topic Re: Parler in Industry News

Parler

rslade — Mon, 09 Oct 2023 09:45:50 GMT

OK, don't get your political knickers in a twist. I'm not going to talk about Parler's politics. Just their coding.

The reason that people were able to obtain so much data (*SO* much data) from Parler was that their security was terrible. As in, non-existent. No authentication. Deleted content wasn't actually deleted, just marked deleted. Post were identified by successively incremented numbers. Wanna scrape Parler? Easy-peasy.

Uploaded content was not modified. In any way. That means that metadata and location data in pictures and videos was still available.

Re: Parler

tmekelburg1 — Tue, 12 Jan 2021 19:26:15 GMT

They also gave Users the option of getting a 'Verified Account' badge by taking a picture of their drivers license for verification. Not sure what could go wrong there...

Re: Parler

mrlithic — Tue, 12 Jan 2021 22:09:50 GMT

If there are any Europeans subscribed to it - they could be done for GDPR violations.

Marriot was fined 150 million for unencrypted scans of passports.

Re: Parler

tmekelburg1 — Wed, 13 Jan 2021 00:34:35 GMT

Intelligence reasons, although I must admit there wasn't a lot of that going around on the site.

Re: Parler

AndreaMoore — Wed, 13 Jan 2021 16:44:07 GMT

As a reminder, keep all discussions on this community on the topic of related cybersecurity, threats, technology, etc. Any off-topic and/or political posts will be removed and subject to enforcement of usage guidelines up to and including banned Community usage.

For reference, the Community's usage policy can be found here: https://community.isc2.org/t5/Welcome/ISC-Community-Usage-Policy-Guidelines-Updated-October-2020/m-p/38340

Any questions regarding appropriateness of topics, feel free to email the administrator at community@isc2.org.

Thank you.

Re: Parler

Beads — Wed, 13 Jan 2021 22:41:20 GMT

As a community we should strive to help guide the discourse toward better security regardless of thoughts on the subject or material at hand. I get enough political nothingness through LinkedIn as it is. Let's draw the line somewhere.

Pointing out some bad practices is no cause for immediate alarm but not relying that information to the Paler administration is.

- b/eads