• Sweden's news in English
 
Swedes uncover Disqus user security breach
A screengrab from the Disqus debate tool website.

Swedes uncover Disqus user security breach

Published: 12 Dec 2013 15:15 GMT+01:00

After outing several 'online haters' at home, which caused several resignations from the populist, far-right Sweden Democrat party, the Swedish investigative journalists behind the revelations said they had accessed the identities of several million commenters using the popular Disqus system.

Martin Fredriksson and his colleagues started collecting Disqus data back in February 2013 as part of a project to more closely analyze anonymous online comments. They hoped to understand more about who was behind hateful and racist comments on far-right websites in Sweden. They unearthed some 6,000 anonymous accounts in Sweden on commission from the tabloid Expressen, which published the data on Tuesday.

Fredriksson told The Local on Thursday that the unmasking of a few thousand users behind pseudonyms used on far-right sites in Sweden could just be the tip of the iceberg.

There were millions of Disqus users whose identity is at risk of exposure, said Fredriksson, responsible publisher (ansvarig utgivare) for the Research Group (Researchgruppen, who said his group's database contained a total of 29 million comments from Disqus users around the world.

"We used an open Disqus API protocol to obtain the data," he said, using a common acronym for "application protocol interface", which specifies how software components should interact with one another. In order to obtain the data more efficiently, Fredriksson wrote a programme that automated the data download requests sent to Disqus servers.

"You usually get around 100 comments with one request, but our system was able to send ten requests at once," he explained.

While the thrust of the research focused on far-right sites in Sweden, data was also collected from news sites elsewhere in the world, including CNN, The Telegraph, ABC News, and The Jerusalem Post, as well as from mainstream Swedish news site such as Svenska Dagbladet, SVT Debatt as well as The Local.

Members of the Research Group quickly realized, however, that the data they received also came with metadata that included the email addresses tied to anonymous Disqus accounts.

"It came as something as a shock," he said. "We got a lot of data we probably weren't supposed to get."

Fredriksson emphasized that the group didn't use any illicit methods in obtaining the data, but that the information was included in their trawl due to a security flaw at Disqus.

"When you leave a comment as a Disqus user, there is information about the date, username, and the comment itself which is open data," he said. "But (Disqus) also sent us data with coding that made it possible to identify people's email addresses."

After it emerged that Disqus users has been identified in the Expressen news stories, the company was quick to take action.

"Disqus has not been cracked. No emails were leaked by Disqus," vice president for marketing Stephen Roy said in a statement released on Tuesday.

He explained that Disqus offers API services that include "MD5 hashes" of email addresses that allow users to access third-party services such as Gravatar, which in turn permits users to display a consistent avatar across platforms.

"This appears to be a targeted attack on a group of individuals using pattern matching of their activity across the web, associated with email addresses used by those individuals," said Roy, calling the actions a breach of Disqus privacy regulations. "As in all such cases, we are terminating the account."

Roy added that Disqus was disabling use of the Gravatar service and removing the MD5 hash email from its API.

"We will evaluate any further changes that will need to be made based on these actions," he said. Inquiries from The Local for further comment were not immediately returned.

Fredriksson took exception to the Research Group being painted as wrongdoers by Disqus, explaining that he and his time "didn't even use any account for this, and never had to agree on any terms of service"

"We are researchers and they cannot blame us for researching openly available data. I think the bad guys are those who handle our personal information so carelessly," he said.

Fredriksson went on to admit that he and his colleagues aren't sure what to do with the data now in their possession, but expressed fears about who else might have similar technology that could unmask Disqus users.

"You can imagine a lot of unseemly scenarios," he said.  "Perhaps the authorities in Iran, for example, have data like this from Israeli media sites and might use it to find out who is behind the comments."

Fredriksson said the incident is a wake-up call for news sites and online commenters everywhere to be more aware that their data may not be as safe as they had previously thought.

"People need to know more about the risks that arise when third-parties get access to their data," he told The Local. "It shows how much uncertainty there is in systems like this."

David Landes (david.landes@thelocal.se)

Your comments about this article

Today's headlines
More Swedes take to the skies for Christmas 2014
Christmas elk lights in Stockholm. Photo: TT

More Swedes take to the skies for Christmas 2014

Swedes have shown a massively increased interest in travel this year, with up to 300,000 more people taking a flight over the Christmas period compared to last year. READ  

US-Swedish newspaper archive nears completion
Photo: The American Swedish Institute in Minneapolis (ASIM)

US-Swedish newspaper archive nears completion

The Swedish-language press flourished in the US in the late 19th century as Swedes moved in, and a new project to archive and digitize the wealth of historical material is set to go live in 2015. READ  

Thailand's tsunami: Ten years on
The wave Sweden will never forget
Tsunami "Wall of Remembrance" in Mai Khao in northern Phuket. Photo: TT

The wave Sweden will never forget

The Local looks at how Swedes are remembering the tidal wave that shook South-East Asia exactly ten years ago, leaving 543 Swedes dead. READ  

Sweden's wild carnivore population on the rise
A family of lynx. Photo: Shutterstock.

Sweden's wild carnivore population on the rise

An extensive European study has found that the numbers of carnivorous animals are on the rise across the continent, with Sweden seeing a hike in the populations of bears, lynxes, wolves, and wolverines. READ  

Swedish parties in secret election talks: report
Finance Minister Magdalena Andersson. Photo: TT

Swedish parties in secret election talks: report

The government and opposition parties are reported to be conducting negotiations in a bid to avoid government chaos, putting the new March election in doubt, according to a media report. READ  

Swedish police warn of migrating elk herds
An elk, known as a moose in northern America, crosses the road. Photo: TT

Swedish police warn of migrating elk herds

Police in northern Sweden have urged holiday motorists to be careful after reports of unusually large herds of migrating elk. READ  

My Swedish Career
Meet the Italian sketching a new Swedish future
Filippo Vanzo. Photo: Private

Meet the Italian sketching a new Swedish future

For this week's My Swedish Career, The Local chats to Filippo Vanzo, a freelance illustrator who started to picture life in Stockholm after meeting his Swedish girlfriend online. READ  

Icy roads as Swedes head home for Christmas
Photo: TT

Icy roads as Swedes head home for Christmas

The Swedish weather agency has issued a warning for icy roads across the country as many city-dwellers head out to the countryside for Christmas. READ  

Bomb blasts rock Malmö's Rosengård
Photo: TT

Bomb blasts rock Malmö's Rosengård

Police suspect that a rental dispute is behind a twin explosion which rocked the area around Ramels Väg in the Rosengård area of Malmö over the weekend. READ  

Romanian beggar lands bumper lottery win
Photo: TT

Romanian beggar lands bumper lottery win

A Romanian man who slept under a bridge in a Swedish city and lived by begging recently landed a 210,000 kronor ($27,000) lottery win after buying a ticket on impulse, saying he now wants to build himself a house. READ  

RECEIVE OUR NEWSLETTER AND ALERTS
Society
Video: The best & worst of Swedish Christmas
National
Second baby on the way for Princess Madeleine
Gallery
People-watching: December 20th - 21st
Lifestyle
What's On in Sweden: December 18th to 25th
National
'Unprecedented' Russian activity: Armed Forces
Blog updates

22 December

A Tale of Three Cities (The Diplomatic Dispatch) »

"Today I am pleased to welcome a guest blogger on my blog, Sir David King, The..." READ »

 

19 December

-t or no -t? (The Swedish Teacher) »

"Hej! There are many things in the Swedish language that can give you a grey hair or two,..." READ »

 
 
 
Society
Interview: The Local chats with Melinda Gates
Society
VIDEO: Stockholmers try out some Swedish tongue twisters
Society
Eight things to do when it gets dark in Umeå
National
Inside Sweden's first 'light therapy' school
Finest.se
Gallery
People-watching: December 17th
Estelle through the years
Gallery
Princess Estelle through the years
Society
Why are there so many 100-year-olds in one Swedish town?
Society
Is it time to better celebrate Sweden's diverse identity?
Gallery
Property of the week: Huddinge
National
Why has The Local got a new logo?
National
CATCH UP: Russian plane in Baltic near-miss drama
Lifestyle
How my compass drew me to Sweden
National
The man whose memory you need to remember
Gallery
People-watching: December 13th - 14th
Sponsored Article
How to get your own office anywhere in the world
Politics
'Our party will stand alone': Stefan Löfven
Society
The Local chats to Ruben Östlund, director of Golden Globe nominated Force Majeure
Lifestyle
Ten things to know before a Swedish party
Lifestyle
What's On in Sweden: December 12th to 19th
Gallery
IN PICTURES: The 2014 Nobel Banquet
National
The Local's guide to the Nobel Prizes 2014
Education
Introducing... Education in Stockholm
Society
The Swedish Christmas market with a twist
Lifestyle
Why do so many Swedes have tattoos?
Society
Get 20% off Swedish Christmas decorations
National
Dewani family: We only heard half the story
Business & Money
Business in Stockholm: 'efficiency is money'
Gallery
Property of the week: Östermalm
National
Meet the Swedes hosting festive feasts for 'lonely' guests
Gallery
TIMELINE: Swedish honeymoon killing murder trial
Gallery
People-watching: December 7th
Gallery
IN PICTURES: What's it like to fly planes in Sweden?
National
Submarine hunters 'robbed' of reward cash
National
The Local's Countdown to Christmas
National
'Dangerous' USB charger recalled in Sweden
Gallery
IN PICTURES: Sweden's King and Queen wrap up France tour
National
Analysis: Should Snowden get asylum in Sweden?
National
Swedish schoolboy in female saint role row
Gallery
IN PICTURES: Sweden's political crisis unfolds
Sponsored Article
SIS: the thinking behind globalised learning
Sponsored Article
Introducing... Family life in Stockholm
Latest news from The Local in Austria

More news from Austria at thelocal.at

Latest news from The Local in Switzerland

More news from Switzerland at thelocal.ch

Latest news from The Local in Germany

More news from Germany at thelocal.de

Latest news from The Local in Denmark

More news from Denmark at thelocal.dk

Latest news from The Local in Spain

More news from Spain at thelocal.es

Latest news from The Local in France

More news from France at thelocal.fr

Latest news from The Local in Italy

More news from Italy at thelocal.it

Latest news from The Local in Norway

More news from Norway at thelocal.no

818
jobs available
PSD Media
PSD Media is marketing company that offers innovative solutions for online retailers. We provide modern solutions that help increase traffic and raise conversion. Visit our site at:
psdmedia.se
The Local Spain is hiring!
The Local is seeking a new editor for our site in Spain to join our growing team of internationally-minded, driven, ambitious and clued-up journalists.
Details and how to apply
Counselling and Psychotherapy in English
Sometimes living in another culture can cause stress, confusion and feelings of sadness and loneliness. Talking to a professional psychotherapist/counsellor might help you. I am a UKCP Reg. psychotherapist. My practice is in Södermalm, Stockholm.
Contact me to discuss your options