{"id":349166,"date":"2021-10-06T19:32:39","date_gmt":"2021-10-06T16:32:39","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/hacker-reveals-twitch-source-code-in-part-one-of-massive-gigaleak-review-geek\/"},"modified":"2021-10-06T19:32:39","modified_gmt":"2021-10-06T16:32:39","slug":"hacker-reveals-twitch-source-code-in-part-one-of-massive-gigaleak-review-geek","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/hacker-reveals-twitch-source-code-in-part-one-of-massive-gigaleak-review-geek\/","title":{"rendered":"#Hacker Reveals Twitch Source Code In \u201cPart One\u201d of Massive Gigaleak \u2013 Review Geek"},"content":{"rendered":"

“#Hacker Reveals Twitch Source Code In \u201cPart One\u201d of Massive Gigaleak \u2013 Review Geek”<\/strong><\/p>\n

\n
\"The
Twitch<\/span><\/figcaption><\/figure>\n

In an effort to \u201cfoster more disruption and competition in the online video streaming space,\u201d an anonymous hacker has leaked the entirety of Twitch\u2019s source code and creator earnings. The leak also contains info on an unreleased Steam competitor and data related to Twitch\u2019s security tools. And unfortunately, this is just \u201cpart one\u201d of an ongoing gigaleak.<\/p>\n

Wrapp<\/a>ed in a 125GB torrent, this leaked data was first shared on a 4chan thread the morning of October 6th. Trusted sources have verified its authenticity to Video Games Chronicle<\/em><\/a> and The Verge<\/em><\/a>, and Twitch confirms<\/a> that it suffered a data breach (it hasn\u2019t verified the leak\u2019s authenticity). Some files in this leak were last modified on October 4th, a sign that Twitch may have been hacked just a few days ago.<\/p>\n

All of Twitch\u2019s source code is included in this leak, and that includes source code for the platform\u2019s mobile, desktop, and console clients. Shockingly, this source code is so complete that it contains full \u201ccommit history\u201d from the company\u2019s developers\u2014that is, notes made to indicate changes made to the Twitch backend.<\/p>\n

\n

We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.<\/p>\n

\u2014 Twitch (@Twitch) October 6, 2021<\/a><\/p>\n<\/blockquote>\n

Internal Twitch moderation tools also appear in the leak. The most notable (so far) is Twitch\u2019s \u201cred teaming system,\u201d which allows moderators to pretend that they\u2019re hackers. Oh, and evidence that the \u201cgolden kappa\u201d that users randomly receive is manually handed out by moderators<\/a>. We still don\u2019t know if any damaging security tools are tucked in this leak.<\/p>\n

And if you\u2019ve ever wondered how much your favorite streamer makes, you\u2019ll probably find out on social media<\/a>. This leak contains three years of payout data<\/a> for Twitch creators. Some streamers have already verified that this leaked financial data matches their earnings, although we\u2019re still not sure if this data is all-inclusive or only focuses on a fraction of Twitch streamers.<\/p>\n

There are a few oddities here, too. Because this leak contains all properties owned by Twitch, such as CurseForge, it reveals some unreleased projects. The most notable is called Vapor, a games marketplace<\/a> with a working title that clearly references Steam.<\/p>\n

\n

Some Vapeworld assets, including some 3d emotes with specular and albedo maps
I don’t have whatever version of unity installed that they used, so I’m limited in what assets i can get caps of with stuff like blener and renderdoc.
There’s custom unity plugins in here for devs too. pic.twitter.com\/6y4woQDcst<\/a><\/p>\n

\u2014 Sinoc (@Sinoc229) October 6, 2021<\/a><\/p>\n<\/blockquote>\n

Early analysis of the Vapor data shows that Twitch is working on something called Vapeworld<\/em>\u2014fortunately (or unfortunately, depending on your priorities), this game<\/a> has nothing to do with smoking cessation. It\u2019s a VR chat client full of weird 3D Bob Ross<\/em> emojis. We\u2019re not sure if Vapeworld<\/em> is an abandoned project or a work in progress, but its files were last modified this week.<\/p>\n

The hacker who shared this data clearly did it for altruistic reasons, citing Twitch as a \u201cdisgusting cesspool\u201d that hampers competition in the \u201cvideo streaming space.\u201d As such, the leak doesn\u2019t include a ton of personal data (aside from streamers\u2019 earnings). It seems that the hacker intentionally omitted this data to protect users.<\/p>\n

But any data breach is dangerous, and some analysts say that encrypted user passwords are a part of this leak (though these claims are unverified). Not to mention, hackers could use the Twitch source code to find vulnerabilities in its security system, and we\u2019re still waiting for \u201cpart two\u201d of this leak, which could target Twitch users instead of targeting the company.<\/p>\n

I strongly suggest changing your Twitch password and enabling two-factor authentication on your account. And if you want to be extra safe, I suggest doing the same to your Amazon account, which may be linked to Twitch depending on how you signed up.<\/p>\n

Source: VGC<\/a>, The Verge<\/a><\/small>, PC Gamer<\/a><\/small>\n<\/div>\n