Postmortem Site compromised 10-Sep-2019 -

dogsoupcat

kiwifarms.net
FWIW here was my thinking, I'm sure @Philosophy Phil can back me up on this based on what I've shown him.

Null has used multiple IP addresses. Only one of those IP addresses was used by multiple accounts. My assumption is that whoever hacked null, didn't think to remove the IP address they used during the hack.

That IP address was used by multiple accounts. I narrowed that list down, and told this dude. I told him to keep me updated and we'll look into it together.

He went rambo and posted a whole bunch of shit based on a whim, despite my cautioning him not to.

Still a perfectly valid lead, even if Shanghaiguy isn't the dude (he wasn't on the list I sent).

Hint: look up other IPs used by the same shared IP null used.
Right, and the shared IP is a PIA address, which Null is known to use. Had he chosen to go through the Vancouver PIA server (ca-vancouver.privateinternetaccess.com -> 107.181.189.x), @OhTheBliss would be trying to dox a different set of innocent users.

It's a legitimate address used by Null and of no significance.
 

stakenifes

True & Honest Fan
kiwifarms.net
Right, and the shared IP is a PIA address, which Null is known to use. Had he chosen to go through the Vancouver PIA server (ca-vancouver.privateinternetaccess.com -> 107.181.189.x), @OhTheBliss would be trying to dox a different set of innocent users.

It's a legitimate address used by Null and of no significance.
Mate, I told this dude not to post anything unless sure. It was a lead into a commonality. None of Nulls other IPs were used by anyone else, only that one.

Legit I told this cunt to keep it quiet unless sure, he decided to go rambo. Want me to post messages?
 

NotSendingTheirBest

DANA CAIN, PLEASE
kiwifarms.net
Not useful on its own. Someone attempting to link known someone or someones by the IP of their KF account and maybe their e-mail. Of course if you're a Silicon Valley connected tool, you probably can do a lot with those two.
If you're Silicon Valley connected (tool or not), you won't do gay ops like that. My (plebian) understanding of Silicon Valley that it's nepotism and dick tugging of the highest order. You'd just meet a fellow high-flying faggot in Pasadena and would just target a particular Kiwitard.
 

s0mbra

achievement unlocked: git doxed!
kiwifarms.net
Where's my gay "I survived kiwidox 2019" sticker next to my name, null?

I'm getting 404 when I click anything I'm the doc leak, which is too bad. Also what are these fur faggots going to do? Tell my mommy I make fun of animal fuckers and exceptional individuals on the internet? Boo boo :, (

I was actually worried I'd have to make a new account. I used a literal throw away email and unique password I had to hope I remembered.

This is so pathetically nothing :story:
 

Ashenthorn

Pricker bush
kiwifarms.net
Canned Bread said:
Am I in the list? Won't load for me.

Don't really care too much anyways, I'm a minor poster and there is little to nothing that can connect to me anyways, and even if there was, it's not the end of the world for me to be connected to this site.
Yes you are and there are several IP's listed on the ipout.csv file. They seem to be in the New England area.
As if someone with a username of "Canned Bread" could be from anywhere else.

 
Tags
None

About Us

The Kiwi Farms is about eccentric individuals and communities on the Internet. We call them lolcows because they can be milked for amusement or laughs. Our community is bizarrely diverse and spectators are encouraged to join the discussion.

We do not place intrusive ads, host malware, sell data, or run crypto miners with your browser. If you experience these things, you have a virus. If your malware system says otherwise, it is faulty.

Supporting the Forum

How to Help

The Kiwi Farms is constantly attacked by insane people and very expensive to run. It would not be here without community support.

BTC: 1DgS5RfHw7xA82Yxa5BtgZL65ngwSk6bmm
ETH: 0xc1071c60Ae27C8CC3c834E11289205f8F9C78CA5
BAT: 0xc1071c60Ae27C8CC3c834E11289205f8F9C78CA5
LTC: LSZsFCLUreXAZ9oyc9JRUiRwbhkLCsFi4q
XMR: 438fUMciiahbYemDyww6afT1atgqK3tSTX25SEmYknpmenTR6wvXDMeco1ThX2E8gBQgm9eKd1KAtEQvKzNMFrmjJJpiino