←back to thread

668 points wildmusings | 1 comments | | HN request time: 0s | source
Show context
JorgeGT ◴[] No.13027099[source]
And without an "edited" mark, which means that any comment of any user can be covertly modified by an admin. Very concerning since Reddit comments have provoked even Congress hearings: http://thehill.com/policy/national-security/296680-house-pan...
replies(7): >>13027119 #>>13027125 #>>13027136 #>>13027240 #>>13027734 #>>13028391 #>>13033721 #
dhruval ◴[] No.13027240[source]
He changed a 'F U CEO' (upvoted by 1.6k users) comment to 'F U unpaid reddit moderator', without any indication that the comment was edited.

Very juvenile and unprofessional way of dealing with the situation, really erodes trust in the platform (simply deleting the comment would have been a better response).

Would maybe expect this from the founder of a young fledgling startup, but the 33 year old CEO of a company like Reddit ought to know better.

replies(7): >>13027341 #>>13027345 #>>13027894 #>>13028550 #>>13028557 #>>13031901 #>>13032509 #
ozgune ◴[] No.13028557[source]
I met Steve several years back while going through YC. He's a much calmer and nicer person than most founders I've met, myself included.

If I read this Reddit thread without knowing him, I would have deemed him unprofessional and maybe even upvoted some of the comments.

When I read the thread knowing who he is, I'm thinking "I can't imagine how stressful it must be to run Reddit. He made one mistake in a bad day, apologized for it, and now everyone's talking about it. Steve's way nicer and more professional than I am, so I would probably have messed up big time in his shoes."

replies(5): >>13028602 #>>13028796 #>>13030391 #>>13030533 #>>13031284 #
icelancer ◴[] No.13028602[source]
This is a mistake that has profound implications. Not just your average mistake like "I broke the build and didn't tell anyone" nonsense.
replies(1): >>13028820 #
yarou ◴[] No.13028820[source]
You're being awfully charitable. It's on the order of magnitude of royal fuck-up. How can any user expect to be safe on Reddit anymore?

This is the sort of situation that irrevocably damages trust. What's the guarantee that this won't happen again?

What bothers me more is that this sort of functionality exists in the first place. All it would take is one compromised admin account, and boom, you can rewrite somebody's entire comment history without it being logged anywhere.

replies(2): >>13029014 #>>13033681 #
thecatspaw ◴[] No.13029014{3}[source]
the functionality is probably a UPDATE comments where id=x set content="newcontent"
replies(2): >>13029097 #>>13030030 #
leereeves ◴[] No.13030030{4}[source]
I seriously doubt he individually looked up comment ids and updated them with database commands.

And if he did this for "about an hour" as he said, he clearly didn't use ... WHERE content='fuck u/spez'

It seems likely there's code in the front end that gives him the ability to edit user's comments in his browser. That should not exist.

replies(2): >>13030361 #>>13033391 #
Natanael_L ◴[] No.13030361{5}[source]
He probably just scripted it. There doesn't need to be any default functionality for it, if you know how the database works.
replies(1): >>13031230 #
ryanlol ◴[] No.13031230{6}[source]
Do you honestly believe that they didn't have existing tools for this?

Instead, the CEO logged into the production DB and manually edited individual comments there?

Give them some credit, surely even Reddit staff aren't that terrible.

replies(2): >>13031898 #>>13032539 #
1. vivekd ◴[] No.13032539{7}[source]
I don't know how things would work with a larger database such as reddit as I never worked on one. But I imagine if he had access to the database, he can just go in and change the comment on the database without writing any special program for it. I know reddit uses Postgre and that has a function that lets you go in and change field values.

Really, when you think about it, changing user comments would probably be a really easy undertaking for any forum administrator with access to the database.