Christopher Bouzy
A
There are people on Twitter stating we were trying to hide the security incident and didn't contact anyone. We literally emailed everyone, posted an announcement, and had a Pod about it all within hours of being notified.
06:51 AM - Feb 05, 2024
Avatar Avatar Avatar
1
174
221
Darren
A
In response to Christopher Bouzy.
Incorrect. I didn't get an email from you, but I got one from HIBP saying my info was leaked. Not cool.
07:32 AM - Feb 05, 2024
5
3
Michael J Sheridan
A
In response to Darren.
Nice job creating an account you never used just so you could pop in here today to spread bullshit.
07:45 AM - Feb 05, 2024
3
35
Darren
A
In response to Michael J Sheridan.
I created a lot of accounts in different places in the post-Twitter diaspora because it wasn't clear where the future was heading.

But instead of attacking me, why don't you address the content of what I wrote? I never received an email from Spoutible on this, only HIBP.
07:48 AM - Feb 05, 2024
1
1
Michael J Sheridan
A
In response to Darren.
Mainly because I only have your word that you never received an email, and have no reason to believe that you're acting in good faith. You haven't earned my trust.
07:50 AM - Feb 05, 2024
2
15
Darren
A
In response to Michael J Sheridan.
And Spoutible has, after it was shown that they leaked a ton of info about its users? What about the person who replied to me also saying they didn't get an email?

And I don't care about earning your trust - my message wasn't even to you to begin with.
07:54 AM - Feb 05, 2024
2
0
Michael J Sheridan
A
In response to Darren.
You mean the other completely unused account that just popped in today to "confirm" your story?

I'll place my trust in someone who has been level with me every step of the way over the past year, not some randoms who only show up to attack and spread disinformation.
08:03 AM - Feb 05, 2024
3
27
Darren
A
In response to Michael J Sheridan.
It's not disinfo. I didn't get an email. You should be questioning @cbouzy on why he leaked everyone's info, not randomly attacking people who were impacted by their bad practices.
08:08 AM - Feb 05, 2024
14
1
David James
A
In response to Darren.
you join? Have you just been sitting there waiting so you can enjoy pointing out a problem, likea small troll sat under a bridge?
09:11 AM - Feb 05, 2024 (Edited)
1
5
Darren
A
In response to David James.
I joined like many did, in the post-Twitter diaspora looking for a new home. I decided this place wasn't it.

And judging on how I'm being attacked for raising legitimate questions about their security practices, I think I was right.
09:13 AM - Feb 05, 2024
3
0
Jim Plunkett
A
In response to Darren.
Your questions are NOT legitimate, they are unsubstantiated accusations

There may be some legit questions about the incident, but you are NOT raising them by mischaracterizing the incident from the first syllable

This is not now responsible professionals act
10:01 AM - Feb 05, 2024
1
2
Darren
A
In response to Jim Plunkett.
I didn't receive an email. I am not mischaracterizing anything.

Why didn't Spoutible force a password or 2FA reset for its affected users?
10:27 AM - Feb 05, 2024
1
0
Jim Plunkett
A
In response to Darren.
I did. There could be a myriad reasons for email failure far beyond Spoutible's control

No one "leaked your data" — that is an entirely different act than being hacked using an unknown vuln. — you are grossly misrepresenting the situation (not enough data to determine if it's intentional)
10:56 AM - Feb 05, 2024
2
1
Darren
A
In response to Jim Plunkett.
Or, can you admit there's a possibility Spoutible didn't send the email to everyone?

Also, this was a leak, see here for more info:
https://www.troyhunt.com/how-spoutibles-leaky-api-spurted-out-a-deluge-of-personal-data/
11:04 AM - Feb 05, 2024
1
0
Jim Plunkett
A
In response to Darren.
Yes, there is a *possibility* that you were somehow omitted from the email list

It is only one among many possibilities, and neither you nor I have sufficient data to determine it

A "leaky api" is not a leak

A leak is where an insider deliberately (often surreptitiously) releases info ...
12:02 PM - Feb 05, 2024
2
1
Darren
A
In response to Jim Plunkett.
I disagree with your definition of a data leak, and I believe you are misconstruing data leak with data breach.

A data leak is simply the unintended release of sensitive info. It doesn't have to be because of a bad actor, it could just be due to poor security practices - exactly what happened here.
12:30 PM - Feb 05, 2024
2
1

Only followers of this user (BattleFuzz) can see their posts

Darren
A
In response to BattleFuzz.
I never got an email from Spoutible on this telling me that I was affected or next steps. The first time I did was this morning when I was notified by HIPB.
12:52 PM - Feb 05, 2024
1
0

Only followers of this user (BattleFuzz) can see their posts

Darren
A
In response to BattleFuzz.
Yeah, I'm not an active user of this platform. This part is obvious. But I'm still a user and Spoutible is still responsible for keeping my data safe and not leaking it, and notifying users who are affected.

They also should have forced a password and 2FA reset for anyone affected.
01:03 PM - Feb 05, 2024
1
1

Only followers of this user (BattleFuzz) can see their posts

Darren
A
They absolutely did. Please look up with a "data leak" is, and then read the HIPB article about what happened.
In response to BattleFuzz.
01:14 PM - Feb 05, 2024
0
0

 

{{ notificationModalContent }} {{ promptModalMessage }}