Coping MAGA on Twitter
twitter.com
BREAKING: There was just a #parlerhack, this was publicly available and unencrypted on their public API endpoint. Not sure what they've changed yet, although expect a ton of data shortly, we will post updates. #ParlerLeaks pic.twitter.com/s5ZTtQJw7c— Coping MAGA (@CopingMAGA) November 24, 2020

Oh, it is good.

https://twitter.com/hashtag/ParlerLeaks

https://twitter.com/hashtag/parlerhack

Post any good finds.

Best explanation I've seen why this is a big deal.

WordPress Config file being accessible is a big yikes. Gives you the destination for the DB as well as the username and password to sign into it. MySQL export and anything not using MD5 Hash is visible right away - the rest? Decrypt.

Soon as the DB has been exported, game over.

https://twitter.com/IckleIzu/status/1331401417186299909

  • DasRav [none/use name]
    ·
    4 years ago

    Yes it is extremely possible to make things secure. Not 100% secure because math is complicated, but functionally so.

    It's just not trivial to do so. Which is why this happened.