Thread by @hiitsennui

Guy keeps flip-flopping & disinforming. @marco_schuer discovered #Spoutible public API revealed IPs, names, addresses... of ~65K users (photo) When this was patched, @fareesh found ~25K user emails still exposed (see m.youtube.com/live/XtWtYeECC…). There was a leak in the sense that 1/

https://twitter.com/calamitymeow/status/1623171579034103808

Private user data was exposed in the public API. This was not a hack because the public nature of this data was a FEATURE of the template purchased for Spoutible. In other words, the template used was working correctly but needed to be changed to ensure data privacy. It wasn’t.2/

#Bouzy likely didn’t perform the promised security review (where is the report?) and deployed the template without noticing this feature. Now, Marco and Fareesh are decent people so didn’t release this data to the public. Fareesh did show proof if asked by that user only. 3/

https://twitter.com/fareesh/status/1621737594999705600

So the data was “leaked” in that it was exposed in the public API. Marco and Fareesh didn’t leak/distribute it. However, the data was public for days readily and freely available for anyone to take. Instead of hitting pause on Spoutible to correct this, Bouzy spent this time 4/

Spinning the story, smearing Marco & Fareesh, exposing Marco’s info & threatening to call his employer. He also made a ridiculous threat to call the FBI on these guys. During that time, could someone w/ nefarious intent have taken Spoutible user data? Yes. Did they? Can’t say. 5/

More on why Bouzy’s threats are ridiculous provided by Attorney Mederos 👇. See also the Ninth District Court of Appeals ruling on scraping publicly-accessible data: techcrunch.com/2022/04/18/web… 6/

https://twitter.com/juliemederos/status/1621917826268250115

Comparisons to the Twitter leak are also disingenuous, as is the argument that Twitter is worse because 200M users were affected. More users’ data was leaked from Twitter only because Twitter is much bigger than Spoutible. If more had signed up to Spoutible, more users 7/

https://twitter.com/fareesh/status/1622653237206855680

would’ve had their data exposed. Continue to use #Spoutible, that is up to you. The point is there was carelessness in the launch of this website, and a lot of dishonesty as well as baseless threats and accusations of trolling afterwards. 8/8

NOTE by “addresses”, I meant EMAIL addresses.