Live data from Hacker News

4chan Sharty Hack And Janitor Email Leak

knowyourmeme.com

231–240 of 1001 posts

Re: 4chan Sharty Hack And Janitor Email Leak

#231
post #55

Earlier quoted context omitted.

Damn, the culture they have bred and actively maintained is now going to be turned against them? It might end up making them more sympathetic people on the long term. They might realise the seriousness of what they have done to others.

You don't like to lump people into groups by race/country of origin but find no cognitive dissonance in lumping people together by platform choice.

One of those is something people are born into without choice. The other is chosen because of their tastes.

Re: 4chan Sharty Hack And Janitor Email Leak

#232
post #55

Earlier quoted context omitted.

Damn, the culture they have bred and actively maintained is now going to be turned against them? It might end up making them more sympathetic people on the long term. They might realise the seriousness of what they have done to others.

You don't like to lump people into groups by race/country of origin but find no cognitive dissonance in lumping people together by platform choice.

Yes.

People can leave the platform. They can't leave their race.

Re: 4chan Sharty Hack And Janitor Email Leak

#233

Earlier quoted context omitted.

> bodybuilding.com Obligatory post about the dumbest argument to ever be had online [0]. It’s so good, the Wikipedia entry [1] has a section devoted to it. [0]: https://web.archive.org/web/20240123134202/https://forum.bod... [1]: https://en.wikipedia.org/wiki/Bodybuilding.com

My personal favorite rendition of this: https://www.youtube.com/watch?v=JqylqmDl0Mw (Mega64 - Flame War Theater - "Full Body Workout Every Other Day?")

I had to watch that at 2x to keep the thoughts-per-second above catatonic.

In the same vein, for those who haven't seen it, the classic "Is soup a drink?" debate: https://m.youtube.com/watch?v=IDNuz_VFJtU

Somewhere, there are ancient Greek rhetoric teachers spinning in their graves.

Re: 4chan Sharty Hack And Janitor Email Leak

#234
Rip 4chan. For all the bad it did, 4chan also made at least one real contribution to science [1], specifically to the study of superpermutations (aka the Haruhi problem), which was cited by genuine academics. We should try to remember it by that.

[1] https://www.theverge.com/2018/10/24/18019464/4chan-anon-anim...

Re: 4chan Sharty Hack And Janitor Email Leak

#235

You know, I always found Twitter (even pre-X) to be worse than 4chan ever was. Not in obvious terms, but in how it fucked with your head.

Browsing different forums helps you recognize how discourse is shaped by different feedback loops, how people troll on 4chan or conform on reddit, rather then assuming that twitter is real life.

Re: 4chan Sharty Hack And Janitor Email Leak

#236

Earlier quoted context omitted.

I'd hardly call it the "old internet". It is very niche, and has not been around that long really - like what 2003 or something? Nothing compared to e.g. Geocities which was early-mid 90s IIRC which I'd argue had more relevance to people than 4chan.

22 years is old. Nobody knows what geocities is, it has no relevance. It’s like talking about brands of telegraph wire.

Geocities was the place to create and visit homepages for a large percentage of people using the internet in the 90s. You can see its influence in games such as Hypnospace Outlaw and modern hosts like Neocities.

Re: 4chan Sharty Hack And Janitor Email Leak

#237
post #125
post #73

Earlier quoted context omitted.

You shouldn't be logging in to a server via SSH using a user+password combo, instead use a public/private key combo which is considerably more complex and can't effectively be bruteforced like a user+password. Most web servers don't really come with any built in defense against brute force attempts vs Basic Auth gates, so unless you've set something up to protect it, someone with enough time will eventually get in.

> " can't effectively be bruteforced like a user+password. " Only when the password is weak enough to bruteforce swiftly. It will take literally thousands of years to bruteforce strong passwords.

But you only need one weak password to get in

Re: 4chan Sharty Hack And Janitor Email Leak

#238

I feel too many people conflate /pol/ with the whole website. I enjoyed browsing through sfw boards like /tg/ (tabletop media), /ck/ (cooking) and /fit/ (fitness). I had long discussions about the SW sequels on /tv/ back in 2015-19. The readership was surprisingly diverse and the anonymity lead users to provide more focused replies. With bodybuilding.com gone, the blue boards felt like the last bastion of the old int…

I always thought it's /b/ that people conflate with the whole website… (for the purpose of declaring it a cesspool) … but then again I never looked at /pol/, maybe it's even worse than /b/?

it is, and unfortunately from 2016 onwards it kind of outgrew the rest of the site like a tumorous growth until the whole site became markedly more neonazi and less goofy. something to do with donald trump i suspected

Re: 4chan Sharty Hack And Janitor Email Leak

#239

Earlier quoted context omitted.

I haven’t used it for many years now, but phpMyAdmin was long a source of compromises. Lots of security holes.

That's my point - if you have a reasonably secure password (let's say 50-100 characters, fully random), it's extremely unlikely that anyone is ever going to even get beyond the basic auth prompt.

Until there's a bug that lets you bypass it.

Re: 4chan Sharty Hack And Janitor Email Leak

#240
post #73

Earlier quoted context omitted.

You shouldn't be logging in to a server via SSH using a user+password combo, instead use a public/private key combo which is considerably more complex and can't effectively be bruteforced like a user+password. Most web servers don't really come with any built in defense against brute force attempts vs Basic Auth gates, so unless you've set something up to protect it, someone with enough time will eventually get in.

Genuine question that I haven't found a good solution to yet, if I want to just go to any old computer and ssh into my server, do I have to carry around a USB stick with the ssh key on or something? because I sure as hell wont be able to just remember it

In that case I'd normally recommend a bastion host with SSH MFA and fail2ban. It'd be publicly available and have SSH keys for other machines. Or you could look at setting up a VPN solution with MFA, but never have a password only admin login exposed to the public Internet.
Post reply on HN