsApp largely returned to the internet late Monday following a six hour-long outage that outsiders suggested, without evidence, was the result of a cyberattack.

In an Oct. 4 statement, the company apologized for the long downtime, blaming the matter on networking issues. Configuration changes “on the backbone routers that coordinate network traffic between our data centers” interrupted communication, Facebook said, causing a “cascading effect” that disrupted the flow of communication. The same issue also halted Facebook’s internal systems, further delaying the recovery process.

Independent security experts suggested from the beginning that the company’s Domain Name System, the technological protocol by which connected devices locate one another on the internet, was somehow to blame.
...
Another tweet originating from what appears to be a small technology startup also seized on Twitter conversation, as first noticed by Aric Toler, a Bellingcat researcher. The company claimed that a database of more than 1.5 billion Facebook profiles was for sale on a dark web forum, aiming to connect the listing to the larger downtime.

The post was based on a weeks-old listing on a cybercrime marketplace where the original seller promises only surface-level profile information such as users’ email addresses, gender, location and phone numbers. The data is scraped from Facebook, meaning someone used an automated scan to gather public information, rather than gathering information via an unauthorized intrusion.

Well, I hope our resident pinay girl wasn't affected by this breach at all.