Plagued 4chan - the Internet hate machine

  • 🐕 I am attempting to get the site runnning as fast as possible. If you are experiencing slow page load times, please report it.

Will the 4chan hack be the end of it?

  • Yes, goodbye forever 4chan

    Votes: 1,032 18.5%
  • No, they will rise from the ashes, stronger than ever

    Votes: 343 6.1%
  • This will rattle them but it will be forgotten about next week

    Votes: 2,324 41.7%
  • I am just here for the janny phonebooking

    Votes: 1,093 19.6%
  • What the fuck is 4chan

    Votes: 218 3.9%
  • Yotsuba&!

    Votes: 569 10.2%

  • Total voters
    5,579
This is the most Kiwicoded picture on the internet

Screen Shot 2025-01-11 at 10.19.05 PM.png
 
https://arch.b4k.co/v/thread/699781272
Even without prior knowledge of exactly what kind of thread this is, looking at the first 100 posts should really activate your neurons that this thread might just not be full of random anonymous users that have chosen to participate in a random thread.

Specifically yes, this is a general disguised as an actual topic with a Touhou related image in the original post.
It is a consistent 24/7 type of thread with the same namefags, ritualposts and cliques with a Touhou theme ran by a handful of people (who refer to themselves as /v/hu) who simply feel that neither /vg/, /jp/ nor Discord are cool enough for their circlejerk. At the time of said ban, there were 3 active "/v/hu" general threads.
Did they not ban the other fucking 2 threads either?
 
There's an interesting happening in /g/ right now, it's linked to this:

So basically to be non-technical, when you access the API of different AI services, you need an API key with which they know whom's account to charge the bill to, to see if you're even authorized to access the service, etc.. These keys need to be send along with the API request. Since big companies now employ pajeets that just can't into "security" or "understanding how computers work" with the AI boom and 1001 shitty apps written, these API keys, not rarely keys employed by huge organizations, often ended up online together with the source code of the program in question in places like github, visible for all and ripe to be plugged by "unauthorized 3rd parties" to get access to the AI services, anonymously (if behind VPN/other kinds of proxies) and free. (The real hidden costs of these visas, I guess)

You can't help when an pajeet is so dumb as to upload the API key of his company, but of course actually searching out such keys to use them is stealing and not legal. This isn't a fringe issue either, it in fact got so bad that github started cooperating with OpenAI so that OpenAI automatically invalidates API keys that are detected in uploads to github. It still happens in other places and with other companies though.

Enter /aicg/, wich is an AI chatbot thread on /g/, full of coomers that found out quickly that you can sext ChatGPT, under the right circumstances. I've been obeserving it for a while and they basically turned key-stealing ("scraping") into an industrial operation. Some particularily industrious anons then brought upon themselves to write software and set up proxy servers for fame/(You)s/and yes, money (by selling access to the proxies) they would give other anons access to. These proxy servers then would connect to various AI services and would let the anons with access use these services, for free, by employing "hijacked" keys. This all happened fully in the open on 4chan for a year or two, with the strange attitude of anons that "nobody cares" that their money gets stolen. They assumed so because some of these keys didn't end up being revoked, and in fact stayed valid for months even though they got a lot of questionable charges. I suppose for some huge corporations owning these API keys these additional charges were indeed rounding errors and nobody cared. Last year there was some drama about a "honeypot key" being left out on purpose in the open by some security researches to observe where it would end up. This should have probably alarmed them that people do in fact care about being stolen from, but I guess the coom was strong. Things proceeded as normal, proxies were used, keys were scraped, people discussed it on 4chan in the open.

Until end of December. Apparently Microsoft cared. They ended up suing some anons running the proxies, seized the domain (yes, there was a .net clearnet domain) of one of the proxies and are now working on finding out their identities. It's interesting that they're apparently not only targeting the people running the infrastructure, but also at least some end users, targeting 10 "John Does" in total, although the proxy in question apparently had hundreds of users? Six of these "John Does" really more feel like "placeholders", just trying to get whomever they can get. This mostly seems to revolve around Azure API access and Dall-E 3. Here are the legal documents somebody linked in /aicg/: https://gofile.io/d/OpUf8q

I don't have an internet connection stable or fast enough to do it myself right now, but if somebody would archive them or maybe even upload them to here, that would be grand.


EDIT:
Found the following link:

They're trying to hit them with everything including RICO charges, which I have been told is quite serious. Reading between the lines, Microsoft seems mostly to be pissed that Dall-E 3 was used to generate what is probably CP and deepfakes of celebs like Taylor Swift, with their name and logo on them.

Most proxy owners disappeared at these news, but apparently there's still some proxies around, most likely run from countries where Microsoft or the U.S. Justice System has no reach.
 
Last edited:
There's an interesting happening in /g/ right now, it's linked to this:
https://arstechnica.com/security/20...reating-illicit-content-with-its-ai-platform/
super tl;dr in layman's terms (since I'm lightly familiar with these shithole generals)
>anons on /g/ run proxy services you connect to to use AI stuff (both text and image, though those are handled by separate threads/groups), whatever you send to them gets passed along to the AI and they send the result back
>to get access to the paid models, the ones running the proxies just use bots scraping the internet for any API keys (think of it like the password to your account to access the service) that were foolishly posted in public or semi-publically on unlisted pages
>these keys are often from corporations who get less restrictions on their usage of the AI (aka less censored), and you can just use it all you want until they wise up and revoke the key, and whichever corpo owns the API key foots the bill for the thousands of requests made by anons who want free AI access
>predictably, it's mostly used for degenerate porn/ERP, and either the corporations or AI services eventually noticed inflated bills for the service accompanied by an unexplained deluge of requests for horses fucking 4-year-old anime girls when they checked the logs, and they raised the alarm


/aicg/ (the general for the text one) is also quite possibly one of the worst single examples of generalfag brainrot I've ever seen on my time on the site, so it's the one I know most about—though it's been a hot minute since I've skimmed a thread there.
 
View attachment 6844396
The "general":
View attachment 6844397
The people who spam lolicon and gore on the regular boards get 3/30 days of ban but this "general" posting gets a permanent?
https://arch.b4k.co/v/thread/699781272
Even without prior knowledge of exactly what kind of thread this is, looking at the first 100 posts should really activate your neurons that this thread might just not be full of random anonymous users that have chosen to participate in a random thread.

Specifically yes, this is a general disguised as an actual topic with a Touhou related image in the original post.
It is a consistent 24/7 type of thread with the same namefags, ritualposts and cliques with a Touhou theme ran by a handful of people (who refer to themselves as /v/hu) who simply feel that neither /vg/, /jp/ nor Discord are cool enough for their circlejerk. At the time of said ban, there were 3 active "/v/hu" general threads.
I don't understand what the problem is here...
 
/aicg/ (the general for the text one) is also quite possibly one of the worst single examples of generalfag brainrot I've ever seen on my time on the site, so it's the one I know most about—though it's been a hot minute since I've skimmed a thread there.
Oh I have no sympathy for the coomers and it should not be misconstrued as such; I was mostly fascinated how out in the open they did their cybercrimes, somehow believing it'll never have consequences. (Granted, with some of them depending on where they live, it might not have, I don't think a brasilian or russian state cares about US court decisions)

That said, I have zero sympathies for micropajeet either. I hope they never catch the people responsible and I hope they cost them tons of money. I'm no legal juggernaut, but from my interpretation it's also interesting that microsoft tries to paint mere jailbreaking (wording things funny, basically) as some advanced cybercrime worthy of harsh punishment. That is amazingly dishonest.

Also again, I might have misunderstood this (I'm not even american) but apparently the judge tasked microsoft with doing the investigation? Are corporations in the US law enforcement now? For their own complaints?
 
I might have misunderstood this (I'm not even american) but apparently the judge tasked microsoft with doing the investigation?
It's a civil suit, not a criminal one. You're going to be doing your own investigations. And Microshart is probably in a better position than the government to conduct those investigations anyway.

Whether crimes are uncovered that can be referred to law enforcement is another issue. And considering the negligence, incompetence and sheer disinterest in actually doing their jobs displayed by the government regarding Torswats, the more of your own investigation and fact finding you can do, the better, because if you are depending on government retards to build a case for you, you're going to die waiting.
 
There's an interesting happening in /g/ right now, it's linked to this:
https://arstechnica.com/security/20...reating-illicit-content-with-its-ai-platform/
I will never get over how some of these retards still think they're some hackers on the deepweb instead of a honeypot run by the feds and moderated by trannies that hate them. You see this on /pol/ all the time, but at least there it's just wrongthink, here they're actually committing crimes, lmfao
I have a feeling that Taylor Swift deepfakes are actually going to outlaw, or at least regulate AI generation for the common man. People joked about this, but it seems powers that be want to use this in court going forward.
 
It's a civil suit, not a criminal one.
See? I'm lawtarded. I wonder if a Lawkiwi would be interested in looking at this, for me it all sounds vague to the point that it doesn't feel like they're really gonna get anything, especially if they assume that most people involved aren't even in the US. What I think is mostly fucked up is that they present jailbreaking as something akin to hacking/"abuse of microsoft computers". It's IMO the most interesting thing about the entire thing. Since with current generation of AI it'll always be inheriently impossible to prevent "jailbreaking", I am wondering if they're trying to find a legal avenue against it.
I will never get over how some of these retards still think they're some hackers on the deepweb instead of a honeypot run by the feds and moderated by trannies that hate them.
They're still posting about comitting these very crimes, even though this lawsuit has screencaps from /aicg/, so the general is defintively monitored by Microsoft. I wonder if they're aware that 4chan logs their IPs too.
 
I was listening to some Nature show this weekend and found myself reminded of a little gem posted to /x/ a few years ago: Proboscis Luke.

When I was a kid I had a surreal and terrifying experience watching a VHS of the special edition of Star Wars: A New Hope with my mom. I believe this was the late 90's (1998?) but I can't give an exact date so I apologize, however I was approximately 11 or 12. Basically we were watching the part of the film where they're in the Death Star. At one point when confronted by stormtroopers, Luke's nose suddenly extended grotesquely into a strange flesh-colored elephant's trunk. It then flailed around making elephant trumpet sounds scaring the stormtroopers off. I vividly remember this, and I was absolutely terrified. My mom was really jarred and confused and trying to calm me down. Leia then says "that's enough Proboscis Luke" and his nose returned to normal. The film also continued on as normal. Every subsequent viewing of our VHS was completely normal, as with every previous viewing. We had already watched the film multiple times prior to the incident so that precludes it being some strange edited copy which would be weird in and of itself.

My mom still remembers the event and sometimes we talk about it. It honestly feels somewhat demonic. Like something was trying to fuck with us through the VHS. The recent talk of the "Bigger Luke Hypothesis" kept reminding me of the incident so I thought I'd finally post it somewhere. Anyone else have any strange experiences watching films like this?

Now, the typical reaction to something like this is to find it utterly comical, but there were a few who found the concept oddly unnerving, which led to this brief interaction, which I consider a worthy appendage (or proboscis) to the tale:

Everyone in the thread is laughing but this gave me chills.
Same here, it is kind of funny, but not directly funny. It's more of a "this is so fucking absurd" kind of thing and the only way that you can really respond to it is with laughter or fear. It's just so entirely out of the scope of what a rational adult mind can conceive. Something so feverishly alien that you laugh it off so as to not grasp the ramifications of it. If something like this happened to me as an adult I'd be scared shitless and there would no doubt be at least some kind of psychological harm at seeing something so reality breaking while arguing with your self that you are in a sane and rational frame of mind.

Midway though the thread, someone claiming to be the OP said the whole story was bullshit, and it almost certainly was. But I don't know, there's something about the idea that struck at a nerve for at least a few people. It got almost no subsequent discussion and I haven't really seen it reposted anywhere, but it had enough interest for me to remember it four years later.

myticket.jpg

proboscis luke.jpg

Link to 4Plebs archive of the thread.
 
Do /x/fags really get scared over mild SCP-lite storytellings? Good lord this is the equivalent of zoomzooms finding the end theme of Spongebob hecking terrifying and liminal frfr nocap.
Did people really find it scary?
I always just found it oddly sad.
Obviously old Spongebob episodes had a huge variety of emotions but it did seem a bit out of place.
 
I yearn for the day uncompromising and merciless jihad is declared on /v/, every xitter screenshot, culture war bait, jakfaggotry, /pol/shit thread spammer gets hanged, drawn and quartered and their entrails fed to Rapeape until he succumbs from niggerAIDS.
Gookmoot can watch, since that's what he's into.

/aicg/ (the general for the text one) is also quite possibly one of the worst single examples of generalfag brainrot I've ever seen on my time on the site
The issue with /aicg/ is that API key scraping is by definition a zero-sum game, every key given to a rando and every token spent in generations is one deprived from someone else, there is always a thin balance between the thirst of the masses for access and the proxy hoster's ego tripping desire to feed them and attentionwhore, and the limited supply of AI keys and the danger of bringing too much heat on yourself. This is why that "community" specifically is wrapped behind fifty layers of esoteric schizoposting and shibboleths, it's meant to filter access, although the situation in general is catastrophic right now.
 
Too late to edit but just read the actual complaint.
Defendant DOE 1 is a natural person with access to and control over [...] “rentry.org/de3u”
Defendant DOE 2 is a natural person with access to [...] the reverse proxy tool located at “https://gitgud.io/khanon/oai-reverse-proxy.”
Access, not ownership for Doe 2, so it's probably not Khanon, since anyone can run the reverse proxy software natively, but Fiz fucked up letting the uncensored Azure keys on.
And for fucking image gen of all things, when you can run Stable Diffusion on a fucking toaster, meanwhile LLM gen is closed source and whatever llama scraps exist require colossal amounts of VRAM that the NJUDEA merchants don't add on their cards.
DALL-E spammers and /aco/ claim another.
 
I dug a bit more, even in earlier lawsuits of Microsoft in similar cybercrime cases as the topic seemed interesting. I have no idea about law in general and US law in particular but these numbers of John Does seem to always gravitate either towards one-two or towards ten and it apparently is more or less meaningless. It's apparently really just a placeholder number, basically "we think it's more than the one we identified more closely, let's see who we can find additionally". That said, these cases usually seem to end up in some default judgement to cut it out against nobody, as Microsoft apparently does not manage to identify the John Does in cybercrime cases very often, which I guess makes sense as you think people running botnets, phishers etc. take precautions not to get caught.

This case seems to go better for Microsoft than other cases as they have more information than usual, but if these anons took any precautions not to leave behind a trail that eventually leads to their ISP IP, it's probably going to end up nowhere.

It's unusual mostly as it's the first case of this kind I could find they have running. I doubt it'll be the last one so it's probably also a bit of a template. If you never think about these things it's surprising how routine they seem to be, although I guess that too makes sense.
 
Last edited:
Back