Live data from Hacker News

Researchers Say They Found IP Addresses for ‘Anonymous’ Econ Forum Posts

insidehighered.com

21–30 of 80 posts

Re: Researchers Say They Found IP Addresses for ‘Anonymous’ Econ Forum Posts

#21
post #20

Since when trying to dox people is called academic "research"?

Since when is it ok to create a forum that is not anonymous and then advertise it as an anonymous forum that is safe for whistleblowers?

I don't think the aim of this "research" is helping to fix the security defects of EJMR.

Re: Researchers Say They Found IP Addresses for ‘Anonymous’ Econ Forum Posts

#22

So what's next? Get these people fired from their jobs for having unapproved ideas? Also, who decides what is or is not toxic?

You make it sound like it's a matter of academic freedom. It is not.

Do you or do you not think that it should be acceptable to use language like "d4mn j3ws" in an academic forum?

Re: Researchers Say They Found IP Addresses for ‘Anonymous’ Econ Forum Posts

#23
post #8

Earlier quoted context omitted.

Username = hex(sha1(topic_id + ip))[10-14] Notably, no salt used

the topic_id could be considered a salt, no?

The topic_id would be shared for everyone who posted on it. For each topic_id, it is then a matter of hashing 4 billion IPs to match each post to the topic. A different salt applied to each user so that would require the 4 billion hashes for each user post to a topic (topic_id+IP+salt).

Re: Researchers Say They Found IP Addresses for ‘Anonymous’ Econ Forum Posts

#24
post #20

Earlier quoted context omitted.

Since when is it ok to create a forum that is not anonymous and then advertise it as an anonymous forum that is safe for whistleblowers?

I don't think the aim of this "research" is helping to fix the security defects of EJMR.

The aim is muckraking. The authors are shining light on widespread moral corruption among elites in the economics profession.

Re: Researchers Say They Found IP Addresses for ‘Anonymous’ Econ Forum Posts

#25
post #20

Earlier quoted context omitted.

Since when is it ok to create a forum that is not anonymous and then advertise it as an anonymous forum that is safe for whistleblowers?

I don't think the aim of this "research" is helping to fix the security defects of EJMR.

no, the research was something-something-humanities-economics-whatever.

In doing the research they - random academics, not some nation state, or criminal organisation - were able to find that the posts were not anonymous, and extract the location of posters so it was not hard. They clearly informed the forum owner, because the forum owner fixed the issue (though notably did not tell anyone that their posts were not anonymous).

Now new users of ejmr can hopefully rely on actual anonymity, and existing users can know that in principle their posts could be partially de-anonymized (the IP is the external one, most organizations being described have you behind some kind of NAT so full identification is at best questionable imo).

Re: Researchers Say They Found IP Addresses for ‘Anonymous’ Econ Forum Posts

#26

So what's next? Get these people fired from their jobs for having unapproved ideas? Also, who decides what is or is not toxic?

You make it sound like it's a matter of academic freedom. It is not. Do you or do you not think that it should be acceptable to use language like "d4mn j3ws" in an academic forum?

> Do you or do you not think that it should be acceptable to use language like "d4mn j3ws" in an academic forum?

Of course it's not acceptable. It's not acceptable for any academic to disagree with me period. All those posters need to be rooted out, fired, and blacklisted.

Re: Researchers Say They Found IP Addresses for ‘Anonymous’ Econ Forum Posts

#27
post #8
post #4

The paper: https://www.insidehighered.com/sites/default/files/2023-07/e...

Username = hex(sha1(topic_id + ip))[10-14] Notably, no salt used

But the question is: how many collisions with IPs there are by showing only 4 digits of the hash

I think there's where the anonymity claims might have come from

Re: Researchers Say They Found IP Addresses for ‘Anonymous’ Econ Forum Posts

#28

Earlier quoted context omitted.

I don't think the aim of this "research" is helping to fix the security defects of EJMR.

The aim is muckraking. The authors are shining light on widespread moral corruption among elites in the economics profession.

[deleted]

Re: Researchers Say They Found IP Addresses for ‘Anonymous’ Econ Forum Posts

#30

So what's next? Get these people fired from their jobs for having unapproved ideas? Also, who decides what is or is not toxic?

You make it sound like it's a matter of academic freedom. It is not. Do you or do you not think that it should be acceptable to use language like "d4mn j3ws" in an academic forum?

I remember a short time when posting "hacked materials" was a thing people were up in arms about, but that ship seems to have sailed.
Post reply on HN