Dealing with the compromise

[IMayUseSpaces]

People are being pussies. My info was leaked and a troons mom actually started screaming at my building before he threatened to slit my throat or sue me over what I post here. Let's be real for a second - nothing is going to happen to anyone over an email and an IP address.

Personally I am happy the info was taken down, I don't think Yaniv is smart enough to find it if it isn't posted here but honestly I'm not losing sleep over this.

You know, you're actually the first person I looked for in the leak release. You're definitely someone with a tangible risk of bodily harm, so I was genuinely concerned of what information of yours got put out there.

It would've been completely understandable if you bowed out after this, but I think it speaks volumes of your character to weather the storm regardless. I suppose I'm one of those moralfags that considers Kiwi Farms a vital resource in the dissent against both wrongthink repression and the cabal of liars, cheats, grifters, bullies, and other degenerates that creep along gleefully in the wake of the consequences that inevitably follows such authoritarianism.

The only way to truly confront people like Yaniv and others like him is to shine a spotlight on him as one does a cockroach and give them no respite so the public at large can see them for how they truly are. So, thanks for sticking around!

I'll get off the soapbox now.

 

[I should be working]

The people getting so upset that the leak was hosted temporarily, really?

Honestly a silly thing to get worked up over, if it ain't on Kiwifarms it'll be available somewhere else.
I litterally just popped onto Twitter and seached "Kiwi Farms IP" and got it within seconds.
Quite disapointed though that I had to go to Twitter for something I should be able to find on here.

Sadly didn't find my dox in the doc though. Will just have to be more active going forward if I want to make it into the next leak.

 

[heathercho]

Should Aussies be concerned a la UK/NZ folks? My IP pings literally in another city to where I am, and I'm only in this country about 2 months of the year anyway. Total burner email too. So not stressed about mad Troons and their delicious free pizzas.

But like post-Christchurch I know some ISPs started blocking the Farms and it's all a clusterfuck mess. Not that I post anything that could get the authorities involved, but is it a better safe than sorry situation for Aussies too @Null? I only come from an overactive imagination and a 'who could subpoena me for what' perspective.

Is it a nothing burger and I'm just showing my Normie colours? Or is account deletion/name change/fresh start the way for Aussies too?

We may have a CWC PM but we aren't that fucked yet. There aren't really any laws that are in place like the UK here. Yet. There probably will be one day but not today.

I don't have NBN yet, but I'm pretty sure it'd be like 90% of regular broadband's dynamic IP.

Edit : If you're concerned about IP which, you shouldn't be, but if you are - NBN only offers static IP for business customers. Everyone else gets a dynamic one. Use a VPN though, you'll have more access to the internet than using your Aussie IP.

 

[Trig.Point]

A question, where in the leaked files can you view the IP address?. I can't see any IP addresses listed in the Text files. I use a VPN but I am curious,

 

[repentance]

Should Aussies be concerned a la UK/NZ folks? My IP pings literally in another city to where I am, and I'm only in this country about 2 months of the year anyway. Total burner email too. So not stressed about mad Troons and their delicious free pizzas.

I use a VPN which shows me as being in a different country but even if I didn't my IP shows me as being in SA or NT (I'm not near either).

While there's a chance that in the future the government will try to force ISPs to hand over data about users who have tried to access blocked sites, we're not at that point yet.

As mentioned above, most of us have dynamic IPs unless we are paying for a static one.

A question, where in the leaked files can you view the IP address?. I can't see any IP addresses listed in the Text files. I use a VPN but I am curious,

In the CSV file.

It probably wouldn't hurt for people using VPNs to make sure their DNS isn't being leaked.

 

[Aquinas]

Let this video accurately represent how i feel about those lost

 

[DumbDude42]

I don’t get why anyone would link their actual name to this website- it was made VERY clear when you signed up this kind of stuff could happen, so you gotta be careful about it. Used a email I completely forgot about and only used for this site, just changed it. Nothing gained, nothing lost.

law enforcement can force an ISP to give up the identity of the person behind an IP, and they can also force a VPN provider to give up a customers identity. luckily in america the only internet related crimes the cops really care about are darknet drug operations and child porn related things.

but in new zealand the cops can do this to anybody who posted edgy opinions about christchurch, and they already tried to get user data from null once on the past. if you are in new zealand or another commonwealth country and had your data leaked, you might actually get in trouble even if you used a burner email.

 

[Null]

law enforcement can force an ISP to give up the identity of the person behind an IP, and they can also force a VPN provider to give up a customers identity. luckily in america the only internet related crimes the cops really care about are darknet drug operations and child porn related things.

but in new zealand the cops can do this to anybody who posted edgy opinions about christchurch, and they already tried to get user data from null once on the past. if you are in new zealand or another commonwealth country and had your data leaked, you might actually get in trouble even if you used a burner email.

Logless VPN providers can't provide that information and only the most chickenshit faggot providers would care about what New Zealand wants.

 

[DumbDude42]

Logless VPN providers can't provide that information and only the most chickenshit faggot providers would care about what New Zealand wants.

not all VPN providers are logless though, even among the ones that claim to be

it is also possible that other nations and their law enforcement agencies could act on the behalf of NZ.
new zealand police calling will probably not impress a VPN provider, you are right about that. but if it's scotland yard or GCHQ knocking on their door, they will probably take it much more seriously.

 

[AmpleApricots]

I have the feeling ISPs/email providers will fold and give information to law enforcement, even in other countries, even if the request is not legally valid/enforceable. Law enforcement agencies do this a lot. I had an email at posteo (it's in the leak) and they'd provide regular statistics how often they get legally invalid requests from law enforcement around the world to share user information with them. Turns out, almost all requests they get are in some way invalid/not enforceable/way out of line. They probably do this because they get away with it all the time. Also somebody like Google doesn't care about protecting their users, especially when it comes at the cost of being noticed unfavorably by law enforcement of countries they do business in.

Even from the country posteo is hosted in (Germany) they got (and fought successfully) such requests. I really admired them in that way, but don't have an account there anymore since I got the impression they're painting a way too big a target on their back and I also don't consider Germany a safe country for such a host anymore, especially with recent changes in laws.

Also thanks null for making the onion address work, really appreciate it.

 

[Prj4MW8iPT3vmFM2rzDc]

You know you can generate a secure, easy to say and type name without it looking that stupid. I know my name is unoriginal and mundane but that's the point; it's not tied to anything else, that's what matters. If you're too lazy to think of one lastpass can do it for you.

Examples: pronalia, cionthea,buckerse, etc, etc


Mhmm. That information leak won't affect the vast majority of users here, as almost everyone here understands the security best practices. I assume some have slipped through the cracks though. Even so, probably doesn't matter.

Counter Point:

Just because you can't pronounce my name and don't find it easy to say doesn't mean I can't pronounce my name and don't find it easy to say.

Also, @Null please fix the password reset. It keeps freezing the browser after about 40+ characters. I think its because of the complexity check. It got super annoying how long it took after 200+ characters.

 

[Null]

why the fuck did you make your password 200+ characters, that's a XenForo bug not something I did.

 

[Bishtini]

Also, @Null please fix the password reset. It keeps freezing the browser after about 40+ characters. I think its because of the complexity check. It got super annoying how long it took after 200+ characters.

absolutely fucking no one:

this guy: 200+ character password, we die like men

 

[Prj4MW8iPT3vmFM2rzDc]

why the fuck did you make your password 200+ characters, that's a XenForo bug not something I did.

Because I can.

Also just make it not check after like 30 or 40 characters any more because whats the point i checking password strength after that...

 

[Null]

Obviously not

 

[Teiluna]

Hey can you share some of those 200+ characters with us poor souls, I need that to feed my kids

 

[Spatula]

Did you use all possible alphabets to create that password?

 

[IMayUseSpaces]

I've taken my time making this post, but quite frankly I am very dissapointed in Null. I've already disliked the direction the site is going in, and I've expressed my concerns over it, but this is not only unprofessional, but incredibly disrespectful to the community at large. Hosting this file does literally nothing but create an aura of unease over the site, forcing people to not trust each other and discouraging forming actual relationships. I've had many wonderful talks with some of the people on here, but lately there has been a huge influx of users that blatantly disrespect the authority of the site and each other. I really don't want this forum to turn into 4chan 2.0.

The logical course of action would be alerting users about the leaks and mitigating the damages relating to it. The way this post is written shifts the blame entirely on the userbase for not using a VPN and a disposable e-mail address, but the thing is, a lot of people haven't bothered with that because they trusted Null with personal data, which is why hosting this feels like a giant stab in the gut. Also what Null completely brushes over is that the main reason the site got hacked is because of the setting up of non-Cloudflare domains, which could have been handled SO much better than taking off the security off THE MAIN SITE. I am personally not affected by the leak (it just shows I live in the general region of Moscow, which I've already talked about), so I don't accuse me of being salty. I just wish the speds that go "hurr durr it's ur fault for not being secure" and Null would realize that this kind of shit is unacceptable.

Also didn't you tell @Gengar that you were going to take down the file? Did you backpedal on that?

What the fuck dude? I don't know a whole lot about the ranks on this site, but as far as I know with the Supervisor rank, you're a staff member yourself, so while you deride Null for letting users 'blatantly disrespect the authority of the site', you're doing exactly what you speak of. Maybe the staff dynamics are different on the Farms, but staff members aren't supposed to speak out like this publicly, especially in such a charged situation. Why pile on like this? Why not speak to him privately? What are you hoping to gain here by posting this, besides getting a couple of brownie points with the emotionally charged mob? Obviously the concerns you've posted have been building up with you for awhile, so for you to wait for this exact moment to lay it all out seems disingenuous to me.

As for the leak itself and Null's subsequent actions, there's no right or wrong answer as far as I see. From what I've seen of Null, he's a very honest, principled person, and he tries to carry himself in that way when it comes to administrating Kiwi Farms, and probably in his day-to-day dealings as well. He probably saw this situation through that very same lens and tried to handle this with as much integrity and transparency as possible, and definitely did not want to come off as a hypocrite - not in the eyes of the very same scumbags and losers that are doxed on this site, but probably for himself and his userbase. He checked a lot of the boxes - he took the site down immediately when he noticed something was wrong, reinstalled the necessary components (sorry, I'm not very tech-savvy), made multiple posts where he laid everything out on the table, and then held a vote for the site to determine the next steps when it came to the leaks (to post or not to post, with the context being that this is a leak site). Maybe he should've held the vote for a much longer period of time or something, but for everyone to jump on the guy, including staff members, when he's been thanklessly fending off countless legal threats, real life risks of violence, innumerable costs both to his wallet and no doubt his physical, emotional, and mental wellbeing, all essentially as a one man show while balancing a moral compass versus trying to keep you all entertained and happy - is fucking, excuse my French, GAY.

 

[ES 195]

So is it wrong to dead name people who changed names in the panic?

 

[2nd_time_user]

What the fuck dude? I don't know a whole lot about the ranks on this site, but as far as I know with the Supervisor rank, you're a staff member yourself, so while you deride Null for letting users 'blatantly disrespect the authority of the site', you're doing exactly what you speak of. Maybe the staff dynamics are different on the Farms, but staff members aren't supposed to speak out like this publicly, especially in such a charged situation. Why pile on like this? Why not speak to him privately? What are you hoping to gain here by posting this, besides getting a couple of brownie points with the emotionally charged mob? Obviously the concerns you've posted have been building up with you for awhile, so for you to wait for this exact moment to lay it all out seems disingenuous to me.

Just because people are ranked doesn't mean they forfeit the right to disagree in public. This is not a workplace where "managers" talk amongst themselves only. This is a place where anyone can say their opinion to the userbase without worrying that they'll be disciplined or fall out of the cool kids' circle for merely sharing how they feel with you, me and the rest of the class.