And now Parler is offline. But there's more.. their database/content was leaked by hackers last night. Twilio is a company that does SMS/telephony/second factor authentication type of services. Parler was using them for their 'Forgot your password, click here to recover' feature. Once Twilio disabled Parler's service last night, that reset password feature was letting anyone reset any account's password because it was badly engineered. A hacker was able to id an account that was set as an Administrator, reset it's password and gain access, then she created additional admins. With admin privileges they were able to get the API keys, the API is how the different apps (Android app, iPhone app, website) access the database/content. And the hacker spread the word to get help backing up everything before Amazon took them offline, 77 TB of content.
But there's even more.. Parler never really deleted any content, any posts or media. Once a user deleted something it was only marked as 'deleted' in the database, hidden from the user but kept in the database/file system. After the Jan 6th event, realizing the major fuck up that had happened, and Trump throwing them under the bus, tons of people started deleting their posts, including people that posted from the Capitol. Users thought they had deleted evidence but now it's in the hands of the archive.org team and, pretty soon or already, the FBI.
But there's one last goodie surprise from Parler, they didn't scrub the media files uploaded. Scrubbing is deleting the EXIF metadata that pictures and videos save that categorizes such things as the time and date a photo/video was taken, geolocation data of where a photo/video was taken, the device id the photo/video was taken with. I'm sure not many were using burners, using their Verizon/ATT subsidized phones. The general practice of most websites is to scrub the metadata because precisely it could be a privacy fuck up but in Parler's unwisdom they didn't.