Postmortem Site compromised 10-Sep-2019 -

Stielhandgranate

Model 24
kiwifarms.net
Well fuck.
1568185239206.png
Thankfully it was a throwaway email (just like this account lol) and I could give a fuck what happens to it, but still. Ouch.
 

LiquidKid

If Lions Like It, You Know It’s Bad.
kiwifarms.net
My job unintentionally doxed me some years ago. It was not even online, but print.
My job required me to have a social media presence, so I don’t actually have any personal ones. So thankfully I’ve never been at risk for being doxxed via email addresses or social media accounts.
But I still stand by the fact that there is no value in doxing a total nobody like me
 
  • Like
Reactions: Dork Of Ages

ShanghaiGuy

kiwifarms.net
Wow, that's an awful lot of posts from people implicated with the same IP all at once, at the same timezone. I'm gonna have to put my thinking cap on for this one. How do we solve this mystery?
Why would I have multiple accounts on this site and one of them would use a username that leads to my real identity and Why would I use a throw away email address, but use a username I used elsewhere?

:story:
 

stakenifes

True & Honest Fan
kiwifarms.net
That's a PIA server, rétard.
Code:
dig +short https-us-newyorkcity.privateinternetaccess.com
107.182.230.240
It only means both null and some random dude used the same VPN service with their location set to NY. You can take any PIA gw and there's a good chance of finding hits.
FWIW here was my thinking, I'm sure @Philosophy Phil can back me up on this based on what I've shown him.

Null has used multiple IP addresses. Only one of those IP addresses was used by multiple accounts. My assumption is that whoever hacked null, didn't think to remove the IP address they used during the hack.

That IP address was used by multiple accounts. I narrowed that list down, and told this dude. I told him to keep me updated and we'll look into it together.

He went rambo and posted a whole bunch of shit based on a whim, despite my cautioning him not to.

Still a perfectly valid lead, even if Shanghaiguy isn't the dude (he wasn't on the list I sent).

Hint: look up other IPs used by the same shared IP null used.
 

Twinkie

Local Moderator
True & Honest Fan
kiwifarms.net
Didn't even need IP addresses/whatever nerd bullshit to debunk this tho. You could just look at their profiles and tell they're not the same people, none of them.

And sorry if this is too bitchy but when someone's first reaction to a picture of a human is "does this look AI generated to you??"... they have crippling autism and you should proceed with caution.
 

dogsoupcat

kiwifarms.net
FWIW here was my thinking, I'm sure @Philosophy Phil can back me up on this based on what I've shown him.

Null has used multiple IP addresses. Only one of those IP addresses was used by multiple accounts. My assumption is that whoever hacked null, didn't think to remove the IP address they used during the hack.

That IP address was used by multiple accounts. I narrowed that list down, and told this dude. I told him to keep me updated and we'll look into it together.

He went rambo and posted a whole bunch of shit based on a whim, despite my cautioning him not to.

Still a perfectly valid lead, even if Shanghaiguy isn't the dude (he wasn't on the list I sent).

Hint: look up other IPs used by the same shared IP null used.
Right, and the shared IP is a PIA address, which Null is known to use. Had he chosen to go through the Vancouver PIA server (ca-vancouver.privateinternetaccess.com -> 107.181.189.x), @OhTheBliss would be trying to dox a different set of innocent users.

It's a legitimate address used by Null and of no significance.
 

stakenifes

True & Honest Fan
kiwifarms.net
Right, and the shared IP is a PIA address, which Null is known to use. Had he chosen to go through the Vancouver PIA server (ca-vancouver.privateinternetaccess.com -> 107.181.189.x), @OhTheBliss would be trying to dox a different set of innocent users.

It's a legitimate address used by Null and of no significance.
Mate, I told this dude not to post anything unless sure. It was a lead into a commonality. None of Nulls other IPs were used by anyone else, only that one.

Legit I told this cunt to keep it quiet unless sure, he decided to go rambo. Want me to post messages?
 
Tags
None