Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think editing critical Reddit comments as part of a prank or maybe as a jokey form of retribution is an extremely ill-advised and boneheaded move. I don't know if it was abusive and it was hardly covert, but it was definitely not cool. I doubt Spez will make that mistake again.

But did it tell us anything new? Are we surprised that Reddit admins have the technical ability to edit records in their own database? (As do the admins of other social media sites...)



It seems Reddit admins don't have that ability, if I read the thread correctly. Rather, Spez helped build the system and just knew how to manage the prank. It wasn't even really a backdoor thing, he just had the know-how to do it (like being able to log into the database and update a row).

That's the confusing bit about the outrage to me: I think people expected it to be secure and tight, and ... well... I'm not sure what led to that conclusion. I can easily imaging that until Spez pulled that stunt, they just figured it was too hard to screw with and that the databases were sufficiently secure. After all, the techs have full access to the machines*. It's like being surprised that your ActiveDirectory admin can change your password at will.

But you can bet your booties they'll try to lock it down a bit better now. Wouldn't expect it to be the TarSnap of forums, though. Reddit's not exactly a bastion of authenticity :P

EDIT: What I mean here is that someone has physical access to the machines, right? Or at least some amount of root? Or can log in? I guess to me it's like being outraged that the guy who targets the Hubble telescope abuses his position and points it at Earth or something as a joke; huge amount of time and money on the line and it would be a dumb thing, but it's also pretty harmless. Might still get fired for it, though.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: