4chan Sharty Hack And Janitor Email Leak • Hacker News Board

Re: 4chan Sharty Hack And Janitor Email Leak

#961

Post by [deleted] » Thu, Apr 17, 2025, 4:58 AM UTC

lurk2 wrote: post #857

NoMoreNicksLeft wrote: post #838

Earlier quoted context omitted.

>There are a lot of people who have nothing to contribute to a conversation, While true, the few people who do have something to contribute to a conversation simply can't do so on a highly-sanitized, heavily-moderated forum. The things they'd say would be too upsetting to a status quo, and the status quo will win. There is a real difference between something truly insightful and flat earth theory, but outsourcing tha…

> but outsourcing that decision to a reddit mouth-breather whose only qualification for moderating is that he showed up to r/whatever back in 2013 before anyone else is not the way to detect those differences. Spez once compared these people to a landed gentry; they are not unlike domain squatters. Notably, 4chan is basically identical in this regard. I’ve been banned from /lit/, /trv/, and /his/ for posts that the j…

[deleted]

Re: 4chan Sharty Hack And Janitor Email Leak

#962

Post by dspillett » Thu, Apr 17, 2025, 5:48 AM UTC

nwallin wrote: post #566

xattt wrote: post #550

Earlier quoted context omitted.

> could give the attacker shell access. How do these exploits work? Does it open an SSH port somewhere or does it show up as a browser-based terminal?

Usually the attacker, on their own computer, or some other server they have root on, will open a port and expose it to the internet and listen. The exploit payload will then make an outbound connection to that port. Once it's connected, the exploit will give the attacker's computer shell access. Search terms include 'reverse shell'. It takes the normal client/server architecture and turns it inside out. If you rememb…

> Usually the attacker, on their own computer, or some other server they have root on, will open a port and expose it to the internet and listen. The exploit payload will then make an outbound connection to that port. Once it's connected, the exploit will give the attacker's computer shell access. Search terms include 'reverse shell'.

Also "reverse tunnel" as a more general term, it can open any service not just those giving shell access. There have been similar hacks where the implanted tunnel have access to databases that weren't properly secured (anyone remember back when SQL Server defaulted to having a blank password for "sa" and many didn't change that thinking their firewall, which was really little more than a simple NAT setup, was sufficient protection?).

This is why there is the mantra "NAT is not a firewall": if something internal has no business making outgoing connections it should be blocked as well as incoming connections being difficult (also because there are various other NAT busting attacks too).

Re: 4chan Sharty Hack And Janitor Email Leak

#963

Post by lurk2 » Thu, Apr 17, 2025, 6:15 AM UTC

codexon wrote: post #953

lurk2 wrote: post #816

Earlier quoted context omitted.

> On top of that, they actively delete and ban posts that go against alt-right. Lurk moar.

I've been "lurking" on 4chan since it was 2 years old. I think that is more than enough time. Also not interested in conforming to group think on 4chan when the entire point of the place is no censorship.

> I've been "lurking" on 4chan since it was 2 years old.

This doesn’t establish credibility because you opened with dead memes from 8 years ago.

Re: 4chan Sharty Hack And Janitor Email Leak

#964

Post by busterarm » Thu, Apr 17, 2025, 6:45 AM UTC

jterrys wrote: post #687

Wobbles42 wrote: post #606

Earlier quoted context omitted.

/k/ has been the U/k/raine board since that invasion started and you risk a ban for deviating from that topic.

/k/ has hated Russian milsurp slavshit far longer than they cared about Ukraine. For years Russiaboos would shit up the board that almighty AK superior firearm or that Russian magical remote turret tank best tank in the world or that new gen fighter plane best stealth plane in the world and all 1/10 of stupid american military budget bullshit. turns out all that crap was just what everyone expected it to be: fabricat…

And /k/ forgets the lesson that Finland learned twice, the hard way.

Having more bodies to throw at your enemy is a valid, war-winning tactic. Really that's what the meme _should_ be. Russia will beat you with poorly trained soldiers and two generations old tech. Bet.

But I guess that also undermines everything that /k/ stands for...

Re: 4chan Sharty Hack And Janitor Email Leak

#965

Post by saagarjha » Thu, Apr 17, 2025, 8:19 AM UTC

kfarr wrote: post #530

profmonocle wrote: post #511

Earlier quoted context omitted.

When the first-gen iPhone was out there was a TIFF vulnerability so bad that you could jailbreak an iPhone just by visiting a specific web site. I remember going to Best Buy and seeing all of the display phones had been jailbroken. (It was easy to tell - this was before the App Store, so having extra app icons on the home screen wasn't normal.) This was a user-empowering application of the vulnerability. Obviously, a…

More recently there was an iOS 0-day GIF exploit requiring no user interaction: https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...

PDF, actually.

Re: 4chan Sharty Hack And Janitor Email Leak

#966

Post by brigandish » Thu, Apr 17, 2025, 11:46 AM UTC

Loocid wrote: post #694

brigandish wrote: post #659

Earlier quoted context omitted.

Honestly, that didn't help. There's a wide type of "controversy" there, and I don't see how 4chan are inherent to any of them, they could've been done via any forum. Or maybe I missed something, specificity would be good.

But they weren't done via any forum, they were done via 4chan. The community makes a forum.

It's a well known forum with a lot of users, to blame the "4chan community" would seem to be either a fallacy of composition or, ironically, of division, depending how the claim is laid out.

I'm also not sure how the site admins would stop them?

Re: 4chan Sharty Hack And Janitor Email Leak

#967

Post by sertraline » Thu, Apr 17, 2025, 12:13 PM UTC

geriatric-janny wrote: post #15

My official association with 4chan ended in 2010, but I still recognise a good third of those names and would wager the leak is legit.

he does it for free

Re: 4chan Sharty Hack And Janitor Email Leak

#968

Post by watwut » Thu, Apr 17, 2025, 12:17 PM UTC

anigbrowl wrote: post #490

bboygravity wrote: post #427

Earlier quoted context omitted.

So "not your personal army" == don't be a journalist?

No it was a stock response to proposals for board/site raids from people who had lost an argument or been banned and wanted to retaliate (but without offering comedy potential). Kinda like when corporate people discovered flash mobs and tried to use them for free marketing.

Note that it is possible only because harassment, abuse and raids happened so frequently, it was a well know fact.

Not exactly something that makes 4chan people into ethical or moral.

Re: 4chan Sharty Hack And Janitor Email Leak

#969

Post by fwip » Thu, Apr 17, 2025, 12:45 PM UTC

ogurechny wrote: post #942

fwip wrote: post #934

Earlier quoted context omitted.

Sure, everyone who wanted to join, could. That doesn't mean that the same kind of people want to join orstick around. Even sites like Twitter and Facebook have pretty different userbases, despite being pretty similar.

I guess I should set the reference point. I remember the time when normal internet users who visited imageboards simply couldn't figure out what was happening, and went back to normal sites (sometimes in disgust). There were no tourist guides written by journalists for the general public. Big forums had informational topics teaching users who “internet trolls” are (starting a short period when any argument which some…

I understand now, thank you for the explanation. :)

Re: 4chan Sharty Hack And Janitor Email Leak

#970

Post by brookst » Thu, Apr 17, 2025, 1:13 PM UTC

soVeryTired wrote: post #61

brookst wrote: post #50

Earlier quoted context omitted.

They certainly don’t get to claim any kind of moral high ground, but as a bystander I can feel empathy for someone hit by a drunk driver, even if the victim had driven drunk before in the past. Any increase in human suffering is unfortunate, regardless of one’s take on just desserts or karma or whatever.

I’d say it’s more like a high-profile NRA member getting shot. Unfortunate but it’s hard to miss the irony.

That’s fair, similar point. Reasonable people can both appreciate the irony and feel bad for the victim. Few people IRL have the sociopathic “they had it coming so I just want to watch them bleed out” attitude that we see so much of online.