Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Parler possibly hacked - repeat possibly
Legal Insurrection ^ | 1/11/2021 | checklight

Posted on 01/11/2021 8:28:34 AM PST by linMcHlp

A member of the Legal Insurrection website commentary, who goes by the name "checklight" - reports (the following is the complete comment):

2600’s Hacker Quarterly Facebook page claims Parler has been hacked. Very briefly, critical details of its security and account verification tools were leaked in an email, and were used to establish “millions” of faux-admin accounts. Those accounts exploited the fact that posts to Parler are never deleted, just MARKED as deleted. (That old wheeze? Again? Did we learn nothing from DOS?) Deleted posts and their contents, even those created as private, were then revealed.

And the kicker.. is this: all of this information was thought to be secure and private by individuals who were making the posts. A significant number of those individuals went through the process of being a “Verified Citizen” on Parler. What does that mean?

It means they uploaded a picture of the front and back of their REAL State Driver’s License…….. Let that sink in for a second.

I am positive the FBI has been actively soaking in this information along with the Internet Warriors, but this is how they are going to officially track down.

And it’s how the FBI, DHS, and FAA have been able to immediately and exhaustively create no-fly lists. Every verified attendee of the Capitol riot where they can find a real name has been placed on No-Fly Lists.

[Bold [checklight].] To me [checklight], this looks like Parler was a honeypot. Worth noting, though, that they were hosted by Amazon, and if that were the case, the hack would scarcely have been necessary. But incompetent IT security, and pure blundering on the right generally, are par for the course.


TOPICS:
KEYWORDS: hack; hacked; parler
Navigation: use the links below to view more comments.
first previous 1-2021-4041-60 next last
To: Pearls Before Swine

On January 20th, as soon as Bite-Me swears to destroy amerika, all the data Amazon has on the Parler users, license photos, personal info, will go straight to FBI, CIA, DOJ, and all alphabet agencies that can find.

Now, today that info most likely is already at ChiCom’s door and being acted upon.


21 posted on 01/11/2021 8:45:12 AM PST by George from New England
[ Post Reply | Private Reply | To 11 | View Replies]

To: cuban leaf

Mr. Robot rips off Fight Club, but I enjoyed the show.


22 posted on 01/11/2021 8:47:11 AM PST by Greetings_Puny_Humans (I mostly come out at night... mostly.)
[ Post Reply | Private Reply | To 5 | View Replies]

To: George from New England

People innocently uploaded the front and back of their driver license to the internet and now they could be doxxed.


23 posted on 01/11/2021 8:48:32 AM PST by Meatspace
[ Post Reply | Private Reply | To 21 | View Replies]

To: Robert DeLong

No, they host all the data locally, but the website front-end was through AWS.


24 posted on 01/11/2021 8:49:26 AM PST by ConservativeMind (Trump: Befuddling Democrats, Republicans, and the Media for the benefit of the US and all mankind.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: cuban leaf
Because they used Amazon's cloud services, which means the storage of their data is stored on Amazon servers, thus the data is not in the physical possession of Parler. If they had their own servers Amazon could not have touched Parler. Yes, MS, & Google stopped providing their apps which hurt them, but Amazon is the one that effectively put them out of business. When they cut them off of their services, Parler no loner was able to retrieve their data. It's still in the possession of Amazon.

Amazon drops Parler from its web hosting service, citing violent posts

25 posted on 01/11/2021 8:49:58 AM PST by Robert DeLong
[ Post Reply | Private Reply | To 6 | View Replies]

To: cuban leaf

If you have Siri or Alexa on your phone, or use the Google one that comes with an Android, it is indeed listening all the time, whether or not you use it.

I think you can turn it off - I think I did so - but it’s kind of sneaky and hard to get rid of. It’s listening all the time so that you can give it commands, but obviously, it’s picking up a lot of other info and just adding it to its commercial data file on you.


26 posted on 01/11/2021 8:50:07 AM PST by livius ( )
[ Post Reply | Private Reply | To 20 | View Replies]

To: cuban leaf

That person was assuming AWS held the back-end servers.

It doesn’t.


27 posted on 01/11/2021 8:50:13 AM PST by ConservativeMind (Trump: Befuddling Democrats, Republicans, and the Media for the benefit of the US and all mankind.)
[ Post Reply | Private Reply | To 6 | View Replies]

To: livius

If you have Siri or Alexa on your phone, or use the Google one that comes with an Android, it is indeed listening all the time, whether or not you use it.


I use none of those. And this is why.

When I’m at someone’s house that has Alexa, it’s fun to say, “where will we put the bomb? Or “At what time will the bomb detonate?”


28 posted on 01/11/2021 8:52:11 AM PST by cuban leaf (We killed our economy and damaged our culture. In 2021 we will pine for the salad days of 2020.)
[ Post Reply | Private Reply | To 26 | View Replies]

To: cuban leaf

The point is that you don’t have to use them. The voice command feature is built in.

It wasn’t just a coincidence that she got those ads.


29 posted on 01/11/2021 8:54:06 AM PST by livius ( )
[ Post Reply | Private Reply | To 28 | View Replies]

To: Pearls Before Swine

I didn’t do that when I signed up.


30 posted on 01/11/2021 8:54:59 AM PST by Jaded (Pope Francis? Definitely NOT a fan... miss the last guy )
[ Post Reply | Private Reply | To 11 | View Replies]

To: linMcHlp

I’m not 100% certain on this, but when I read the Parler TOS, I believe it indicated they DO NOT store the actual image of your driver’s license (front & back, which for whatever bizarre reason was required to sign up and open an account). Instead, they store a computed/hashed value of the image, which cannot be reverse-engineered to reproduce the original images.

That said, the requirement to upload real id is what gave me enough pause to never sign up..and far as I can tell, Gab does not appear to have any similar requirement - at least at the moment.


31 posted on 01/11/2021 8:57:15 AM PST by jstolzen
[ Post Reply | Private Reply | To 1 | View Replies]

To: cuban leaf

Ask theCIA what they are.


32 posted on 01/11/2021 8:58:29 AM PST by Dr. Ursus
[ Post Reply | Private Reply | To 6 | View Replies]

To: laweeks

was GAB shutdown by their server? Or are they down because of huge amounts of traffic?


33 posted on 01/11/2021 8:58:46 AM PST by God luvs America (63.5 million pay no income tax and vote for DemoKrats...)
[ Post Reply | Private Reply | To 15 | View Replies]

To: ConservativeMind
Okay I stand corrected:

“We will likely be down longer than expected,” wrote Matze. “This is not due to software restrictions — we have our software and everyone’s data ready to go. Rather it’s that Amazon’s, Google’s and Apple’s statements to the press about dropping our access has caused most of our other vendors to drop their support for us as well.”

Source of above paragraph.

Could have swore that's I heard said on Bannon's WARROOM Pandemic show this morning. But I was listening while doing other things. So I must have misinterpreted what was actually said. That's what I get for trying to multi-task. 8>)

34 posted on 01/11/2021 9:00:37 AM PST by Robert DeLong
[ Post Reply | Private Reply | To 24 | View Replies]

To: Jaded

I read that the verification requirements were detailed. As in the article, where photo ID was required to be scanned.

I’m glad you were able to avoid it.


35 posted on 01/11/2021 9:03:38 AM PST by Pearls Before Swine
[ Post Reply | Private Reply | To 30 | View Replies]

To: jstolzen

My two cents for all:

Never send a copy of a driver’s license over the Internet, except by a secure portal to a well-established bank. When you send the copy, that copy itself, should have your having placed a broad “X” across your face, in order to frustrate anybody who might use your likeness re that document.

Never click on a link in an e-mail message. Instead, copy the link and paste it yourself, into the URL address field of a trustworthy Internet browser.


36 posted on 01/11/2021 9:04:41 AM PST by linMcHlp
[ Post Reply | Private Reply | To 31 | View Replies]

To: CodeToad

But I’m pretty sure you can choose the private key(s) to be on your side or can choose to use AWS private keys on their side. Of course you would have to be a fool to choose the later. If Parler did not encrypt or choose AWS private keys, well that is a no no and just asking for trouble.


37 posted on 01/11/2021 9:06:28 AM PST by BiglyCommentary
[ Post Reply | Private Reply | To 3 | View Replies]

To: linMcHlp

That people would upload images of their driver’s license to a web site like Parler is crazy. How do we know this has not been an FBI sting operation all along?


38 posted on 01/11/2021 9:11:40 AM PST by mcjordansc
[ Post Reply | Private Reply | To 1 | View Replies]

I have never posted anything remotely political, no articles, memes, nothing. If my mom didn’t use fb as her only means of communication I wouldn’t be on it at all.Yet facebook labels me as “extremely conservative”. I am a registered independent, btw.

I have also gotten “people you may know” for people I was talking to randomly at a bar I was at that night 3000 miles from home


39 posted on 01/11/2021 9:11:45 AM PST by dsrtsage (Complexity is merely simplicity lacking imagination)
[ Post Reply | Private Reply | To 29 | View Replies]

To: Pearls Before Swine

Amazon has all of the data to start with, if you have done any shopping with them.


40 posted on 01/11/2021 9:12:30 AM PST by ptsal (Vote R.E.D. >>>Remove Every Democrat ***)
[ Post Reply | Private Reply | To 11 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-60 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson