Seattle (dpa) – The streaming platform Twitch has been the victim of a major data theft. A stranger published a data packet on the network which, according to him, also contains the entire programming code of the service.
The Amazon subsidiary admitted that it was responsible for the tapping: data was due to an error in The server configuration was unprotected from the Internet.
Twitch is mainly used by gamers to broadcast the progress of video games live. The platform produced its own stars, which have a lot of viewers.
The published data also includes lists of the alleged income of the Twitch streamers. Above all, however, the unmasking of the entire technical platform could have dangerous consequences. “Since source texts have also been leaked, it can be assumed that these are now being searched for further vulnerabilities by other cyber criminals,” said Rüdiger Trost from the IT security company F-Secure. “It is to be expected that more hacks will probably follow the platform,” he therefore warned.
Login data apparently not affected
Twitch also emphasized that it had currently there are no indications that user login data are also affected. Also, the platform generally does not save the complete credit card numbers and thus could not have been tapped. The platform nonetheless reset – “as a precautionary measure” – the so-called stream keys with which it can assign incoming live broadcasts to individual users. This should prevent Twitch channels from being hijacked by others.
The published data showed, among other things, a large income gap between the most prominent Twitch streamers, some of whom earn hundreds of thousands of dollars, and less popular ones Users. Several streamers confirmed on Twitter that the leaked information about their income was correct. which are used to simulate hacker attacks in Twitch. “Jeff Bezos paid 970 millions of dollars for it,” wrote the person behind the leak on the 4Chan platform with a swipe at the Amazon boss. “It’s free with us.”
The “Platformer” blog asked previous Twitch developers about the leak. They reported, among other things, that there were hardly any internal precautions against the downloading of large amounts of software code by employees on the platform. Although Amazon, which is known for strong IT security, has already 2014 bought Twitch, the platform was still operated with its own security precautions, it was also said.