Twitch source code, creator’s earnings exposed in a loss of 125GB

[ad_1]

Aurich Lawson / Getty Images

The Twitch live video broadcasting service was hit by a massive attack that exposed 125GB of the company’s data. In a 4chan thread posted (and removed) Wednesday, an anonymous user posted a torrent file of the multi-gig data dump. The dump contains the company’s source code and details of the money earned by Twitch creators.

Twitch Admits Hacking But Not Sure Of Scope In a 4chan post seen by Ars today, an anonymous user claimed to have leaked 125GB of data taken from 6,000 internal Twitch Git repositories. The forum poster mocked Amazon’s acquisition of Twitch, writing, “Jeff Bezos paid $ 970 million for it, we’re giving it away for FREE.” Enlarge / A 4chan user posted a torrent of a 125GB data dump.

The hacker wrote that the purpose of the leak was to cause inconvenience and promote competition between video streaming platforms. The hacker further claimed that the “Twitch community is a disgusting and toxic cesspool.”

Twitch admitted the violation but did not answer Ars’ questions. At this point, it appears that Twitch is also unaware of the full extent of the breach, as the company is still working out the details:

We can confirm that a violation has occurred. Our teams are working urgently to understand the extent of this. We will update the community as more information becomes available. Thanks for putting up with us.

Twitch (@Twitch) October 6, 2021 The earnings of Twitch’s top creators revealed

The same thread on 4chan also claimed to expose “creator payout reports from 2019 until now. Find out how much your favorite streamer is earning!”

Specifically, the 125GB archive is titled “Part One”, alluding to the possibility of future leaks.

A small subset of data seen by Ars shows the earnings of the top 10,000 Twitch users alongside their usernames. An updated list was posted by the game’s creator Sinoc, and a Twitter user who analyzed the dump posted a detailed breakdown of the payments:

Announcement

An anonymous Twitch source confirmed to Video Games Chronicle that the leaked data, including the Twitch source code, is legitimate. According to the company source, the data was obtained as recently as Monday.

The 4chan poster claims that the leaked data dump contains:

The entire source code of twitch.tv, with commit history from the beginning Creator payment reports as of 2019 Twitch client for mobile, desktop and video games Proprietary SDK and internal AWS services used by Twitch Data from “every other property owned by Twitch, “including IGDB and CurseForge Unreleased Steam Competitor Information (” Vapor “) from Amazon Game Studios’ Twitch internal ‘red teaming’ tools used by SOC (security) teams

The junkyard also reportedly contains Unity source code for a game called “Vapeworld”.

Parts of the leaked archive are vast and contain large ZIPs, and it may take days for the full extent of the breach to be understood:

Zoom in / Dump Twitch data content “Part One”.

Some Twitter users have also claimed to see encrypted passwords present in the junkyard and are urging Twitch users to enable two-factor authentication and change passwords as a safeguard.

The hack puts more bad news on Twitch’s plate and follows a recent and long-awaited public response to the problems of hate raids. During such raids, vulgar and hateful speeches are downloaded to the site’s top chat feeds by users and bots.

Interestingly, NBC tech investigation reporter Olivia Solon says all of Amazon’s warehouse systems were affected by a network outage last night, though the company won’t confirm whether this event was related to hacking. by Twitch.

According to Solon:

Amazon warehouse workers in the US were unable to work for at least two hours last night because their internal software crashed and none of their scanners worked.

All Amazon will say is that it was “a network outage that was quickly fixed”.

Amazon’s acquisition of Twitch in 2014 claimed the entity would operate “independently” of Amazon. Therefore, it’s unclear whether Twitch is running its own server stack or using Amazon’s rack space.

[ad_2]