cross-posted from: https://chat.maiion.com/post/3401

Reddit’s week appears to have gone from bad to worse, as AlphV (aka BlackCat) has claimed that operators broke into Reddit’s servers on February 5, 2023, and took 80 GB of zipped data. . Furthermore, Reddit has been contacted by BlackCat, once on April 13 and again on June 16, with no response and no attempt to find out what was taken. Following recent fallout from the subreddit blackouts, and the controversial comments from CEO Steve Huffman, Reddit has been having a tough time in the eyes of its users who have been reportedly leaving the platform and setting up alternatives on the fediverse (such as Lemmy or kbin), used by the Twitter alternative Mastodon.

https://www.neowin.net/news/reddit-claimed-to-have-been-hacked-by-blackcat-and-it-has-threatened-to-leak-the-data/

https://www.databreaches.net/blackcat-claims-they-hacked-reddit-and-will-leak-the-data/

  • @DocMcStuffin
    link
    English
    1072 years ago

    Sounds like reddit is having a bad year.

    sips coffee

    Oh well. How’s everyone’s Sunday? I’m making pulled pork sliders tonight.

    • @Adulated_Aspersion
      link
      English
      172 years ago

      Pad Thai with zucchini, squash, and cilantro from my garden. Eggs are from my chickens. Everything else super fresh from a local farmers market.

      Spez did a little FAFO dance.

    • @Aztech
      link
      English
      132 years ago

      Mexican discada tacos over here

    • @LaunchesKayaks
      link
      English
      122 years ago

      I spent the day playing Subnautica on my Switch, cuddling with my dog, and trying to recover from dehydration caused by the wicked sunburn I got yesterday. Finally feeling better internally. My skin is killing me tho. I can’t even apply aloe because my burn is on my back and I can’t reach it. Gotta love living alone lol.

      • @[email protected]
        link
        fedilink
        English
        32 years ago

        what if you were to lay down plastic wrap on the floor, spred a puddle of aloe vera gel on top and then lie down on top of the puddle?

        • @LaunchesKayaks
          link
          English
          22 years ago

          I’d do that if my dog wouldn’t get in the way lol

    • FlashMobOfOne
      link
      English
      102 years ago

      Haven’t decided.

      Maybe ziti with meat balls and marinara, or some bratwurst with potatoes.

    • @[email protected]
      link
      fedilink
      English
      102 years ago

      Maybe some tasty rice. I want to get an instantpot; never had one before but I have heard they are amazing

    • @[email protected]
      link
      fedilink
      English
      82 years ago

      I did laundry at my parents place with my wife. She’s scared of my mom so we did it while they were out of town.

      Tried a really good Italian place with the wife afterward was a good date.

    • @aspirate2959
      link
      English
      82 years ago

      Smash burgers on the new flattop I just finished seasoning.

      Pulled pork sliders sounds like a great plan for an upcoming weekend

    • Inv
      link
      English
      82 years ago

      I’m making burritos with rice, refried beans that I forgot were homemade, guacamole (with onions this time), and some Beyond ground beef seasoned with the spices in the cabinet that I like but can’t name.

    • konalt
      link
      English
      62 years ago

      Had some pasta with old sausages from the freezer earlier. Surprisingly wasn’t that bad.

    • @rms1990
      link
      English
      42 years ago

      Im currently deep in Unix books

      • @Necromnomicon
        link
        English
        32 years ago

        Who is Unix books, and where did you meet her?

  • Dr. Moose
    link
    English
    1012 years ago

    Remember when reddit was hip enough to have a canary system and now they don’t even disclose hacks anymore. It’s not the same platform. Good riddance.

      • Dr. Moose
        link
        English
        152 years ago

        Good point. Didn’t notice that detail in the linked articles.

    • @[email protected]
      link
      fedilink
      English
      142 years ago

      God I remember reading about Reddit’s warrant canary being taken down.

      I remember thinking that it was no big deal and it will always be the same.

      How wrong and naive I was lol

      • @[email protected]
        link
        fedilink
        English
        8
        edit-2
        2 years ago

        it’s so weird to me that dead canarys are not half as big a thing as I’d expect them to be
        For example, it’s been close to a decade since Apples Warrant Canary died, and still people consider Apple trustworthy with their data…

        • @[email protected]
          link
          fedilink
          English
          22 years ago

          I wonder if it’s not so much that people don’t care but rather that every big tech company will inevitably receive such warrants. Even if you don’t use those services, most devices by default use the (probably backdoor-ed) NIST ECC algorithms.

          • @[email protected]
            link
            fedilink
            English
            12 years ago

            phew, I doubt they are backdoored.
            after they found Dual_EC_DRBG, pretty sure people had a damn good look at all of them again.

            I’d consider the Trusted Platform Modules and Intels Management Engine and AMDs counterpart to be more likely than the open source mathematical cryptography algorithms

  • @Evono
    link
    English
    472 years ago

    Great , we need all the more Bad news spreading about reddit.

    they did the entire stunt to open for IPO likely this will screw them.

  • @NewEnglandBlueberry
    link
    English
    232 years ago

    If that includes user data (such as emails, phone #s, social media accounts, etc.) that’s bad news for all of us who have or had accounts with them.

      • @NewEnglandBlueberry
        link
        English
        6
        edit-2
        2 years ago

        They’re sign up options. You can sign up with Google, Apple, email and they ask users for their phone number for some reason as well iirc.

        • @[email protected]
          link
          fedilink
          English
          22 years ago

          I’m not nearly techy enough to discuss this in detail, but I thought that reddit itself doesn’t really see that data (google password), thought it was an API that validated the log in. I’d be very happy to be corrected if wrong, however.

          • @NewEnglandBlueberry
            link
            English
            2
            edit-2
            2 years ago

            Yes, that’s true for your Google password, but google does share your name, email and profile picture with the platform and “Third-party apps or services may use your email address, name, and profile picture in other ways as described in their privacy policy or elsewhere”. I’m not sure what Apple sign-in shares, but they probably give your email and name at a minimum.

    • @waigl
      link
      English
      152 years ago

      Good thing I never gave reddit any of those, despite their continued nagging over the years…

    • @[email protected]
      link
      fedilink
      English
      52 years ago

      the whole point of reddit is that it doesn’t have any of my user data, apart from what they can scrape from my browser such as IP address and browser fingerprint(s).

  • @xc2215x
    link
    English
    112 years ago

    The crumbling of Reddit continues.

  • @deepdive
    link
    English
    102 years ago

    Does anyone know where they are going to leak that data to the public? A torrent? DL? I2P?

    • @KingYoloHD
      link
      English
      32 years ago

      Idk how this one is working, but didn’t many hacker attacks where they leaked stuff end up being sold on the dark net

      Maybe they try something similar or they are straight up sending a fax to everyone

      • @deepdive
        link
        English
        92 years ago

        Yeah… they are probably going to sell it to the best bidding on the darknet… but because they said they are going public, I though they were releasing it to everyone.

    • @GlitzyArmrest
      link
      English
      242 years ago

      This is why I hate when articles mention the size of the data - that rarely actually matters. What matters is what makes up the data - 80GB is one BluRay, or the entirety of English Wikipedia’s text.

      • @TechnoBabble
        link
        English
        62 years ago

        Well the size is somewhat important.

        It gives a glimpse into what could have been stolen.

        But I agree it’s not like 80GB of hack is automatically worse than 20GB of hack if it’s stolen source code or payment information or similar.

      • konalt
        link
        English
        42 years ago

        Didn’t know BluRays could be that large, I’ve only heard of them going up to 25 or 50. Any more info on this?

    • Something Burger 🍔
      link
      English
      192 years ago

      If it’s only text, it’s four times as big as the entirety of English Wikipedia.

    • @thayer
      link
      English
      7
      edit-2
      2 years ago

      A snapshot of all of reddit’s public text posts up to March 2023 runs about 38GB compressed (zstd) on archive.org. Decompressed, it’s well over 300GB.

      An internal zstd of 80GB may contain private messages as well or other morsels.

    • jerry
      link
      English
      62 years ago

      It’s internal stuff, so yeah 80gb could be quite damning, the group claims it shows things reddit doesn’t want people to see.

    • @[email protected]
      link
      fedilink
      English
      12 years ago

      Maybe it includes unsalted password hashes and we all happened to use the same few passwords.

  • @Oxff
    link
    English
    92 years ago

    No matter the outcome, it’s one hell of a ride.

  • @[email protected]
    link
    fedilink
    English
    42 years ago

    Funny how my comment on lemmy is on a post about a massive hack on Reddit, because of their bullshit tactics. mlem seems to be like Apollo-ish.

  • @[email protected]
    link
    fedilink
    English
    11 year ago

    They really wanted $4.5mil for some data? Looks like Spez took a page outta this guy’s book lmao