On: A Twitter app bug was used to match 17M phone numb...

[krick]

You answered your own question yourself it that thread it seems:

> API hole explanation is excluded as people with 100% private accs got police visits.

Still, thanks for sharing, that's hell of a story. I don't speak Chinese and have no idea what's ShadowSocksR and why this Doubi guy was so hated by Chinese govt for that. Would appreciate more details.

[baybal2 → krick]

As it is speculated now, this API leak also leaked private accounts as "privacy" check was possibly done client side.

Doubi was one of main developers of Shadowsocks, a traffic obfuscation tool to jump the Chinese firewall.

As said, the guy openly defied Chinese 3 letter services for years, and even trolled a number of agents whom he managed deanonymise himself.