• Sweden's news in English
 

Swedes uncover Disqus user security breach

Published: 12 Dec 2013 15:15 GMT+01:00

After outing several 'online haters' at home, which caused several resignations from the populist, far-right Sweden Democrat party, the Swedish investigative journalists behind the revelations said they had accessed the identities of several million commenters using the popular Disqus system.

Martin Fredriksson and his colleagues started collecting Disqus data back in February 2013 as part of a project to more closely analyze anonymous online comments. They hoped to understand more about who was behind hateful and racist comments on far-right websites in Sweden. They unearthed some 6,000 anonymous accounts in Sweden on commission from the tabloid Expressen, which published the data on Tuesday.

Fredriksson told The Local on Thursday that the unmasking of a few thousand users behind pseudonyms used on far-right sites in Sweden could just be the tip of the iceberg.

There were millions of Disqus users whose identity is at risk of exposure, said Fredriksson, responsible publisher (ansvarig utgivare) for the Research Group (Researchgruppen, who said his group's database contained a total of 29 million comments from Disqus users around the world.

"We used an open Disqus API protocol to obtain the data," he said, using a common acronym for "application protocol interface", which specifies how software components should interact with one another. In order to obtain the data more efficiently, Fredriksson wrote a programme that automated the data download requests sent to Disqus servers.

"You usually get around 100 comments with one request, but our system was able to send ten requests at once," he explained.

While the thrust of the research focused on far-right sites in Sweden, data was also collected from news sites elsewhere in the world, including CNN, The Telegraph, ABC News, and The Jerusalem Post, as well as from mainstream Swedish news site such as Svenska Dagbladet, SVT Debatt as well as The Local.

Members of the Research Group quickly realized, however, that the data they received also came with metadata that included the email addresses tied to anonymous Disqus accounts.

"It came as something as a shock," he said. "We got a lot of data we probably weren't supposed to get."

Fredriksson emphasized that the group didn't use any illicit methods in obtaining the data, but that the information was included in their trawl due to a security flaw at Disqus.

"When you leave a comment as a Disqus user, there is information about the date, username, and the comment itself which is open data," he said. "But (Disqus) also sent us data with coding that made it possible to identify people's email addresses."

After it emerged that Disqus users has been identified in the Expressen news stories, the company was quick to take action.

"Disqus has not been cracked. No emails were leaked by Disqus," vice president for marketing Stephen Roy said in a statement released on Tuesday.

He explained that Disqus offers API services that include "MD5 hashes" of email addresses that allow users to access third-party services such as Gravatar, which in turn permits users to display a consistent avatar across platforms.

"This appears to be a targeted attack on a group of individuals using pattern matching of their activity across the web, associated with email addresses used by those individuals," said Roy, calling the actions a breach of Disqus privacy regulations. "As in all such cases, we are terminating the account."

Roy added that Disqus was disabling use of the Gravatar service and removing the MD5 hash email from its API.

"We will evaluate any further changes that will need to be made based on these actions," he said. Inquiries from The Local for further comment were not immediately returned.

Fredriksson took exception to the Research Group being painted as wrongdoers by Disqus, explaining that he and his time "didn't even use any account for this, and never had to agree on any terms of service"

"We are researchers and they cannot blame us for researching openly available data. I think the bad guys are those who handle our personal information so carelessly," he said.

Fredriksson went on to admit that he and his colleagues aren't sure what to do with the data now in their possession, but expressed fears about who else might have similar technology that could unmask Disqus users.

"You can imagine a lot of unseemly scenarios," he said.  "Perhaps the authorities in Iran, for example, have data like this from Israeli media sites and might use it to find out who is behind the comments."

Fredriksson said the incident is a wake-up call for news sites and online commenters everywhere to be more aware that their data may not be as safe as they had previously thought.

"People need to know more about the risks that arise when third-parties get access to their data," he told The Local. "It shows how much uncertainty there is in systems like this."

David Landes (david.landes@thelocal.se)

Your comments about this article

Today's headlines
Escalator return stalled in Swedish capital
Commuters using some of the stationary escalators in Stockholm. Photo: TT

Escalator return stalled in Swedish capital

Commuters in Stockholm are set for more frustration next week, with 39 escalators set to remain switched off at some of the city's busiest underground stations, following an accident a fortnight ago. READ  

Copenhagen shootings
Third arrest over fatal Danish terror shootings
The window of the Copenhagen cultural centre where one man was shot. Photo: TT

Third arrest over fatal Danish terror shootings

A man has been arrested for "complicity" in the Copenhagen shootings that killed two people earlier this month, with the Swedish artist Lars Vilks among the presumed targets of the attacks. READ  

Swedish firm to fund huge Danish wind project
Vattenfall's Stockholm office. Photo: TT

Swedish firm to fund huge Danish wind project

A massive new offshore wind farm off the west coast of Denmark is being built by the state-owned Swedish company Vattenfall, it has emerged. READ  

Copenhagen shootings
Sweden artist talk halted after Denmark attacks
Swedish artist Lars Vilks. Photo: TT

Sweden artist talk halted after Denmark attacks

A planned lecture at Sweden's Karlstad University by the controversial Swedish cartoonist Lars Vilks, the presumed target of the terror attack at a cultural event in Copenhagen earlier this month, has been scrapped by organisers. READ  

Surprise growth spurt for Sweden's economy
Sweden's economy is growing faster than expected. Photo: TT

Surprise growth spurt for Sweden's economy

Sweden's economy grew more than expected at the end of last year, with GDP rising by 1.1 percent between the third and fourth quarter, according to new figures from Statistics Sweden. READ  

Swedes to form 'ring of peace' at synagogue
A ring of peace around a synagogue in Oslo. Photo: Håkon Mosvold Larsen/NTB scanpix/TT

Swedes to form 'ring of peace' at synagogue

Hundreds of young Swedes are set to form a 'ring of peace' around a synagogue in Stockholm on Friday afternoon, in a show of solidarity two weeks after Jews were among those targeted in a pair of deadly shootings in Copenhagen. READ  

War criminals could go unpunished in Sweden
Tora Holst, head of the International Public Prosecution Office in Stockholm. Photo: Marc Femenia/SCANPIX

War criminals could go unpunished in Sweden

War criminals could walk free in Sweden because there are too few police officers to investigate the suspected offences, prosecutors have warned. READ  

Swedes' coffee passion could cut nerve disease
Swedes are among Europe's biggest coffee drinkers. Photo: Helena Wahlman/Image Bank Sweden

Swedes' coffee passion could cut nerve disease

Few people drink more coffee than the Swedes and now research funded by the Swedish Medical Council has suggested that those who have four to six cups a day may be less likely to get multiple sclerosis (MS). READ  

The Local Recipes
How to make a Swedish 'pyttipanna' fry-up
Pyttipanna with pickled beetroot and a fried egg. Photo: John Duxbury

How to make a Swedish 'pyttipanna' fry-up

Famous Swedish meal 'pyttipanna' has seen a revamp in recent years. This traditional comfort food used to be a way of using up leftovers, but is nowadays often spotted in trendy restaurants. Food writer John Duxbury shares his recipe with The Local. READ  

Dead Ski World Cup man was on geocaching trip
Police close to where the body was found on Tuesday. Photo: TT

Dead Ski World Cup man was on geocaching trip

A man who was found dead in the town currently hosting the Ski World Cup on Tuesday had been geocaching, a kind of scavenger hunt done using GPS, police believe. READ  

RECEIVE OUR NEWSLETTER AND ALERTS
Gallery
IN PICTURES: Super cute sloth twins charm visitors to Swedish zoo
Lifestyle
Meet Sweden's first woman chef to win a Michelin star
Lifestyle
What's on in Sweden: February 26th - March 5th
Accelerated for Ice Music
What is Bob Dylan's guitarist doing in northern Sweden?
Features
How well do you know Sweden's top celebrity couples?
Blog updates

27 February

Editor’s blog, February 27th (The Local Sweden) »

"Our most read story this week got picked up by global media from Al Jazeera to..." READ »

 

18 February

The mysterious -s, part 2 (The Swedish Teacher) »

"-s expressing “each other” (reciprocal verbs) You have most likely used this form of the verbs..." READ »

 
 
 
Business & Money
Are company boards 'too white' in Sweden?
Gallery
People-watching: February 25th
Technology
Sweden is dubbed second most 'digital' nation in European Union
National
Why more Swedes want a sex change
Sponsored Article
Ten tips for succeeding as a start-up in Sweden
National
The return of Sweden's Ace of Base
National
Why has Julian Assange's case been going on for so long?
National
'21' or 'IS'? Swedish police confuse birthday with Islamist extremism
National
Spring has sprung in Sweden
Gallery
Property of the week: Ängelholm
National
How to never miss your favourite weekly features on The Local
Business & Money
Ten Swedish start-ups you haven't heard of (yet)
National
Is Sweden home to the world's oldest living cat?
Gallery
IN PICTURES: The life and career of Fredrik Reinfeldt
Gallery
IN PICTURES: Princess Estelle through the years
National
Why are Swedish Jews worried?
Sponsored Article
Tourist or lifer: what sort of expat are you?
Gallery
People-watching: February 19th-22nd
National
'Racist' bird names banned in Sweden
Lifestyle
What's on in Sweden this week
National
Nobel prize to go under hammer
National
Swede named 'Fanny' banned from getting UK loyalty card
National
Spotlight on the Swedes that could be funding Islamists
Sponsored Article
Are you an American expat? How to face FATCA
Gallery
People-watching: February 18th
National
Is a chocolate crime wave sweeping across Sweden?
National
What we know about the Copenhagen shootings suspect
National
Danish Ambassador: 'We'll live our lives the way we always have'
National
What does this '90s pop act have to do with a former minister?
Lifestyle
How to embrace Sweden's creamy semla bun tradition
National
Did this Swedish hotel really refuse a gay couple?
National
Why are so many escalators down on Stockholm's Metro?
Gallery
Property of the week: Kungsbacka
National
Can Zlatan's tattoo stunt help end world hunger?
Gallery
People-watching: February 14th
Lars Vilks
National
Who exactly is controversial Swedish cartoonist Lars Vilks?
Lifestyle
VIDEO: How to tackle Sweden's bizarre mating rituals
Sponsored Article
'Immigration is critical' for Stockholm’s future
Lifestyle
How to make traditional Swedish blackberry pie
National
What the weak krona means for expats and visitors to Sweden
National
What's in a Swedish meatball?
National
Spotlight on 32 Swedish Isis fighters killed in Syria and Iraq
Sponsored Article
Stockholm job fair helps immigrant entrepreneurs
Latest news from The Local in Austria

More news from Austria at thelocal.at

Latest news from The Local in Switzerland

More news from Switzerland at thelocal.ch

Latest news from The Local in Germany

More news from Germany at thelocal.de

Latest news from The Local in Denmark

More news from Denmark at thelocal.dk

Latest news from The Local in Spain

More news from Spain at thelocal.es

Latest news from The Local in France

More news from France at thelocal.fr

Latest news from The Local in Italy

More news from Italy at thelocal.it

Latest news from The Local in Norway

More news from Norway at thelocal.no

986
jobs available
PSD Media
PSD Media is marketing company that offers innovative solutions for online retailers. We provide modern solutions that help increase traffic and raise conversion. Visit our site at:
psdmedia.se
Counselling and Psychotherapy in English
Sometimes living in another culture can cause stress, confusion and feelings of sadness and loneliness. Talking to a professional psychotherapist/counsellor might help you. I am a UKCP Reg. psychotherapist. My practice is in Södermalm, Stockholm.
Contact me to discuss your options