Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

4chan Sharty Hack And Janitor Email Leak

knowyourmeme.com

Post reply on HN
Print view View original

591–600 of 1001 posts

Re: 4chan Sharty Hack And Janitor Email Leak

#591

Post by nailer »

robotnikman wrote: post #397

I did some digging and the hacker posted which exploit he used. Apparently some boards allowed uploading PDF files, but the site never checked if the PDF file was an actual PDF file. Once a PDF file was uploaded it was passed to a version of Ghostscript from 2012 which would generate a thumbnail. So the attacker found an exploit where uploading a PDF with the right PostScript commands could give the attacker shell ac…

> Apparently some boards allowed uploading PDF files

Some boards used to allow PDF files to upload too.

Re: 4chan Sharty Hack And Janitor Email Leak

#592

Post by [deleted] »

skilbjo wrote: post #561
robotnikman wrote: post #397

I did some digging and the hacker posted which exploit he used. Apparently some boards allowed uploading PDF files, but the site never checked if the PDF file was an actual PDF file. Once a PDF file was uploaded it was passed to a version of Ghostscript from 2012 which would generate a thumbnail. So the attacker found an exploit where uploading a PDF with the right PostScript commands could give the attacker shell ac…

pretty interesting discovery if that was the hack. do you know what the legal implications are for this? if the company that owns 4chan finds the identity of the attacker, could they sue him in civil court? or do they send whatever logs they have to the FBI and the FBI would initiate a criminal prosecution? also what is the criminal act here? is it accessing their systems, or is it posting the data that they found "t…

[deleted]

Re: 4chan Sharty Hack And Janitor Email Leak

#593

Post by PixelForg »

shipscode wrote: post #126

The take on 4chan on here is super intriguing. I always felt that the current social media/doomscroll/memesharing landscape which has become so common worldwide is indiscernable and in some ways worse than 4chan. It feels like 4chan left it's homepage and went worldwide sometime in the early 2010s when iPhone-style phone use became more commonplace. I remember that 4chan users had more honor than users on the interne…

My main problem with 4chan is how they talk, like the language they use. They really don't care about anyone's feelings and show a lack of empathy. Unfortunately this has been spreading to other social media as well.

Imagine how good a place it could have been if people over there talked like people on HN.

Re: 4chan Sharty Hack And Janitor Email Leak

#594

Post by Shekelphile »

SV_BubbleTime wrote: post #581
ryandrake wrote: post #556

Earlier quoted context omitted.

> Just with a bunch of extra features hastily grafted and grown organically, but never dealing with the insane amount of technical debt. This describes probably 95%+ of the entire software world, from enterprise, to SaaS to IoT to mobile to desktop to embedded... Everything seems to be hastily thrown together features that barely work and piles of debt that will never get fixed. It's a wonder anything actually even w…

>If cars (the non-software parts) were made like this, there would be millions of them breaking down by the side of the road daily. I’m an automotive CE… we’re getting there. Cars used to be DONE at lots… now, there are weeks to finish code before the customer lays hands on, and that time is factored in now. Worse with OTA updates. Now, so long as it’s fixed if enough customers complain that’s good enough. Cars used…

> Then some morons connected them to the internet for no good reasons.

Elon Musk and Franz von Holzhausen, to be precise.

Re: 4chan Sharty Hack And Janitor Email Leak

#595

Post by _DeadFred_ »

ryandrake wrote: post #556
loves_mangoes wrote: post #417

Earlier quoted context omitted.

That checks out. Years ago I noticed a vulnerability through the photography board. You'd upload your pictures, and 4chan would display all the EXIF info next to the post. 4chan's PHP code would offload that task to a well-know, but old and not very actively maintained EXIF library. Of course the thing with EXIF is that each camera vendor has their own proprietary extensions that need to be supported to make users ha…

> Just with a bunch of extra features hastily grafted and grown organically, but never dealing with the insane amount of technical debt. This describes probably 95%+ of the entire software world, from enterprise, to SaaS to IoT to mobile to desktop to embedded... Everything seems to be hastily thrown together features that barely work and piles of debt that will never get fixed. It's a wonder anything actually even w…

Forget cars, imagine if we treated government systems that millions of people's entire medical care/retirement/lives/national security/secrets/proof of existence depend upon this way? Luckily we treat those systems a little more seriously even though it costs us a little bit more/doesn't allow us to move fast and break things in that space.

Re: 4chan Sharty Hack And Janitor Email Leak

#597

Post by HideousKojima »

paradox460 wrote: post #488
potato3732842 wrote: post #424

Earlier quoted context omitted.

>users don't actually hold these opinions, they just will represent whatever is the edgiest opinion at any given time. I left in 2012ish, never really did /pol/, if it even existed then, but that 100% squares with my experience of the site. edit: po vs pol

/po/ is paper craft and origami

Confusion between the two boards has been immortalized in this meme: https://i.redd.it/l8shi3nsfd531.png

Re: 4chan Sharty Hack And Janitor Email Leak

#598

Post by Wobbles42 »

AnnaRiot wrote: post #516
wickedsight wrote: post #49

Earlier quoted context omitted.

That's why I wrote 'the original'. It's very possible Watkins took control after Q moved from 4Chan to 8Chan from what I've read. I'm far from fully up-to-date on this saga though.

I am pretty sure Q was originally started by the guys behind Cicada3301 before Ron took over

This is a genuinely interesting assertion. Is there any evidence of this?

Re: 4chan Sharty Hack And Janitor Email Leak

#599

Post by HideousKojima »

KennyBlanken wrote: post #542
johnnyjeans wrote: post #282

Earlier quoted context omitted.

> it feels like once that kind of stuff isn't punished, it starts to snowball a change in the attitudes of the site as a whole. Considering the site has been around for over 20 years and people still call out and flame racism, I think this is an uncharitable and unfounded cynicism. I'm not sure declarative claims of 3rd order effects in a system so chaotic are capable of being accurate.

Multiple white supremacist mass shooters have been 4chan users. 4chan cheered on the Buffalo shooter who was live updating a 4chan thread during his murder spree: https://www.thetrace.org/newsletter/4chan-moderation-buffalo... The christchurch shooter was a 4chan regular https://theconversation.com/christchurch-terrorist-discussed... The whole "boogaloo" white nationalist/supremacist movement started on 4chan: https:…

And the Zizian murder cult sprang out of the bay area rationalist community and trans rights advocacy, what's your point?
Post reply on HN