• cowvin@kbin.social
      link
      fedilink
      arrow-up
      33
      ·
      1 year ago

      Usually what happens is that these sorts of blackmailers will leak small, verifiable pieces of data so people know they really got something. We don’t see that here, so for now there’s no reason to take them seriously yet.

      • bstix@feddit.dk
        link
        fedilink
        arrow-up
        4
        ·
        1 year ago

        It would still be really easy for Reddit to say “nah homie, thats not our data” even if it is and even if Reddit knows that it is.

        How are the hackers able to verify that the data did come from Reddit?

    • red@feddit.deOP
      link
      fedilink
      arrow-up
      19
      ·
      1 year ago

      No. If Reddit would negotiate with them, they’d probably leak small subsets as proof that they have actual data that isn’t available publicly. But with no negotiations, there’s not really any need for that.

    • vandrw@mander.xyz
      link
      fedilink
      arrow-up
      18
      ·
      1 year ago

      No, haha. They also didn’t bother to check what was stolen, so they could have very well gotten 80G of memes.

        • BLÅHAJ@beehaw.org
          link
          fedilink
          arrow-up
          19
          ·
          1 year ago

          Likewise, to me I interpreted as “There was no attempt (from reddit) to find out what we took.”

        • I_Miss_Daniel@kbin.social
          link
          fedilink
          arrow-up
          4
          ·
          1 year ago

          How do people even know what’s been stolen? I know if someone logged into my server and copied stuff, they only way I’d know would be higher data usage.

          • AtomicPurple@kbin.social
            link
            fedilink
            arrow-up
            6
            ·
            1 year ago

            Either server logs, or the hackers sending them part of the data they have to prove they’re ligit. I assume the latter would have happened if Reddit had shown any interest in negotiating.

      • waz@feddit.uk
        link
        fedilink
        English
        arrow-up
        14
        ·
        1 year ago

        I read that to mean Reddit didn’t try to identify the stolen data, rather than the exploitists. Is that right?

    • pitninja@lemmy.pit.ninja
      link
      fedilink
      arrow-up
      11
      ·
      1 year ago

      If Reddit were to reach out privately to this group, the first thing they’d probably do is ask for proof. It’s trivially easy to provide proof you’ve carried out a hack; you just present some specific information that was not public and describe what all else you have in specific enough terms they know you’re not bluffing. (Or, I suppose you could just send them your whole dump if you really want to make it clear what all you have). The only way the rest of us will be able to validate these claims is if they leak and it either matches users’ own private account info or Reddit issues a disclosure about the hack (which I’m pretty sure they’re supposed to do regardless).