It’s not known for exactly how long the bucket was left exposed, but a text file left behind by an unnamed security researcher, dated September 2018, warned that the bucket was “not properly configured” which can have “dangerous security implications.”
So... this has been a known problem since 2018. Time to stop tilting at windmills.
No.
The hack was obviously politically motivated, beyond that, nothing here points towards it being state sponsored. Non-state actors are equally motivated by the timing.
The idea that the Canadian government hacked GiveSendGo is also frankly ridiculous. Our government just isn't that lawless, and they could almost certainly get this data via legal means.
Both recent and historical evidence does not really support this claim. It is very very very easy to find many examples of governments breaking the law for their own benefit.
I don’t think it was the Canadian government either, but your logic does not seem good.
And that’s not even taking into account that once trust is broken there are likely many more instances that aren’t known.
Neither of those would explain a government entity hacking this website to leak this data in an attempt to benefit the government.
I can't produce evidence that there isn't a history of actions like this, since my evidence really is just the lack of evidence. Thus I'd ask you to produce the "ample evidence" you claim exists.
[1] https://www.thestar.com/politics/provincial/2020/09/04/ontar...
[2] https://www.theguardian.com/world/2021/may/17/canada-covid-c...
That said, I don't think the state was the responsible party for this attack.
The current premier's father had feds planting explosive in people’s mailboxes [0] and tried to pin it on some political group he didn’t like back in the 70’s. Talk about a coincidence.
[0] https://en.wikipedia.org/wiki/List_of_controversies_involvin...
If I had trucks honking in front of my window, I'd do whatever I could to get them to fuck off as well. No need for the state to get involved if you just piss off enough random people.
They didn't do all this in Sweden.
None of which are the supposed leaders of the manifestation, truckers, which actually did pretty well through all this - ask me why.
Can't you enter Sweden with either vaccination or proof of recovery or a negative test?
https://www.folkhalsomyndigheten.se/the-public-health-agency...
Which when it's society wide, makes society stressed out and angry.
Stressed out and angry people do dumb and counter productive things. Sometimes even to the point of severe self harm.
Society when it is stressed out and angry tends to fragment and be less cohesive. Sometimes even to the point of severe self harm.
Wondering which side (or which sides there are, or why there even are 'sides') is doing the MOST dumb and counter productive thing is mostly part of the problem, not actually a solution, in the same way as a tired angry person trying to figure out who to yell at/blame, instead of getting some sleep or whatever.
Society wide, we need to do some serious self-care and calming the hell down - which would be nice, but good luck. So I expect we'll get a lot more fighting.
I live in a place where you can shit on restrictions all you want. Things aren't back to normal because people are still careful on how much they socialize and what the risk profile is. Things aren't back to normal because people have moved away from offices and it turns out a lot of people like that just fine, meaning a lot of old businesses have shut down, new businesses have opened up, and habits have changed.
The old world isn't coming back, ever. The world has changed. Even post-pandemic (which we are still far from over) I'm just gonna be more conscious about spending time in very closed spaces for extended time. The uncompromising are gonna sit a few things out even more. Also something like 0.5% of the population died and a few percentage points have ongoing long-COVID.
Q: What % of the population would be expected to die in a "normal" (pre-Covid) year?
(I realise there is a discussion about excess deaths, but it's not quite as simple as being able to assign the excess to Covid, see https://www.health.org.uk/publications/long-reads/what-has-h... )
The protests are an ideological touchstone, there are surely a lot of hackers in this world keen on 'exposing terrible people' (in their purview) and my money is on just some random 'hacker'.
I'm doubtful that it would be a government action, because those secrets are hard to keep and if it was leaked, the current political situation would collapse immediately. Trudeau & Co. would be gone for good. The details wouldn't really matter that much. I mean, he survived Blackface but he won't survive that kind of scandal.
That said, I'm pretty sure there was a de-facto systematic collusion between gov. offisials and GoFundMe etc. to shut down funding. The gov. can show GFM 'police reports' etc. and that can be used as a basis for cancellation. This is a bit problematic because all protests of a certain size have 'unlawful activity' and as soon as something is on the books, it's hard to put in context. This gives systems like GFM (or Apple, or Google or Amazon or VISA) the legitimate 'cover' to do kind of whatever.
I don't support the truckers, I see their TikTok's and they are rather uninformed antivaxxers, however, I kind of have to accept their right to protest.
Protesters in Portland literally took city blocks by force, threatened violence with serious weapons, two people died, there was tons of avoidable crime, police and rescue not allowed to enter etc. and they didn't seem to get quite the disdain that the truckers are, rather the press kind of just seemed to 'avoid them'. I understand every situation is different ... but still.
Truckers are dug in in Ottawa and Police are wary of confrontation, there's hints that the rank and file of Ott Police and RCMP are a bit sympathetic, and the Tow Trucker drivers are as well and don't want to face blowback. There is 'just enough empathy' among the Canadian public that it could 'tip in their favour' if we saw the firehoses or CS gas break out. It's definitely a very delicate political situation.
But in the end - Occam's Razor: some guy did this and leaked it, that's that.
They will eventually go home.
It is not some high end zero day they discovered. It is just a misconfigured s3 bucket. There are tools out there which scan for this kind of thing without any code required.
While some level of technical expertise is required, most developers could something like this if sufficiently motivated
No need to collude or conspire when everyone is already happy with each other's actions and everyone knows what the others want and which actions will step on their toes and which will be neutral or build good will.
Real collusion/conspiracy where there is actual communication between big actors like these is vanishingly rare. Behavior like "we set out price same as our competition's because why undercut each other" is dirt common.
After seeing how angry people got over Joe Rogan, I absolutely think there are militantly progressive people who are more concerned with the content of speech than the chilling effect of limiting free speech who would do this. Which isn't to say I agree with the Ottawa protesters or bridge blockaders; I think both went well outside the bounds of free speech.
I think if the ire of your neighbors has risen to the point that they'll go out and sit in -20C weather all day to stop you, it's not unlikely that someone would spend an afternoon poking at your website.
[1] https://ottawa.ctvnews.ca/counter-protesters-block-convoy-ve...
Why did you use the term “militant” to describe the side that is not using military tactics.
Basically, they know that one side is militaristic, and the other is not, but they side with the militaristic side ideologically, so they reflexively demonize their opponents with terms that better describe themselves, Knowing it's a bad look intentionally distancing themselves from the reality of what they stand for.
The point being made is that pulling one's music from Spotify is a personal choice about stuff you control.
Blocking bridges is forcing others who may not even be involved in your conflict to suffer the consequences of it. This is generally considered "a dick move".
With self-driving tech being a present reality, these truckers are just giving everyone a reason to automate them out of their jobs. A robot can't throw a tantrum, join a gang, and terrorize your city.
And this isn't to pass judgment on any of the groups, I don't live in Canada, I'm not a Joe Rogan listener or Spotify user, I really don't care.
I was using definition 2 to criticize censorship.
https://en.wiktionary.org/wiki/militant#Adjective
Neil Young didn't just say he disagrees with Joe Rogan, he didn't launch his own podcast. He tried to use his position to silence Rogan.
You have a right to speak your mind, but your ability to exert power is regulated. The same goes for when the government ends a strike
https://techcrunch.com/2022/02/08/ottawa-trucker-freedom-con...
Not only was this S3 public for reading but sounds like you could create & update as well since 2018. It contained "50 gigabytes of files, including passports and driver licenses".
Per the Tech Crunch article:
> It’s not known for exactly how long the bucket was left exposed, but a text file left behind by an unnamed security researcher, dated September 2018, warned that the bucket was “not properly configured” which can have “dangerous security implications.”
I suspect both Occam and Hanlon would disagree.
It has also been commonly reported that the protestors are Nazis carrying Nazi flags, but this reporting is also excessively politicized. Here's a first-person account giving a completely different picture: https://www.youtube.com/watch?v=TtN4VqBeCMg#t=6932.
There are hundreds of hours of livestreams on youtube showing the protests. Anyone can dip in at random and get a sense. That's how I ran across that last link of the guy talking about the swastika flag. From the livestreams it seems clear that this is an authentic and peaceful working class protest, not some far right "insurrection" (a word that has also been chosen for political reasons). The most fascinating aspect of this event is what it reveals about the class divide in Canada, and the West in general, since each country has its own version of this right now.
I would question the "working class" bit. Most of us on HN are office workers, who don't get out much, so we tend to assume anyone who works outdoors, including driving a truck, must be working class. But remember that every trucker participating in this protest has a truck to participate in: they are either owner-operators, or participating on behalf of trucking firm. Owner-operators are petite bourgeoisie; owners of firms are capitalists. Neither are working class, in an economic sense.
Really, when we office drones say the truckers are working class, what we actually mean is that they are rednecks. They come from rural areas, they probably don't watch the same TV shows as us, and perhaps they don't even drink speciality coffee. But you can be a redneck petit bourgeois, or a redneck capitalist!
This is actually quite disingenuous. All it tells you is the general comportment of what people are doing around those livestreaming (who are almost all clearly marked).
What you aren't seeing or being exposed to in this way are the countless complaints of harassment, death threats, and rape threats the people living in this area are facing on a routine basis, even when the person being threatened was trying to help the protestors.[1][2][3][4]
As I've mentioned in other places, there's a lot of protests in Ottawa. It's the nation's capital and it's often a symbolic target if nothing else. Ottawa's citizens are familiar with protestors. This is a whole different ballgame.
In terms of it being working class, I think that's also a disingenuous label. As you can see in this walk through of the stopped convoy, there's VERY FEW actual big rigs participating, and the people here are largely driving recent pickups.[5] These are not put-out truckers, these are anti-vax/anti-mandate people from across the spectrum, and not a lot of them.
[1]: https://ottawacitizen.com/news/local-news/ottaw-tow-truck-op...
[2]: https://www.cbc.ca/news/canada/ottawa/moo-shu-ice-cream-empl...
[3]: https://ottawacitizen.com/news/unruly-protesters-prompt-earl...
[4]: https://globalnews.ca/news/8594809/covid-freedom-convoy-otta... -> Multiple sources in first paragraph.
[5]: https://mobile.twitter.com/Gray_Mackenzie/status/14929139048...
https://www.cbc.ca/news/canada/calgary/coutts-protest-blocka...
I’m not familiar with Canadian law on the subject, so I don’t know if possession of the items in question is unlawful or if there was some other cause for the arrests.
That's the crux of this - their weaponry was way out of line according to Canadian law.
For example, remember the recent election in Virginia where there was a ton of media retweets of a picture of a handful of 'white supremacists' in front of the tour bus for the Republican candidate. The media made a huge deal about it and the reporter who was on the scene made all kinds of absurd tweets about things she 'overheard' them say. However it didn't take long before people found pictures of the 'White Supremacists' working for the Democrat candidates campaign. One was even driving the tour bus!
https://redstate.com/bonchie/2021/10/29/busted-multiple-part...
That was a almost absurdy poorly executed attempt at a political smear but it really opened my eyes to how easy it is to insert bad actors into an event - especially when you have a complicit media.
I assume you are talking about Klein's statement regarding Tucker?
[0] https://en.wikipedia.org/wiki/List_of_controversies_involvin...
Isn't it convenient how all contradicting evidence is dismissed by evidence-free conspiracy theories?
https://www.wired.com/video/watch/why-you-can-never-argue-wi...
And the evidence from the leak is fully testable and falsifiable! You could literally just email people who donated and ask them.
[1] https://globalnews.ca/news/8610727/ipsos-poll-trucker-convoy...
Polarized in every way imaginable.
Tables at
https://static1.squarespace.com/static/5a17333eb0786935ac112...
24% of 18-34 and 34-55 support the truckers and what they are doing
27%/26% support them but not the way they are doing it
49%/50% think they are completely wrong and need to be stopped regardless
There's no real difference between young and middle age, although over 55s skew significantly to "stop them". Not much difference on income, but educational attainment shows significant skew, with university educated far less likely to support the truckers
I don't think your statement is at odds with gp's. A legitimate concern doesn't make it popular.
However, the greater issue is a lack of organization and so nothing (very little) is going to get done (much like with BLM).
The best thing ruin collective disputes is to add more noise and discourse so that the original cause is lost in the shuffle and the majority just sit back and shrug. "I can get behind solving one problem at a time, but when they're shouting for 20, I can't be bothered to care."
Re: getting things done, so far it seems counter-productive in the sense that now the government doesn’t want to seem “weak” and relax restrictions, even though it’s what reasonable governments are doing at this point. I’m not going to put this at the feet of the organizers (whoever they are); it simply deepens my already deep disappointment with the Canadian government since thats a political move.
That said, I agree this is most likely the work of an individual. For all its usefulness in raising money, GSG has probably never been subjected to a real-world pentest by a highly motivated attacker. Not to mention the legions of attackers one would expect from such a polarising subject. This was unfortunate but entirely predictable.
https://theconversation.com/majority-of-canadians-disagree-w...
It also seems unlikely that, say, the workers at factories who were prevented from working are rich people…
OTOH, this poll https://abacusdata.ca/ottawa-survey-freedom-convoy/ suggests that about 22% of Canadians support the convoy and 67% don't.
Do people like restrictions? No, nobody likes restrictions. Do people like restrictions that save lives? Still don't 'like' them but believe sacrifice is necessary for the greater good.
Do I support people's right to protest? Yes, but... You can't honk all night Block major infrastructure for days Desecrate war monuments Flood 911 with fake calls
Etc.
Do people want to continue with restrictions that have pushed the opioid epidemic to a new high [1]. Pushed mental health in youth to 'completely unsustainable' levels [2]. Stolen normal development/socialization from children & young adults using restrictions that were not always clearly evidence based [3]. And, all this considering the current outlook of the virus is far more positive than it once was.
The Angus Reid poll phrased their question like this, for anyone interested:
>It's time to end restrictions and let people self-isolate if they're at risk.
[1]: https://bc.ctvnews.ca/deadliest-year-in-b-c-s-opioid-crisis-...
[2]: https://calgaryherald.com/news/local-news/completely-unsusta...
[3]: https://www.theatlantic.com/ideas/archive/2022/01/kids-masks...
I suspect how much people support "people's right to protest" is directly proportional to how much they support The Cause. If they don't support The Cause, they want protesters to be as out of the way as possible (ie. "free speech zones"). If they do support The Cause, anything up to and including violence/vandalism is justified, because a few causalities would be canceled out by all the positive effects that The Cause would bring.
Abacus never fails to find support for government approved narratives.
Hmm, where I have heard that rhetoric before...
The claim can be proven or disproven with elections. But I think that Trudeau would win rather easily pitted against this extremist, apparently foreign funded fringe.
Even Canada's conservatives don't want to be associated with them anymore.
They’ve just performatively asked truckers to leave, so that they can always point to that later in their election campaign. Why would they want them to leave?they don’t.
This is a wedge issue, and as such they're casting their votes to alienate a huge (likely majority) of voters away from your platform before the leader has even been selected.
Secondly, this protest has been a huge news vacuum attracting non-stop coverage. This is bad for a party that needs to drum up any support for a leadership race to carry them more seats in the next election. By the time this plays out, the conservatives could be half way through their election and most Canadians may not even know the candidates.
Plus, politicians who do vote against their constituents' wishes can run in a district that's more friendly to that vote.
Given the unfair media coverage, is it any wonder?
There seems to be, including in your own post, a lot of ad hominem attacks ("one person had a confederate flag! some people in the US support the cause too! this means it's totally evil") rather than addressing the human rights the protestors are fighting for, and it's a shame. But it's no surprise given the opposite media coverage for the opposite type of protest (violent riots) two summers ago.
I have no doubts that the true culprits for this hack will be found and the punishment will be orders of magnitude worse than anything the truckers will receive.
Recent history does not support this view.
When left-wing railway blockades shut down the entire CN rail network, there was no "brutal and decisive" response. It took the better part of a year to resolve, and the OPP didn't enforce the court ordered injunction CN got, and the Liberal government was meeting frequently with the protestors.
https://www.cbc.ca/news/politics/marc-miller-path-forward-pr...
You're also assuming that support for mandates would be the only motive: While less likely than mandate support, someone may simply have been very angry that their life had been turned to chaos & misery by the protestors.
Not my assumption. The premise of the comment I replied to was that they were ideologically opposed
what does hack timing have to do with the state? I don't follow your logic at all. I would never make that connection. It's just an insecure website and server, anyone can run their testing suite and have gotten the same info. Why rationalize incompetence with state sponsored?
I'm really about to sell some Q branded coffee mugs to everyone with an email address in this leak, so fckin gullible.
https://www.clickondetroit.com/news/politics/2022/02/12/repo...
people love to dunk on companies in situations like this but probably 95% of startups would get hacked like this if the MSM put a bunch of attention on them and made them a target. Even huge companies get pwned due to basic security issues