cross-posted from: https://news.abolish.capital/post/17218

A German hacker-journalist who names herself ‘Martha Root’ has livestreamed her deletion of an entire racist dating site. She dressed as a Power Ranger – the pink one – to delete ‘WhiteDate’, which has been nicknamed ‘Tinder for Nazis’:

https://www.thecanary.co/wp-content/uploads/2026/01/SnapInsta-Ai_3801908498044955136.mp4

Go go Power Ranger

Root, who had spent some time having fun before the deletion, also accessed the site’s entire database. The attack has become known as ‘WhiteLeaks’ – she then leaked data on the site’s 100,000 or so users. As well as hacking WhiteDate, Root also accessed its imaginatively titled sister sites:

• WhiteChild – basically ‘Ancestry for Nazis’; and
• WhiteDeal – more or less a ‘Linkedin for racists‘ who only want to do business with kindred ghouls.

Root also found time to mock the racists and their ideology, saying:

I infiltrated a racist dating site and made Nazis fall in love with robots.

[Their cybersecurity] would make even your grandma’s AOL account blush Imagine calling yourselves the ‘master race’ but forgetting to secure your own website – maybe try mastering to host WordPress before world domination.

They might need some cream for that burn.

Featured image via the Canary

By Skwawkbox


From Canary via This RSS Feed.

  • AernaLingus [any]@hexbear.net
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    9 days ago

    From one of the linked articles (emphasis mine):

    The data includes highly sensitive and detailed self-reported information, such as usernames, gender, age, location, activity history, lifestyle, height, eye color, hair color, and other physical appearance traits, income range, education, marital status, religion, and even self-assessed IQ, among many other fields.

    susie-laugh L M A O

    edit: holy shit, literally the next paragraph

    Notably, the dataset also contains numerous profile photos, along with embedded EXIF metadata that reveals precise GPS coordinates, device information, timestamps, and other identifying details.

    Not stripping EXIF data is a truly astonishing level of incompetence congratulations

    …no wait, that’s not even the best part:

    Root said she contacted a hacker who helped to exfiltrate the data. However, no hacks were required – all it took was a simple URL trick of adding “download-all-users/” to the top-level domain.

    doggirl-lol

    Link to the conference presentation