Twitch's source code and streamer payment figures have been leaked following hack

guest · Oct 6, 2021

Twitch's source code and streamer payment figures have been leaked following hack
A hacking group claims to have the 'entirety of Twitch.tv.'
October 6, 2021
https://www.engadget.com/twitch-dat...r-payouts-source-code-and-more-112012011.html

Hackers have accessed Twitch and leaked a vast amount of company data, including proprietary code, creator payouts and the "entirety of Twitch.tv." Twitch confirmed the breach in a tweet Wednesday morning, but did not provide further details.

On top of of the Twitch.tv code, the attackers said they stole the the site's mobile, desktop and console Twitch clients. It also accessed "proprietary SDKs and internal AWS services used by Twitch," other properties like IGDB and CurseForge, an unreleased Steam competitor from Amazon Game Studios (code-named Vapour) and Twitch SOC internal red-teaming tools. It also shows creator payouts from 2019 until now, including top streamers like Nickmercs, TimTheTatMan and xQc .
Click to expand...

Although we haven't verified the claim that "the entirety" of Twitch's source code has been leaked, the files in the 126GB repository do appear to be genuine, and the payout figures for almost 2.4 million streamers seem to be present.

It doesn't appear that information like user passwords, addresses and banking information were revealed, but that can't be ruled out in a future drop.
Click to expand...

It's not clear yet how attackers could have stolen such a large amount of data, especially considering that Twitch is owned by Amazon, which operates one of the largest web-hosting companies in the world.
Click to expand...

guest · Oct 6, 2021

mood said: ↑

Twitch's source code and streamer payment figures have been leaked following hack October 6, 2021
Click to expand...

Update:

Update (10/6/21, 11:33am ET): This post has been updated to reflect that Twitch confirmed on Wednesday that the breach took place.
Click to expand...

EASTER · Oct 6, 2021

Hack-a Rama in full swing. Sparing no quarter.

guest · Oct 7, 2021

Twitch leak didn't contain user passwords and credit card information
At least some good news from this mess.
October 7, 2021
https://www.windowscentral.com/twitch-leak-didnt-contain-user-passwords-and-credit-card-information

What you need to know

Massive breach at Twitch has essentially leaked the entire building blocks for the platform along with internal tools and unreleased products.

Twitch is still investigating but has said a server issue exposed data to the internet.

The platform has confirmed user passwords and credit card information was not compromised.

Click to expand...

The morning after the night before, the Twitch leak is still one of the hottest talking points. The Amazon-owned platform is continuing its investigations, but as our pals over at PCGamer have reported, it's about as bad as it could be for Twitch.

However, there is some good news to come from all of this mess. On a blog post updating the situation, Twitch has confirmed that user passwords and credit card information were not compromised.

"At this time, we have no indication that login credentials have been exposed. We are continuing to investigate.
Additionally, full credit card numbers are not stored by Twitch, so full credit card numbers were not exposed."
Click to expand...

Details are still scarce, but Twitch has at least indicated how this might have happened:

" We have learned that some data was exposed to the internet due to an error in a Twitch server configuration change that was subsequently accessed by a malicious third party."

The latest update to the breach has also seen Twitch reset all stream keys out of an abundance of caution.
Click to expand...

guest · Oct 7, 2021

Twitch Leak Included Emails, Passwords in Clear Text: Researcher
October 7, 2021
https://threatpost.com/twitch-leak-emails-passwords/175390/

Twitch users, if you haven’t changed your password yet, go. Now. Do it.

Your email and password may already have been leaked – unhashed, unencrypted, in cleartext.
Researchers have been squeezing the live-streaming service’s innards after 135 gigabytes of its internal data were smeared all over 4chan by an anonymous poster on Tuesday.
Click to expand...

An independent security researcher who requested anonymity found streamers’ email addresses and passwords in plain text in one exposed datastore. The researcher shared the following Twitch screenshot with PrivacySharks, which subsequently shared it with Threatpost.

When Threatpost contacted Twitch, a representative sent this statement:

“At this time, we have no indication that login credentials have been exposed. We are continuing to investigate. Additionally, full credit-card numbers are not stored by Twitch, so full credit-card numbers were not exposed.”
Click to expand...

PayPal Chargebacks, Scraping Competitors’ Sites, Employee Data
In spite of Twitch’s failure to find any evidence of exposed user data, the independent researcher shared with PrivacySharks other datastores containing personal data, including a PayPal file containing details on more than 1,000 chargebacks made from Twitch to various platforms.

The records include full names, email addresses, buyer comments and amounts. The redacted screenshot below is an example of what the file contained:
Click to expand...

Twitch Allegedly Has Anti-View-Botting Tech Up Its Sleeve
Finally, the researcher also found screenshots that indicate that Twitch is allegedly ramping up its technology to detect and prevent view-botting on the platform. View-botting is when streamers artificially inflate their concurrent-view count by using “illegitimate scripts or tools,” according to Twitch.

In a Thursday blog post, PrivacySharks shared a screenshot, replicated below, that shared what allegedly look like Twitch’s botting-battle plans: [...]
As PrivacySharks’s Madeleine Hodson explained in Thursday’s blog post, amassing a large following is crucial to getting popular on Twitch, and when she says “crucial,” she’s talking dollar signs.
Click to expand...

guest · Oct 8, 2021

Twitch’s security problems started long before this week’s hack
Bad security practices made the breach seem inevitable to former employees
October 7, 2021
https://www.theverge.com/2021/10/7/22714160/twitch-hack-security-data-breach-problems

A massive security breach at Twitch has exposed a wealth of information pertaining to the website’s source code, unreleased projects, and even how much the top streamers make. As data analysts and journalists work to decipher what exactly is contained in the hundreds of gigabytes of information, others are still wondering how this happened.

Such a breach seemed like it was increasingly likely to some. The Verge has spoken to multiple sources who claim that during their time at Twitch, the company valued speed and profit over the safety of its users and security of its data.
This data breach, which Twitch blames on an error to a server configuration, is the latest in a series of security and moderation problems that have plagued the Amazon-owned streaming platform.
Click to expand...

One source, who spoke to The Verge on the condition of anonymity, worked at Twitch from 2017 to 2019. They described an atmosphere where employees were very concerned about safety but management less so.
The source characterizes Twitch as a place foremost concerned with the bottom line. If it wasn’t generating revenue, then it wasn’t valued as highly.

Another source tells The Verge that Twitch has regularly chosen not to disclose security issues it has faced. An unreported security problem occurred in 2017, according to the source, and opened up the platform to new risks.
Click to expand...

Multiple sources describe Twitch as a company that pays “lip service” to safety, but that doesn’t back up its words with action.

All of this adds up to the type of messy environment where a configuration mistake, like the one that happened this week, seemed inevitable.
While Twitch investigates, hundreds or thousands of people are now tearing apart its most inner secrets.
Click to expand...

guest · Oct 9, 2021

Hackers deface Twitch with pictures of Jeff Bezos, following massive data breach
October 8, 2021
https://www.techspot.com/news/91651-hackers-deface-twitch-pictures-jeff-bezos-following-massive.html

What just happened? After the massive Twitch leak earlier this week, hackers are now exploiting the frontend logic of the platform for their own amusement. All of this is said to be mounting on the Amazon-owned platform as a direct result of its negligence on the security side of things, so it looks like this could be just the start.

Twitch has been having a hard week, and it's not quite over yet. This morning, hackers were able to deface the platform for a few hours, seemingly uninterrupted by anything other than their own laughter.
Click to expand...

Users who jumped on the Amazon-owned service were greeted by closeup images of Jeff Bezos when searching for GTA V, Dota 2, Apex Legends, Minecraft, Smite, Overwatch, Dead by Daylight, Final Fantasy XIV, and several other games. Apparently, hackers replaced many background game images with the creepiest photos of the Amazon chairman and founder they could find.

As of writing, the most likely explanation for this is that some people who got their hands on a treasure trove of information and code about Twitch's inner workings are now abusing the site's functionality for fun.
Click to expand...

Twitch has been investigating the incident, but only confirmed that a "malicious third party" had exploited an error in a server configuration change to perform the hack, and that sensitive information like credit card information wasn't exposed.
However, several former employees told The Verge the situation is a lot more complicated than the company is willing to admit.
Click to expand...

guest · Oct 9, 2021

Millionaire Twitch streamers react to their leaked earnings
October 9, 2021
https://arstechnica.com/gaming/2021/10/millionaire-twitch-streamers-react-to-their-leaked-earnings/

Now, in the wake of a cataclysmic data breach, the gaming world is focused on a new leaderboard: one that ranks streamers according to how much money they make from Twitch.

“NUMBA 6 BEGS FOR PRIMES,” top streamer Ludwig Ahgren titled his livestream Wednesday, referring to Twitch’s Prime subscriptions.

“I’d never want to hide how much I make, so I’m down to make a meme out of it,” Ahgren tells WIRED.
“I've had a meme for a while: bigger number, better person. That's kind of how it feels when you're a content creator, directly correlating your value as a human to how big you are, how much money you make.”
(Ludwig confirmed that he did earn about $3.3 million through Twitch subscriptions, Twitch Bits, and ads from late 2019 to October 2021.)
Click to expand...

According to the leaked data, the top 81 streamers each earned over $1 million through Twitch since late 2019. The top five earned more than $5 million each. While the financial information was explosive, it’s not news that some streamers rake in millions.
Click to expand...

Rasheed187 · Oct 12, 2021

mood said: ↑

Millionaire Twitch streamers react to their leaked earnings
October 9, 2021
https://arstechnica.com/gaming/2021/10/millionaire-twitch-streamers-react-to-their-leaked-earnings/
Click to expand...

I still don't understand how these guys are making so much money, what's the fun of watching other people play videogames, I honestly didn't know this was so big, it's crazy.

Floyd 57 · Oct 12, 2021

Rasheed187 said: ↑

I still don't understand how these guys are making so much money, what's the fun of watching other people play videogames, I honestly didn't know this was so big, it's crazy.
Click to expand...

Could be related to your age maybe you're too old to understand, how old are you?

Rasheed187 · Oct 13, 2021

Floyd 57 said: ↑

Could be related to your age maybe you're too old to understand, how old are you?
Click to expand...

I'm in my 30's, I was probably as old as you when I joined this forum. But I don't think it's an age thing, I rather play videogames like FIFA and Unreal Tournament myself. Never understood the fun of Twitch, and I'm almost certain I would say the same thing if I was a teenager.

guest · Oct 18, 2021

Twitch Says Hack Impacted 'Small Fraction of Users'
October 15, 2021
https://www.securityweek.com/twitch-says-hack-impacted-small-fraction-users

The company said the breach was a result of a server configuration change that allowed the hackers to gain access to its systems.

In its latest update, the company said passwords have not been exposed and systems storing login credentials have not been accessed by the attackers. It also pointed out that full payment card numbers or bank information has not been compromised.

“The exposed data primarily contained documents from Twitch’s source code repository, as well as a subset of creator payout data,” the company said.
Twitch has millions of active streamers and their streams are watched by tens of millions of people.
Click to expand...

Sergey Shcherbel, security expert at Kaspersky, told SecurityWeek that the source code likely comes from a Git server compromised by the attackers.

The leaked files also include documents showing how much the top Twitch creators have earned since 2019. Some streamers have confirmed that the information in these documents appears to be accurate.
Click to expand...

Log in or Sign up

Twitch's source code and streamer payment figures have been leaked following hack

guest Guest

guest Guest

EASTER Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Rasheed187 Registered Member

Floyd 57 Registered Member

Rasheed187 Registered Member

guest Guest

Log in or Sign up

Twitch's source code and streamer payment figures have been leaked following hack

guest Guest

guest Guest

EASTER Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Rasheed187 Registered Member

Floyd 57 Registered Member

Rasheed187 Registered Member

guest Guest

Useful Searches