Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Anonymous Hacks Epik

4chan.partyvan.epikfail.win

Post reply on HN
Print view View original

231–240 of 284 posts

Re: Anonymous Hacks Epik

#231

Post by mikegreenberg »

shiftpgdn wrote: post #226
ted0 wrote: post #77

Earlier quoted context omitted.

I'm not familiar with this particular case and I'm sorry that you had a bad experience but most of you what have said here is incorrect and frankly absurd. We're a US-based company and most of our executives and owners are US/UK citizens. After over a decade with the company, I've never seen a domain "drop" because of a "backend fault." There are certainly quirky edge cases with obscure registries where bugs can occu…

This is what I was told by an attorney. That in (the attorney) doing an asset check they revealed that NameCheap simply has a virtual office in a Regus office space with little to no US assets. Further, that even if we went through the struggle of getting a judgement against NameCheap's US entity that getting cash out might be impossible. If anyone reading this wants to verify you can look at Namecheap's site where t…

Take note. Calling someone's experience "incorrect" and "absurd" before you have all the details will never end well.

Re: Anonymous Hacks Epik

#232

Post by ryantgtg »

kadoban wrote: post #14
gfodor wrote: post #11

Eventually the cloud is going to burst and everyone’s data will be public. The motive will be similar to this one, where a huge blast radius of collateral damage is accepted in the name of harming bad people. Seeing people eagerly download this data that surely includes countless amounts of personal info of non-Nazis shows this clearly.

How many just regular folks would actually pick Epik? Why?

I’m a regular folk that currently uses epik (just as a domain host). We (actually a volunteer who donated our domain name to us) registered with them like 12 years ago.

I tried to move off of them a couple years ago, but I moved to lunarpages and they didn’t have enough dns options for my service. So then I had to move back to epik.

Um, can anyone recommend another domain host? EDIT: transfer initiated.

Re: Anonymous Hacks Epik

#233

Post by sleepybrett »

fybs wrote: post #198
NavinF wrote: post #97

Earlier quoted context omitted.

How big is it? I had similar issues downloading danbooru2020 (3.4TB), but rtorrent did the job with only ~5G RSS. Every other client used 4x the memory and never completed the download.

it's 180 GB. transmission works fine.

it's not the size of the data that's the problem, it's the size of the metadata and the sheer number of files in the data. Torrents suck for lots of tiny files, and we have that here in spades.

Re: Anonymous Hacks Epik

#234

Post by gremloni »

jungleanimal wrote: post #111

Anonymous strikes again, this time with a well known web registration company with a decade of data. This is a blatant example how poor security management leads to the hardship of thousands if not millions of regular people. Now their private details have a risk of being public and fully open to scrutiny. And its not just some simple data breach they allegedly stole domain purchases and transfers, account credential…

They should also be held accountable for supporting hate ideology.

Re: Anonymous Hacks Epik

#235

Post by gremloni »

gfodor wrote: post #11

Eventually the cloud is going to burst and everyone’s data will be public. The motive will be similar to this one, where a huge blast radius of collateral damage is accepted in the name of harming bad people. Seeing people eagerly download this data that surely includes countless amounts of personal info of non-Nazis shows this clearly.

It’s mostly nazis. If you’re not a nazi there should be enough pressure to stop you from associating yourself with epik.

Re: Anonymous Hacks Epik

#236

Post by iszomer »

vmception wrote: post #94
iszomer wrote: post #54

Earlier quoted context omitted.

Signing in this context would be debatable, in that it may call into question of how much one would (personally) be willing to risk ownership claims of a crypto asset or content. Remember when satellite.earth "pioneered" this idea for their platform? (not ragging on them but some of the content posted on there were insightful and unique)

I dont remember and I have no idea what you are alluding to You can literally generate any public key / address hash that conforms with a blockchain and sign it and anyone can verify that you therefore control it This has zero crypto assets involved and has no trail of assets so what are you talking about? If anyone sends funds to the address hash the owners can just tornado.cash it and withdraw it somewhere else wit…

> They should sign an ethereum address to reduce ambiguity

^I'm responding to this

_If_.

I am still openly questioning the nature of blockchain and open ledgers: trivial associations with transaction activity and address history can be had or via more complex analysis with clustering, modeling, etc (ie: Chainalysis). I used to think that a simple signature confirmation claiming "this is my email address" would be okay for solicited communications but what would happen if the channel used becomes adversarial?

Apologies but I'm failing at framing my own argument here as I'm confusing the intersection and implications of the current "NFT art" craze that's been happening. For example, some Tezos-based art projects are in reality minting your signature on the blockchain with an asset they host on an external source, eg: ipfs. You own the signature but do you really want to publicly "own" something controversial and perhaps illegal within your country's jurisdiction?

Re: Anonymous Hacks Epik

#237

Post by milkytron »

jungleanimal wrote: post #102

All these recent hacks. Cant any of these companies use proper security experts? I mean they have the funds, why skip this and avoid all the backlash that comes with this. Its expensive but not as much as letting everyone know you messed up hard

> Cant any of these companies use proper security experts?

I can't speak for all of them. But I worked at a very large company known on a global scale. They thought they had proper security experts, but the people that hired them didn't know security very well. When issues were brought up, instead of them asking "how do we resolve this?" they would ask "why would someone do that?" This raised so many red flags in my head the first time I heard this, I didn't even know how to respond.

I came to them with various issues, one of them could've had very serious consequences. I proposed step by step solutions that were simple and would've patched up issues behind the scenes and only impacted people that were violating security policies. They never seemed to care about protecting what they had. It was very sad.

I'll give two examples of the issues they faced:

1. They left doors unlocked and open to the building during working hours, anyone could enter and witness highly classified work on someone's machine, or use someone's machine if they had left their desk without locking it, which happened frequently.

2. Their shared document service, which contained many classified, and highly classified documents had an authz vulnerability which would allow any logged in user to view (and in some cases edit) any document in the company that was stored on their document storage service.

I think my conclusion is that a lot of companies don't even know what their issues are, don't know what experts they need (or if they need them at all), and don't care because nothing bad has happened yet.

Re: Anonymous Hacks Epik

#238

Post by gfodor »

gremloni wrote: post #235
gfodor wrote: post #11

Eventually the cloud is going to burst and everyone’s data will be public. The motive will be similar to this one, where a huge blast radius of collateral damage is accepted in the name of harming bad people. Seeing people eagerly download this data that surely includes countless amounts of personal info of non-Nazis shows this clearly.

It’s mostly nazis. If you’re not a nazi there should be enough pressure to stop you from associating yourself with epik.

Horrible argument. Textbook guilt-by-association, and in this case, the "association" is particularly weak.

Re: Anonymous Hacks Epik

#239

Post by gfodor »

qeternity wrote: post #141
southerntofu wrote: post #113

Earlier quoted context omitted.

I would assume given any hosting provider, that most content would not be deemed "violent" or "extremist". But of course, it depends on your interpretation. For example, some people consider radical servers from the anarchist scene to be hosting violent/extremist material, while i personally consider governments and big corporations to be pretty violent and extremist themselves in how they ruthlessly dominate the wor…

Epik is not just “any” hosting provider. In fact, there’s no reason to use them unless you fall into the “unhostable” category elsewhere. Their infra, peering and prices are way worse than pretty much everyone else.

> In fact, there’s no reason to use them unless you fall into the “unhostable” category elsewhere.

False. Even if your present day content is not currently censorable but you expect it will be censorable one day as cultural norms shift or speech authoritarians gain power, it is wise to put it somewhere that is censorship resistant, Epik or otherwise.

Re: Anonymous Hacks Epik

#240

Post by burkaman »

shiftpgdn wrote: post #226
ted0 wrote: post #77

Earlier quoted context omitted.

I'm not familiar with this particular case and I'm sorry that you had a bad experience but most of you what have said here is incorrect and frankly absurd. We're a US-based company and most of our executives and owners are US/UK citizens. After over a decade with the company, I've never seen a domain "drop" because of a "backend fault." There are certainly quirky edge cases with obscure registries where bugs can occu…

This is what I was told by an attorney. That in (the attorney) doing an asset check they revealed that NameCheap simply has a virtual office in a Regus office space with little to no US assets. Further, that even if we went through the struggle of getting a judgement against NameCheap's US entity that getting cash out might be impossible. If anyone reading this wants to verify you can look at Namecheap's site where t…

To add some circumstantial evidence, Namecheap currently has 52 job openings, of which 47 are in Ukraine, 1 each are in Portugal and India, and 3 are remote: https://www.namecheap.com/careers/openings/
Post reply on HN