Hacker News Reader

The description of the hack is not accurate. Okta is the service that disclosed the endpoints used.

It just a scare tactic to discourage the use of Parler. It's so poorly written that it sounds like a kid.

Not that they need much to discourage Parler, lol.

I mean, to scare off the existing users of Parler, but, I guess, shutting the whole thing down by the Big Tech Cartel was more efficient. I just don't get how people get away with abusing an undocumented API to fetch and publish PII - something that's illegal. Remember how people did the same with with T-Mobile and got into a huge trouble? Until we keep having these double standards, there always will be polarization and tensions! And how is this mess good for America and the world?!

Okta is a large, enterprise identity provider. I doubt in the case of a right-wing site existing they'd give out access to that provider on purpose? Did they mess up? I can't find any details about it yet.

I won't speculate on their intent, but by publicly commenting on disabling the account it looks like it opened the door for the hackers, again, if any of this is true.

It's entirely possible that Parler stored all of their data in S3, with metadata documents, and someone managed to find some creds in the app to list the object storage. These practices and this kind of vulnerability are both common.

Reply on news.ycombinator.com