Jason Thor Hall / PirateSoftware / Maldavius Figtree / DarkSphere Creations / Maldavius / Thorwich / Witness X / @PotatoSec - Incompetent Furry Programmer, Blizzard Nepo Baby, Lies about almost every thing in his life, Industry Shill, Carried by his father, Hate boner against Ross Scott of Accursed Farms, False Flagger

[potato sack]

This just sounds like hackerman talk from someone who has never worked with sensitive materials or dealt with multiple repo projects. If it's sensitive enough to require you air gapping to a homelab server why not keep it all there?

Unless he's trying to make it sound like he uses his homelab as a C&C server for his toolkit?

at the very least its super fucking weird to flex outta nowhere that you have projects locked awya behind a yubikey when someone asks casually about ur other github projects

"hey thoe do you have other projects on github "
"hehe yeah kid i have loads, they're all private though. also you need my special ferret usb stick to use it. hehe never getting into that shit."

for reference anything related to infosec is either open source, purchased from someone or made in a homelab solo/as a team and in the latter cases you keep your mouth shut about it. braggin is fucking amateurish

Good idea!

u did more work in however long it took to make this than thor in over a year

 

[UNIXLover]

m pretty sure you can't self-host a GitHub instance

You can, but it has a 45 day free trial. In the clip it didn't say he was the one hosting it though and he could have just meant he had multiple github accounts.

 

[Lvkester Endorser]

Guts got off the boat before this nigger finished his game.

We really ought to start a list of things that finished/might finish before the ferretfaggot's game.

So far :
-George RR Martin Aka @Potentially Criminal might actually drop the last two books of a song of fire and ice.
-One Piece has a high chance of ending.
-Berserk has a high chance of ending even with its author sadly deceased.
-Guts got off the 7 year boat hiatus.
-Byuu was proven as dead.
-Null finally got a bank account.

I will sooner be able to donate to Kiwifarms via Paypal and Google Pay, than will Jason finish his dumb game.

@nool Kiwi Farms Game Jam wwhen

This would be so fun! I want to participate as an artist, just please don't drive for 9 hours to try to fuck me innawoods.

 

[Gravemind]

I will sooner be able to donate to Kiwifarms via Paypal and Google Pay, than will Jason finish his dumb game.

Hey, those should be vote options.

 

[Kheapathic]

That GitHub talk was just ego salad combined with the 1980's Hackerman.

1). He has a Git account that have access to different things he's built over a long career in offensive security.

2). He has a bunch of different control methods into that, with different accounts with different control methods.

3). And each tool is only pieces, that require other shit is locally hosted / air-gapped.

This is like an alternate version to being behind "Good luck, I'm behind 7 proxies." The problem being, Mald's trying to play/sell it straight.

Cyber Security 101: If it's hosted on hardware you do not control, it is not secure. Two, unless he's gonna literally say seven proxies and all that, GitHub knows what belongs to who and if for any reason, can and will throw you and possibly your shit off their servers. Three, your gay-ass "You need access to a physical server to get the other-half" shit cuts the same way; unless you're putting shit on GitHub on a private account to... what, just because you can? This doesn't make sense, if you break a tool in half or into pieces, you don't put pieces onto something you don't control, because if for whatever reason it disappears, so does that half of your tool.

If you want to try to sound like a big bad Hackerman, just say you have a copy of the FBI's toolkit. But I also bet he signs all of his Git Commits with;
\\If you're reading this, you're dead kiddo

 

[Aidan]

Not only does he know how to use Git, he's hosting the entirety of GitHub in his "home laboratory" (normally I'd assume he's just self-hosting a Git server, but I think he legit went into a word-salad mode there, and I'm pretty sure you can't self-host a GitHub instance so there's that):
View attachment 6964617

What he's describing is obviously bullshit. You can host private git instances and you can have private Github repositories, I'm not sure what he means. It makes more sense for him to say he's self hosting while trying to make it sound cooler but goes on to make a fool of himself saying that the repositories are distributed across accounts with various access controls, ultimately requiring access to local devices to piece it all together. This implies he also develops on different machines and no machine puts all the pieces together without even more hoops... it's stupid.

For context, needing to hack the machines of those with access is the default way to gain access to a git repository since they're typically secured with SSH keys. You need both keys of a pair and the private key is on the user's machine(s) so what he said is retarded.

https://docs.github.com/en/authentication/connecting-to-github-with-ssh/generating-a-new-ssh-key-and-adding-it-to-the-ssh-agent

However, if he's hosting it on his home network then compromising the machine(s) with the files is all it would take, the individual accounts don't matter. The more he tries to complicate it, the less it makes sense. Self host it on a secure network, which he's previously described his as being convolutedly secure, or host it online with a secure account, which is frankly trivial. It all being conveniently private is icing on the cake. He really doesn't like people scrutinizing his amazing code.

 

[Spoonomancer]

@nool Kiwi Farms Game Jam when

This would summon the farms schizo @Mix to try to poach this website in hopes that people would want to develop his vampire werewolf demon game for free to an audience of just him.

 

[Kheapathic]

However, if he's hosting it on his home network then compromising the machine(s) with the files is all it would take, the individual accounts don't matter. The more he tries to complicate it, the less it makes sense.

You know what his shit about having different accounts with different control methods reminds me of. Way back, when we were all a lot younger and the Internet was a lot newer; a friend had found porn and would download it. The way he hid it, is in, I think it was the My Documents folder, he put a generic sounding folder, and then in that folder had 26 more folders, all of a letter of the Alphabet, then in each one of those, the Alphabet folders repeated. He had 26 layers of folders, and only through the right path would you reach the porn stash.

I don't know why, but the shit about different accounts with different control methods just has me going back to being a kid and doing dumb shit while thinking you're so clever. I imagine the control methods are all steganography pictures of all his dead ferrets, each ferret and each picture completely unique. Because that's how fucking big brain and secure he is.

 

[200MB]

What he's describing is obviously bullshit. You can host private git instances and you can have private Github repositories, I'm not sure what he means. It makes more sense for him to say he's self hosting while trying to make it sound cooler but goes on to make a fool of himself saying that the repositories are distributed across accounts with various access controls, ultimately requiring access to local devices to piece it all together. This implies he also develops on different machines and no machine puts all the pieces together without even more hoops... it's stupid.

For context, needing to hack the machines of those with access is the default way to gain access to a git repository since they're typically secured with SSH keys. You need both keys of a pair and the private key is on the user's machine(s) so what he said is retarded.

https://docs.github.com/en/authentication/connecting-to-github-with-ssh/generating-a-new-ssh-key-and-adding-it-to-the-ssh-agent

However, if he's hosting it on his home network then compromising the machine(s) with the files is all it would take, the individual accounts don't matter. The more he tries to complicate it, the less it makes sense. Self host it on a secure network, which he's previously described his as being convolutedly secure, or host it online with a secure account, which is frankly trivial. It all being conveniently private is icing on the cake. He really doesn't like people scrutinizing his amazing code.

Each of his mods must turn a key in quick succession just to start the Rube Goldberg machine that opens his code editor.
No wonder it takes this nigger so long to update his game.

 

[Aidan]

Yep the more convoluted it sounds, the more secure it must be! The second I learned about hidden directories I used them thinking they were actually hidden and felt so smart. I mean it's how you learn, but if an "expert" brags about stuff like that it's a joke.

He already bragged about his passwords being stored in images using steganography. He obviously doesn't do that because it's retarded but if he did, it is not as secure as he or his viewers think without first encrypting the password which starts adding retard layers that make no sense when password managers are much more suitable and secure.

 

[TrainWreckWatcher]

of GitHub in his "home laboratory"

100% this is his way of saying "I have a hard drive I save it to with version control"

Good idea!
View attachment 6964771

IF you manage to do 3 Chapters you'll already be ahead of it. Is the plot of this game you rescue your missing bathroom gnome?

 

[U+200B]

Jason "Mald" Figtree is one of the best examples for the phrase "An idiot admires complexity, a genius admires simplicity".
His password storage? Needlessly complex and hails himself as a genius for it.
His "code"? Unreadable mess that he thinks is going to create the next Undertale. (Also saw a tweet of someone "improving" it but couldn't find it. He would never accept that though)
His Git solution? "I'm on so many levels of git, you wouldn't understand"
His ferrets? Why take care of a handful, when you can just stuff them into your house until there is no room?

 

[GeldKampf]

He's going to be interviewed, whatever that means. The time block puts it in your own timezone, but roughly 8 hours from my post now is when he'll be doing the "rad announcement".

 

[SYN-ACK-ACK-ACK]

He already bragged about his passwords being stored in images using steganography. He obviously doesn't do that because it's retarded but if he did, it is not as secure as he or his viewers think without first encrypting the password which starts adding retard layers that make no sense when password managers are much more suitable and secure.

Not only does he not do this because its retarded, he definitely doesn't do this given his passwords are in this thread and are all the same across multiple accouns.

 

[el gordo]

Not only does he know how to use Git, he's hosting the entirety of GitHub in his "home laboratory" (normally I'd assume he's just self-hosting a Git server, but I think he legit went into a word-salad mode there, and I'm pretty sure you can't self-host a GitHub instance so there's that):
View attachment 6964617

then why host it on git hub at all?
why would you store super secret stuff on a file sharing website?

 

[Ducks Sorted in a Row]

then why host it on git hub at all?
why would you store super secret stuff on a file sharing website?

self-hosting means that you're hosting the entire webservice on your own machine. self-hosting a github-like website can be useful so that you can get access to features like issues, pull requests and CI/CD without having to send all your stuff to microshit to train their AI with.

 

[Pippa's Greasy KB]

Good idea!
View attachment 6964771

>start button isn't written as shart

Really, buddy?

 

[hand holding faggot]

Jason "Mald" Figtree is one of the best examples for the phrase "An idiot admires complexity, a genius admires simplicity".

I like how instead of keeping his shit on a machine without internet access or on any portable storage device and never talking about it, he invented a niggerlicious network of github accounts combined with a self-hosted git. I'm not an IT specialist or anything but I guess if you want to encrypt your data and divide your key, you can use something like SSS to get multiple keys, so you will need to have at least some of them to actually decrypt the data. It sounds like it makes it difficult to access the data yourself, but whatever he did doesn't sound much less complicated.

 

[6MillionCoofs]

I like how instead of keeping his shit on a machine without internet access or on any portable storage device and never talking about it, he invented a niggerlicious network of github accounts combined with a self-hosted git.

Made funnier because he has multiple vids and shorts saying that you should have clean machines or ones not connected to the net for security reasons.

He’s litterally fucking himself because he did not follow his own advice.

 

[Shuhalo]

I like how instead of keeping his shit on a machine without internet access or on any portable storage device and never talking about it, he invented a niggerlicious network of github accounts combined with a self-hosted git. I'm not an IT specialist or anything but I guess if you want to encrypt your data and divide your key, you can use something like SSS to get multiple keys, so you will need to have at least some of them to actually decrypt the data. It sounds like it makes it difficult to access the data yourself, but whatever he did doesn't sound much less complicated.

Calling it now: The next update is going to be delayed by months because "Dude, with all of this crazy stuff over Wow, those Wow players are crazy dude by the way, someone actually hacked into the developer computer through the internet and wiped all the files, so its gone. Everything, all of its gone. All because they're mad about some dogshit drama dude. Heartbound update is going to be delayed until next year. Of course, Steam is still harassing us over the lack of an update that is not our fault dude. Not our fault. I'm getting in touch with my FBI contact, that guy had better prepare himself, because he's about to find out."

Terry spits upon the Devilspawn Jason.