A user on the online forum 4chan has leaked a massive 270GB of data belonging to The New York Times. This leak includes the source code for the newspaper’s digital operations.

Here are some other findings we can confirm:

  • The leak does have the original source code of the game Wordle, which the NY Times acquired in 2022.
  • The leak includes a dated WordPress database of 1,500 NY Times Education site users. The database contains names and surnames, email addresses, and hashed passwords. You should expect it to be added to HIBP shortly.
  • Several folders contain internal communications from NY Times Slack channels.
  • Times uses various machine learning algorithms and NLP techniques/scripts for its services.
  • Many exposed authentication methods exist, including authentication URLs and their respective passwords, secret keys, and API tokens. The majority are well protected, but plenty of such secrets need immediate attention. We have also seen private user keys used for authentication.
  • There are a lot of details about internal NY Times architecture from a software development point of view.

So far, it is difficult to say whether the NY Times will need to reset the passwords for everyone who is a member of its site.

It’s worth pointing out that this leak appears to involve data from The New York Times’s IT/infrastructure/website organization rather than the news organization composed of reporters. In media companies, these two entities are largely separate. The IT/infrastructure team handles the technical aspects of the website and digital operations, while the news organization manages reporting and editorial content.

  • RION [she/her]
    ·
    22 days ago

    Several folders contain internal communications from NY Times Slack channels.

    My body is ready

  • Gay_Tomato [they/them, it/its]
    ·
    22 days ago

    The leak does have the original source code of the game Wordle, which the NY Times acquired in 2022.

    sicko-wholesome

    • Diuretic_Materialism [he/him]
      ·
      22 days ago

      Several folders contain internal communications from NY Times Slack channels.

      There potentially could be something interesting in there

      • alexandra_kollontai [she/her]
        ·
        21 days ago

        magnet link is in this thread if you want to try dig up some liberalism: https://boards.4chan.org/t/thread/1310643#p1310643

        I have no goddamn idea why the tracker links are like that. average 4chan stuff I guess

  • emizeko [they/them]
    ·
    22 days ago

    The New York Times has over 5,000 source code repositories

    that seems like a lot

    • chickentendrils [any, comrade/them]
      ·
      edit-2
      22 days ago

      Something weird about that figure. Branches within repos maybe, otherwise those are mostly junk or their supply chain attack security requirements had them cloning and building themselves the repos of every open source library they've ever used for vulnerability scans.

    • glans [it/its]
      ·
      edit-2
      22 days ago

      the article links to this list of repos https://files.catbox.moe/jx7ksm.txt and says is 6200 lines long.

      i am not framiliar enough with this kind of development to know if this is a reasonable structure for this kind of large project. anyone?

      • flan [they/them]
        ·
        edit-2
        22 days ago

        Looks like they put each of their modules in a separate repo. This wouldn't be a single project. NYTimes is a pretty huge operation. They obviously have their website but they also have apps, infrastructure to ingest and process whatever media they get, infrastructure for ads, games, security (lol), user account management, billing, legal, etc etc.

        it's possible this is organized differently in their source control and it appears kinda disorganized because we're looking at it flattened.

    • blobjim [he/him]
      ·
      edit-2
      21 days ago

      It's probably just every repository name on their spurce control management server. Users can usually create their own repositories whenever. So a bunch if these could just be random little experiments or side projects people made.

      • RedWizard [he/him]
        ·
        21 days ago

        Spruce Control is all the rage these days, but what about Douglass Fir Control?

  • came_apart_at_Kmart [he/him, comrade/them]
    ·
    21 days ago

    the source code that serves up news content is 500 MB.

    the rest is for interactive pop ups and mobile layout breaking, random spontaneous, invisible click boxes to makenit so you accidentally activate an ad when trying to watch, pause, close or otherwise interact with a video.

    it is some of the most cutting edge website complicating code ever written.

    • dch82@lemmy.zip
      ·
      21 days ago

      500MB? What the heck? That’s literally 350 or so floppies or so many win95 installs

  • radiofreeval [any]
    ·
    edit-2
    21 days ago

    Horse's mouth: (CW: everything and more, this is the bubonic plauge of brainrot you are exposing yourself to if you click this link) https://archived.moe/g/thread/100843783/

    Magnet: here

    No peer currently has over 85.4% downloaded and there are no seeds. It looks like it some of it might be lost.

    • What_Religion_R_They [none/use name]
      ·
      21 days ago

      Horse's mouth:

      "It's the NYTs, they have way more dirty laundry than that. Show us the memos about deposing world leaders the feds don't like or gaslighting people about border security and refugee violence. Show us the big donations from the cccp to ignore crimes against humanity."

      they're so fucking stupid

      • radiofreeval [any]
        ·
        21 days ago

        It's a horse. What do expect, lavender breath?

        They are so incredibly moronic it's amazing.

        • What_Religion_R_They [none/use name]
          ·
          21 days ago

          It's a horse. What do expect, lavender breath?

          lmao good one

          did you figure out the hrt stuff btw? I can help you out if you need it

          • radiofreeval [any]
            ·
            21 days ago

            I have a cart in all day chemist and it accepts my card, I'm just scared to order it. I think I'm good.

            • What_Religion_R_They [none/use name]
              ·
              21 days ago

              okay, good. I hope you get the courage to go through with the order. Just double check every part, lots of good communities for diy. And you can always ask here for help.

  • Awoo [she/her]
    ·
    21 days ago

    So do we think this is a random person or?

    Every leak that specifically happens on 4chan I tend to assume is a cia op that uses 4chan because they want to promote it.

    • Nakoichi [he/him]
      ·
      21 days ago

      Either that or it's where people go to leak shit from inside. Wouldn't rule out this being some rogue comrade.