cross-posted from: https://chat.maiion.com/post/3401

Reddit’s week appears to have gone from bad to worse, as AlphV (aka BlackCat) has claimed that operators broke into Reddit’s servers on February 5, 2023, and took 80 GB of zipped data. . Furthermore, Reddit has been contacted by BlackCat, once on April 13 and again on June 16, with no response and no attempt to find out what was taken. Following recent fallout from the subreddit blackouts, and the controversial comments from CEO Steve Huffman, Reddit has been having a tough time in the eyes of its users who have been reportedly leaving the platform and setting up alternatives on the fediverse (such as Lemmy or kbin), used by the Twitter alternative Mastodon.

https://www.neowin.net/news/reddit-claimed-to-have-been-hacked-by-blackcat-and-it-has-threatened-to-leak-the-data/

https://www.databreaches.net/blackcat-claims-they-hacked-reddit-and-will-leak-the-data/

  • Dr. Moose
    link
    fedilink
    English
    801 year ago

    Remember when reddit was hip enough to have a canary system and now they don’t even disclose hacks anymore. It’s not the same platform. Good riddance.

      • Dr. Moose
        link
        fedilink
        English
        81 year ago

        Good point. Didn’t notice that detail in the linked articles.

    • @[email protected]
      link
      fedilink
      English
      101 year ago

      God I remember reading about Reddit’s warrant canary being taken down.

      I remember thinking that it was no big deal and it will always be the same.

      How wrong and naive I was lol

      • @[email protected]
        link
        fedilink
        English
        2
        edit-2
        1 year ago

        it’s so weird to me that dead canarys are not half as big a thing as I’d expect them to be
        For example, it’s been close to a decade since Apples Warrant Canary died, and still people consider Apple trustworthy with their data…

        • @[email protected]
          link
          fedilink
          English
          11 year ago

          I wonder if it’s not so much that people don’t care but rather that every big tech company will inevitably receive such warrants. Even if you don’t use those services, most devices by default use the (probably backdoor-ed) NIST ECC algorithms.

  • @[email protected]
    link
    fedilink
    English
    621 year ago

    Sounds like reddit is having a bad year.

    sips coffee

    Oh well. How’s everyone’s Sunday? I’m making pulled pork sliders tonight.

  • @[email protected]
    link
    fedilink
    English
    391 year ago

    Great , we need all the more Bad news spreading about reddit.

    they did the entire stunt to open for IPO likely this will screw them.

  • @[email protected]
    link
    fedilink
    English
    261 year ago

    If that includes user data (such as emails, phone #s, social media accounts, etc.) that’s bad news for all of us who have or had accounts with them.

      • @[email protected]
        link
        fedilink
        English
        6
        edit-2
        1 year ago

        They’re sign up options. You can sign up with Google, Apple, email and they ask users for their phone number for some reason as well iirc.

        • @[email protected]
          link
          fedilink
          English
          01 year ago

          I’m not nearly techy enough to discuss this in detail, but I thought that reddit itself doesn’t really see that data (google password), thought it was an API that validated the log in. I’d be very happy to be corrected if wrong, however.

          • @[email protected]
            link
            fedilink
            English
            1
            edit-2
            1 year ago

            Yes, that’s true for your Google password, but google does share your name, email and profile picture with the platform and “Third-party apps or services may use your email address, name, and profile picture in other ways as described in their privacy policy or elsewhere”. I’m not sure what Apple sign-in shares, but they probably give your email and name at a minimum.

    • @[email protected]
      link
      fedilink
      English
      131 year ago

      Good thing I never gave reddit any of those, despite their continued nagging over the years…

    • @[email protected]
      link
      fedilink
      English
      31 year ago

      the whole point of reddit is that it doesn’t have any of my user data, apart from what they can scrape from my browser such as IP address and browser fingerprint(s).

  • @[email protected]
    link
    fedilink
    English
    71 year ago

    Does anyone know where they are going to leak that data to the public? A torrent? DL? I2P?

    • @[email protected]
      link
      fedilink
      English
      11 year ago

      Idk how this one is working, but didn’t many hacker attacks where they leaked stuff end up being sold on the dark net

      Maybe they try something similar or they are straight up sending a fax to everyone

      • @[email protected]
        link
        fedilink
        English
        71 year ago

        Yeah… they are probably going to sell it to the best bidding on the darknet… but because they said they are going public, I though they were releasing it to everyone.

  • @[email protected]
    link
    fedilink
    English
    11 year ago

    Funny how my comment on lemmy is on a post about a massive hack on Reddit, because of their bullshit tactics. mlem seems to be like Apollo-ish.

  • @[email protected]
    link
    fedilink
    English
    11 year ago

    They really wanted $4.5mil for some data? Looks like Spez took a page outta this guy’s book lmao