Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

4chan Sharty Hack And Janitor Email Leak

knowyourmeme.com

Post reply on HN
Print view View original

101–110 of 1001 posts

Re: 4chan Sharty Hack And Janitor Email Leak

#101

Post by doublerabbit »

Macha wrote: post #57
pelagicAustral wrote: post #25

Earlier quoted context omitted.

This stuff is still packaged with cPanel, which is probably the most common way to manage web servers on the internet.

I wonder how long it's been since that was true. I think that era passed when most small businesses and individuals moved from self hosting to SaaS.

I serve a cPanel hosting, some people just want something up and running now which cPanel provides.

With Softaculous for automatic installation of scripts it's still widely popular for Wordpress installations. Web hosting is however a very dead market to startup in.

Re: 4chan Sharty Hack And Janitor Email Leak

#102

Post by wegfawefgawefg »

thrance wrote: post #10
CamelCaseName wrote: post #2

If you lamented the disappearance of the "old internet", well, this was a part of it, and now it may be gone too. The title is also a fair bit understated. They're leaking the moderators home addresses and work contact info (for admins, who are(were?) paid moderators)

[flagged]

I have leftist friends who grew up looking at memes on 4chan. As adults they remember it fondly.

Re: 4chan Sharty Hack And Janitor Email Leak

#103

Post by lossolo »

cbg0 wrote: post #73
TonyTrapp wrote: post #66

Earlier quoted context omitted.

Can you please elaborate how it is "asking for it" if we assume the basic auth password is reasonably complex and kept as safe as, say, the SSH login credentials of the same server?

You shouldn't be logging in to a server via SSH using a user+password combo, instead use a public/private key combo which is considerably more complex and can't effectively be bruteforced like a user+password. Most web servers don't really come with any built in defense against brute force attempts vs Basic Auth gates, so unless you've set something up to protect it, someone with enough time will eventually get in.

> someone with enough time will eventually get in

That's only correct if the password is weak. With enough entropy, it's practically impossible to brute force.

Re: 4chan Sharty Hack And Janitor Email Leak

#104

Post by andruby »

lossolo wrote: post #81
cbg0 wrote: post #8

Hosting a copy of phpMyAdmin behind basic HTTP authentication in 2025 really is asking for it.

Sure, if you slap Basic Auth with "admin:admin" on phpMyAdmin in 2025, you're asking for it. But a Basic Auth password with 256 bits of entropy is just as resistant to brute force as AES-256 (assuming the implementation is sound and TLS is used). It's not the protocol that's insecure, it's usually how it's deployed.

Only if it's only accessible via proper TLS (otherwise it's easy to read the user/pass with MITM as basic auth doesn't encrypt the user/pass).

If there is no throttling/rate-limiting/banning then this setup allows for a lot of attempts, wether brute-force or dictionary.

Re: 4chan Sharty Hack And Janitor Email Leak

#107

Post by tonfreed »

tanepiper wrote: post #47
vlovich123 wrote: post #27

Earlier quoted context omitted.

4chan was founded in 2003. I think reasonable people probably disagree on what constitutes the “early” internet and this is where the argument is. Google had been around for 5 years by this point and I (and I suspect many others) remained blissfully unaware of 4chan for a long time after 2003.

4chan: Because even Something Awful had some kind of flawed moral compass

So did 4chan, god help you if you abused a cat

Re: 4chan Sharty Hack And Janitor Email Leak

#108

Post by arkh »

vlovich123 wrote: post #27
idiotsecant wrote: post #13

Earlier quoted context omitted.

Like it or not, 4chan was a major hub of Internet culture. Especially early on some of the best stuff on the internet happened on 4chan (and a good chunk of the worst, of course)

4chan was founded in 2003. I think reasonable people probably disagree on what constitutes the “early” internet and this is where the argument is. Google had been around for 5 years by this point and I (and I suspect many others) remained blissfully unaware of 4chan for a long time after 2003.

Yup, ytmnd predates it a couple year.

Re: 4chan Sharty Hack And Janitor Email Leak

#109

Post by MagicMoonlight »

mattlondon wrote: post #77
CamelCaseName wrote: post #2

If you lamented the disappearance of the "old internet", well, this was a part of it, and now it may be gone too. The title is also a fair bit understated. They're leaking the moderators home addresses and work contact info (for admins, who are(were?) paid moderators)

I'd hardly call it the "old internet". It is very niche, and has not been around that long really - like what 2003 or something? Nothing compared to e.g. Geocities which was early-mid 90s IIRC which I'd argue had more relevance to people than 4chan.

22 years is old. Nobody knows what geocities is, it has no relevance. It’s like talking about brands of telegraph wire.

Re: 4chan Sharty Hack And Janitor Email Leak

#110

Post by properpopper »

jmyeet wrote: post #42

4chan will be studied for years for its role in alt-right radicalization as well as being a baroemeter for young male discontent. For example, QAnon started on 4chan (I believe as a joke?) [1]. Nowadays a lot of 4chan users and traffic have since migrated to Twitter for pretty obvious reasons. Pseudo-intellectual racism has a lot of roots in 4chan (eg the popularity of Julius Evola [2]) that's deeply tied to "trad" c…

For users who aren't familiar with 4chan - this post describes only one board - /pol/, where you can find hateful posts about every race and religion. 4chan have 30+ boards in total
Post reply on HN