Postmortem Site compromised 10-Sep-2019

Status
Not open for further replies.
My first IP is in Canada, second IP is in North America, and third IP is in France. They're going to need to luck-of-the-draw me. Guess I don't get any pizza... *sigh*
Okay I don't want to sound retarded but I'm not seeing any IP address stuff in the documents I'm looking at from the zip file. I can't even remember what server I used on the VPN so I'm curious where I would see that. Am I missing something here?
 
New account here, I was always a lurker and never had an account, however considering how much good lulz this site has provided me with I feel it's only appropiate I point this out for those that are not technically aware:

  1. @Null mentioned in a recent stream that he verified Yaniv's drunkposting and credible death threats via e-mail sign-up, therefore we know this data is retained, probably indefinitely, for password resets etc.

The email address they got for me is not the one I signed up with. It's the one KF currently has on record for me. Like many others, I've changed my email address at times when Null has announced he's going to do a purge.
 
Well, my Farms account does not include a single bit of information that matches my RL identity so I am not overly worried about ID theft or doxing, and I am a minor poster on the farms better known for sometimes funny shitposting then having anything to do with Kiwi Farms day-to-day operations, so I don't think i'll worry beyond finally getting off my ass and hiding behind 7 proxies like every good sperg should.

I feel for ya though, Null. My phone should have accumulated enough to send another chunk of cryptocoin your way at least.
 
The email address they got for me is not the one I signed up with. It's the one KF currently has on record for me. Like many others, I've changed my email address at times when Null has announced he's going to do a purge.

I'm pretty sure this is standard for a default config XenForo setup to only retain the most recent e-mail, and that would also comply with the GDPR laws.
In fact, I believe this is standard procedure for most forum software; MyBB, phpBB, Invasion Community, etc.

Good info though.

EDIT: I'm a retarded new-friend, and forgot to quote you.
 
I made a list here: https://pastebin.com/TxcKTprC
If you're on this list, they have the email linked to your account.

There's an excel file with the IPs, maybe someone can upload it separatedly. My internet connection is exceptional and I won't attempt.
Oh no! I'm on the list, now people will know I spent part of my afternoon in the EVIL Kiwi Farms, where I dox people and am being an asshole to idiots.

Wait, I'm an asshole irl as well. FIne, nothing of value was lost then
 
Ah well I feel like an idiot. I mean even more than one I already am!

Haha those fags got my VPN's Dallas server, what a bunch of faggots!
I don't even understand how my IP on here is so far away from where i am outside of my vpn routing in such a weird way.
 
  • Like
Reactions: Dork Of Ages
So decided to throw in the IP addresses on the doc on a geolocator for fun. Not even in the countries I live in. A-mazing job l33t haxxors.
They did a very superficial job here. Seems like they just basically did the cyber equivalent of smash and grab and like the dipshit icehead, grabbed the easily replaceable tv and ignored the original Picasso above the mantle in the den.

I don't even understand how my IP on here is so far away from where i am outside of my vpn routing in such a weird way.
It looks like these fucks didn't even do a thorough enough job here because if you dig hard enough and have the skill, no VPN or Proxy will completely protect you from someone who knows what the fuck they're doing. Same reason why idiots get busted on TOR thinking they're invincible when the nodes are pretty much compromised. Before you know it the partyvan is kicking down your door, shooting your dog, and sending you to federal pound me in the ass prison.

Am I in the list?
Yes, it has your IP here on the ipout.csv file. All I see is your username the ip address. It lists you in Chile.
 
They did a very superficial job here. Seems like they just basically did the cyber equivalent of smash and grab and like the dipshit icehead, grabbed the easily replaceable tv and ignored the original Picasso above the mantle in the den.
I still don't think they are going to do shit other than maybe have some furries sent weird e-mails to burner/throw away e-mails.
 
I might be partially exceptional, but what is that other data that isnt an ip address. Hashes? I mean, im assuming it isnt that important since the whole "leak" was exceptional in the first place. But I'd still like to know
 
  • Like
Reactions: Dork Of Ages
They did a very superficial job here. Seems like they just basically did the cyber equivalent of smash and grab and like the dipshit icehead, grabbed the easily replaceable tv and ignored the original Picasso above the mantle in the den.


It looks like these fucks didn't even do a thorough enough job here because if you dig hard enough and have the skill, no VPN or Proxy will completely protect you from someone who knows what the fuck they're doing. Same reason why idiots get busted on TOR thinking they're invincible when the nodes are pretty much compromised. Before you know it the partyvan is kicking down your door, shooting your dog, and sending you to federal pound me in the ass prison.


Yes, it has your IP here on the ipout.csv file. All I see is your username the ip address. It lists you in Chile.
It'll just result in the null and hopefully the userbase adopting more anti fragility practices/code
 
Status
Not open for further replies.
Back