Hacked Reddit Data To Be Published Unless API Changes Dropped, Hackers Say
www.forbes.com
The criminal group behind the February Reddit hack is now demanding $4.5 million and the dropping of API changes, or the stolen data will be published.
  • const_void@lemmy.mlEnglish
    2·
    2 years ago

    Probably should’ve invested in better security instead of trying to chase tech trends like NFTs.

  • gentleman@kbin.social
    0·
    2 years ago

    @Phoeniqz If Reddit is only announcing the hack now then that is very likely going to be a legal problem in a number of US jurisdictions, not to mention EU and others.

      • dismalnow@kbin.social
        1·
        2 years ago

        @Phoeniqz

        @gentleman

        My read was that BlackCat only got non-prod data. So perhaps it’s sourcecode.

        In which case… they’ve likely got nothing of value other than the code used to track users.

        • gentleman@kbin.social
          0·
          2 years ago

          @dismalnow having the code out there that Reddit uses to track accounts doesn’t give me warm fuzzies. I’m not a technical guy but it seems that it would be better if that code had not been hacked and put in the hands of people with malicious intent. I have to defer to others on whether the hack compromises Reddit users’ security.

          • dismalnow@kbin.social
            1·
            2 years ago

            @gentleman

            it would be better if that code had not been hacked and put in the hands of people with malicious intent.

            And if a frog had wings…

            Now that it’s out, it’s best for affected parties to try to determine if immediate action is required to reduce damage to themselves via reddit’s mistake - and all we have is a preliminary, and likely heavily redacted report from the company foolish enough to have allowed itself to get hacked.

            So far the information points to non-production data. But the truth is that nobody knows the full scope of egressed data until BlackCat proves it, or reddit runs the fastest penetration forensics team EVER.

            Therefore, it’s unlikely to be user information of substance unless you e been uploading photos of your taint, connected your work email address, and have pm’d your credit card number to people.