• Rachel@derp.foo
    link
    fedilink
    arrow-up
    18
    ·
    1 year ago

    Is there any information on what kind of data they stole? It’s a public forum with a lot of public data, it makes no sense that they negotiate about data that is already public.

    • tal@kbin.social
      link
      fedilink
      arrow-up
      25
      ·
      edit-2
      1 year ago

      Well, assuming that this is even directly related to the forum, as opposed to, say, email logs from the Reddit internal email server or something, things that might not be public:

      • Private messages between users.

      • Browsing data. I mean, maybe a user only posts on /r/politics, and that’s public, but spends a lot of time browsing /r/femdom or whatever.

      • IP addresses of users. Might be able to associate multiple accounts held by a user.

      • Passwords. While hopefully stored in a salted and hashed format, so they can’t be simply trivially obtained, they can still be attacked via dictionary attacks, which is why people are told not to use short and predictable passwords.

      • Email addresses (if a user registered one)

      • Reddit has some private chat feature that I’ve never used, which I imagine is logged.

    • cowvin@kbin.social
      link
      fedilink
      arrow-up
      13
      ·
      1 year ago

      Well they mention Github artifacts in that message so it sounds like it’s more like they may have obtained source code and that sort of non public stuff.

      • mobyduck648@beehaw.org
        link
        fedilink
        arrow-up
        11
        ·
        1 year ago

        Their code was open source until 2017 and it’s got progressively more dogshit for the end user since, I suspect if this is real it’s probably a bit juicier.