He probably downloaded 100k accounts (perhaps a range of IDs) and then grepped t...

kybernetyk · on July 24, 2013

Maybe, but he writes that he still has those 100k data sets. So why didn't he delete them after grep ran through?

apashee · on July 24, 2013

Because he's clearly not very experienced in this. Apparently his video (when it was up) had confidential information shown in it: https://twitter.com/ibrahimbalic/status/359347248473190402. Who the hell flouts confidential information in a public fashion? There's a interview with him with English subtitles here: http://video.ntvmsnbc.com/applei-sarsan-turk-yazilimci-ntvms..., where he says some interesting things near the end. It looks like he used a struts2 vulnerability, HN had a discussion about this 2 days ago: https://news.ycombinator.com/item?id=6080620, https://news.ycombinator.com/item?id=6082599. He basically did what Weeve did, except Weeve is in confinement now.

reginaldo · on July 24, 2013

>He basically did what Weeve did, except Weeve is in confinement now.

Don't get me wrong, I don't agree with what he did, but the whole case is baffling to me.