Very nice explanation of Parler being kicked off Amazon Web Services and what this means now. AFACT, everything is correct. Parler promises to be back online by Tuesday but I also consider that highly unlikely.

twitter.com/QuinnyPig/status/1

Follow

The story is developing, now it’s not merely AWS. Parler lost Twilio who they used to implement 2FA, they’ve been dropped by their email provider and pretty much all other third-party providers. As @sarahmei@twitter.com points out, this will be major hurdle for them. twitter.com/sarahmei/status/13

· · Web · 2 · 0 · 2

This gets even bigger. If reddit.com/r/ParlerWatch/comme is legit (and so far everything matches up), Twilio dropping Parler made them implement a work-around that left accounts wide open for takeover. Like: admin accounts. So people have been using that to scrape all “private” data.

This means: all messages and videos have been downloaded in a crowdsourced fashion, via publicly available Docker images. Even presumably deleted messages were still in the database. And people’s driver license images that they used to get the “Verified Citizen” status.

I must say, for a “free speech” platform Parler had quite a lot of moderators (note: that’s not a full list). Maybe it wasn’t “free speech” after all but “only speech we like”? gist.github.com/d0nk/ef4e58645

@WPalant a lesson here about building your castle on other people's land... A simple bbs/forum on a raspberry pi on TOR would be a million percent more resilient (not that I am a fan of the users of Parler. LOL)

Sign in to participate in the conversation
Infosec Exchange

A Mastodon instance for info/cyber security-minded people.