<story><title>Twitch is hacked, and its source code leaked</title><url>https://kotaku.com/report-twitch-is-hacked-and-its-source-code-is-in-the-1847808252</url></story><parent_chain><item><author>nemothekid</author><text>This is a pretty thorough and high profile hack on a major tech company - this isn&amp;#x27;t something I&amp;#x27;d expect from an Amazon owned property. The hack (allegedly, I haven&amp;#x27;t downloaded it) includes&lt;p&gt;* Entire git histories&lt;p&gt;* Internal&amp;#x2F;Private AWS SDKs&lt;p&gt;* Encrypted Password dumps and payout reports&lt;p&gt;It&amp;#x27;s so comprehensive I&amp;#x27;m very curious into how an attacker got that level of access. I can&amp;#x27;t think of another, large, corporate web 2.0 startup who&amp;#x27;s gotten owned in a similar fashion. Could the same attack work on Amazon? YouTube?&lt;p&gt;It&amp;#x27;s also strange that someone who has this level of access to what is presumably a multi-billion dollar company decided to just leak the data? Maybe they did try to ransom it, but I&amp;#x27;d imagine someone with this kind of access inside Twitch must have had some creative way of making money.</text></item></parent_chain><comment><author>madrox</author><text>There were no encrypted password dumps. No production secrets were leaked (according to the article). What&amp;#x27;s here is no more than what your average Twitch engineer has access to.&lt;p&gt;Yes, that included payout data. Anyone with &amp;quot;staff&amp;quot; access to the site (which any employee can have) has access to any streamer&amp;#x27;s dashboard, which includes payout data.&lt;p&gt;I don&amp;#x27;t think this was an attack. Based on the data so far I think it was a disgruntled engineer. Obviously if more gets leaked later I may revise that opinion.</text></comment>
<story><title>Twitch is hacked, and its source code leaked</title><url>https://kotaku.com/report-twitch-is-hacked-and-its-source-code-is-in-the-1847808252</url></story><parent_chain><item><author>nemothekid</author><text>This is a pretty thorough and high profile hack on a major tech company - this isn&amp;#x27;t something I&amp;#x27;d expect from an Amazon owned property. The hack (allegedly, I haven&amp;#x27;t downloaded it) includes&lt;p&gt;* Entire git histories&lt;p&gt;* Internal&amp;#x2F;Private AWS SDKs&lt;p&gt;* Encrypted Password dumps and payout reports&lt;p&gt;It&amp;#x27;s so comprehensive I&amp;#x27;m very curious into how an attacker got that level of access. I can&amp;#x27;t think of another, large, corporate web 2.0 startup who&amp;#x27;s gotten owned in a similar fashion. Could the same attack work on Amazon? YouTube?&lt;p&gt;It&amp;#x27;s also strange that someone who has this level of access to what is presumably a multi-billion dollar company decided to just leak the data? Maybe they did try to ransom it, but I&amp;#x27;d imagine someone with this kind of access inside Twitch must have had some creative way of making money.</text></item></parent_chain><comment><author>skilled</author><text>I&amp;#x27;m hoping we will get to see a transparent report (from hacker or Twitch) on how this happened.&lt;p&gt;I think anyone would be excited to hack Twitch as the site alone - or any big platform for that matter - but this is quite literally someone just downloading the entire Twitch ecosystem and publishing it online.</text></comment>