Slashdot Mirror
Hacker Posts Snapchat Source Code To GitHub (thenextweb.com)
tacarat shares a report from The Next Web with the caption, "Oops": A GitHub with the handle i5xx, believed to be from the village of Tando Bago in Pakistan's southeastern Sindh province, created a GitHub repository called Source-Snapchat. At the time of writing, the repo has been removed by GitHub following a DMCA request from Snap Inc, so we can't take a closer look and see what it contains. That said, there are a few clues to its contents. The repository has a description of "Source Code for SnapChat," and is written in Apple's Objective-C programming language. This strongly suggests that the repo contained part or whole of the company's iOS application, although there's no way we can know for certain. It could just as easily be a minor component to the service, or a separate project from the company.
The most fascinating part of this saga is that the leak doesn't appear to be malicious, but rather comes from a researcher who found something, but wasn't able to communicate his findings to the company. According to several posts on a Twitter account believed to belong to i5xx, the researcher tried to contact SnapChat, but was unsuccessful. "The problem we tried to communicate with you but did not succeed In that we decided [sic] Deploy source code," wrote i5xx. The account also threatened to re-upload the source code. "I will post it again until you reply :)," he said. A Snap spokesperson said in a statement: "An iOS update in May exposed a small amount of our source code and we were able to identify the mistake and rectify it immediately. We discovered that some of this code had been posted online and it has been subsequently removed. This did not compromise our application and had no impact on our community."
According to Motherboard, some researchers appear to be trading the data privately.
The most fascinating part of this saga is that the leak doesn't appear to be malicious, but rather comes from a researcher who found something, but wasn't able to communicate his findings to the company. According to several posts on a Twitter account believed to belong to i5xx, the researcher tried to contact SnapChat, but was unsuccessful. "The problem we tried to communicate with you but did not succeed In that we decided [sic] Deploy source code," wrote i5xx. The account also threatened to re-upload the source code. "I will post it again until you reply :)," he said. A Snap spokesperson said in a statement: "An iOS update in May exposed a small amount of our source code and we were able to identify the mistake and rectify it immediately. We discovered that some of this code had been posted online and it has been subsequently removed. This did not compromise our application and had no impact on our community."
According to Motherboard, some researchers appear to be trading the data privately.
https://github.com/nimbius/Sou...
Good people go to bed earlier.
How does an app update expose source code? I can't even think of a mechanism that could make that happen, unless your developers are purposely inept. More likely scenario is that someone inside shared the code with his buddies and it leaked out. Either way, still some serious problems with configuration control there.
The pictures don't get deleted and are stored for permanent recall.
Who else believes that the government is looking out for our best interests, all modern examples of communism aren't the right kind of communism, and social media does its best to weigh both liberal and conservative voices? /sarcasm
maybe they finally RTFM on hackerone.com/snapchat?
Non-qualifying vulnerabilities and exclusions
- Social engineering attempts on our staff including phishing emails
- Attempts to access our offices or data centers
Does this mean Snapchat could become a usable protocol or possibly even a standard someday?
It must have been about a year since I last sent or received a snap chat.
It must have been about 3 years since anyone was actually talking about the app.
As far as I'm concerned it's dead. I never really got the point of it except for teenagers to share pictures of their genitals.
Yeah, if the world suddenly discovered there were only a few thousand LOCs behind my $16B market cap, I'd probably try to save face too.
And nothing of value was gained or lost.
I object to power without constructive purpose. --Spock
It musta been h4xx0rz! wif de h4444xx!!!
Because we can't have nice things.
and they didn't block it. Nor the various clones.
Please stop the infestation from spreading. This is the last thing we need!!!
Please stop spreading this terrible blight on humankind...
Nuke it from orbit
the repo contained part or whole of the company's iOS application, although there's no way we can know for certain. It could just as easily be a minor component to the service, or a separate project from the company
No way at all whether you could determine whether the source code did the same as the snapchat application.
No way at all.
Impossible
(Although it could be a parallel development)
"The most fascinating part of this saga is that the leak doesn't appear to be malicious, "
Yeah, he basically says this: pay up or i will publish your source code. Not malicious at all.
Patents Drive Free Software as Hurricanes Drive Construction Industry
Now people will be able to send photos to each other
so it's what, like 50-100 lines of code, mostly calling open-source frameworks by someone else.
There is little "new" or "exciting" in snapchat.
Telemetry, ads , and data exfiltration.
Like less than 1k lines of java.
and this is a billion dollar company?
Wow, that is very serious that posted the source code snapchat. I have a question, and can take this source code to do something like this? Or they get caught on the fact that they have no rights?
I'm """"forced"""" to use snapchat because I have some friends who only want to use it. Whenever I open the app, it slows down my entire phone. For the first ~30 seconds of the app being open, none of the UI is functional. The camera has visible lag and updates every ~3 seconds.
It's by far the worst running app I've ever put on my phone, I wonder if they put a cryptocurrency miner in there to recoup the losses from their stupid snap goggles or whatever that was.
Why wouldn't hackers respect the moral value of this high volume porn conduit ?
...
How could such upstanding people, such as hackers, commit this impropriety to this wonderous app?
Clearly we are not spending enough on education, redistribution schemes, and Keynsian dirt relocation