Russia's 'YouTube' Was Hacked

0:00 What Is RuTube?
0:45 The Hack
2:46 The Timing Was No Accident...
3:38 RuTube Gone Forever?
4:32 Linode
5:11 Outro

Sources:

===============================================
===============================================

[cpuuk]

No computer room door has anything but a press-to-release mechanism on the inside of the computer, it's basis H&S.

[mr_indie_fan]

They took down wikidot for nearly a week so this is payback.

[stanislavkk]

As russian i can say - everyone here hates rutube ) even if putin blocks youtube - we will watch via vpn )

[rajder]

It would make sense if Sudo rm -RF was part of the IT army tbh

[JeffBourke]

Shit. I thought it was “red tube hacked”… what a relief!

[davidmurphy]

Ah nice, a python site with django framework. Such a great framework, no intrinsic security holes there that's for sure. I expect it's distributed cloud hosting with object storage. Obviously "deleting" doesn't delete any data, it just changes memory location addresses, so they clearly had access for quite some time to rewrite with gibberish or, more likely, giving their opinions about Russian actions in Ukraine. You'd need to lock out sysadmin so they must have been able to issue new ssh keys. Unless the idiots used a password, that would be hilarious. If they got into the cloud admin they could have just deleted the server instances and there's no coming back from that. Nah, I'm putting money on them getting into Linux and executing a python script from bash.

Now, did they physically lock the doors? Hmm. Well doors wouldn't be on a webserver but they've clearly got into the network. Again, there being no barriers between servers - if my speculation is correct - is hilarious. I mean, yeah, why not? The thing is, why haven't we seen all the staff email? Tbh, you normally use a service for that so it won't be part of the server network. I mean, if you want to keep track of your workers turning up on time then you need the doors on your virtual server network.

Hehe. I wonder how many days they had to roll back. Probably went from the weekly backup.

[banjogyro]

Nobody uses RuTube last time I heard RuTube mentioned it was post-ironically

[kris]

seems to be back up

Edit;

seems like I should watch the entire upload first.

[___________________________]

I'm a pedant, but ~30 sec in, that's a linear trend, not exponential

[trueriver]

It's not quite the cheekiest possible rip off name in Russian. There are two letters in Russian with a u sound, and one of them is actually pronounced yu: ю

[lampionmancz]

Harmed probably just means damaged the files. Most of which were probably recovered.

[primefactors]

I saw the username and realized oh my god this is the sudo command we should not

put in our linux system

[ipadize]

0:50 its not an attack, its a special operation

[EmM-komu]

3:35 i thought we had information that this was an inside job from two ex employees who still had access

[TheChemicalWorkshop]

if someone can get the source code, i'd like to see it !

[jan-lukas]

I guess if 90% of backups were deleted, but some of the remaining 10% were recent ones, it could be that actually no data was lost (sadly)

[morsine]

I read the thumbnail as "RedTube"

[yeetyeet]

The rutube data can be found on telegram, I also think theres a torrent

[saga]

It cancels out, most ads are for things that aren't functional.

[DodZz]

very cool visuals from the hacker group explanation video