Plagued 4chan - the Internet hate machine

[Chemo]

Some very rude replies. ITT. This is NOT the hospitality and tolerance that Kiwifarms is famous for.

Animosity is often a sign of jealousy and can hint at vexation over rebuffed and scorned advances. Some people just aren't interesting enough to earn interaction based entirely on the content of a post and have to fall back on support among an online clique that's often a kind of 'you back me up and I'll back you up' shallow fidelity.

4chan is like the trashy girl people call on the weekend when they've had a few but then swear never again come Monday and spend the rest of the week shit-talking her to people while remaining oblivious, a damning indictment that you have her number in the first place.

 

[7/11 Coffee]

Wasn't the hacker 13? lol

 

[They were once men]

Nothing will match watching videos about creepy 4chan bullshit where they mention a thread in /x/ and remembering reading that exact thread as it played out. I never believed anything I read on /x/ as fact, but it was still one of my favorite boards to read.

the lucid dreaming threads on /x/ where a pretty good resource but they stop doing them for some reason.

 

[AnOminous]

/mlp/ alone was better than this entire website. That's not an insult to this website; it's just an impossible bar to clear.

I think /mlp/ was a pretty cool guy eh fucked mares and didn't afraid of anything

 

[autistic dog]

Some say that Q was a jewish psyop

I think it was Hillary Clinton

 

[Fcret]

Really makes you wonder why websites don't just range-ban the entirety of India, SEA, Pakistan and so on.

If you're selling shady ads, they're the ideal audience to sell to. People from developed countries have a century of built-up tolerance for advertising trickery whereas your average Indian is a potential new mark for dick pills and hot bobs and vagene in your area.

 

[California Newt]

holy shit the /dbs/fags made their way to the sharty /dbs/ thread. Posting the same scat bleach dragon ball gay cuck porn as well.
I FUCKING KNEEL /DBS/ LIVES

Some favorite /dbs/ screencaps of mine:

 

[ringtones]

“I wish there was a way to know you're in the good old days before you've actually left them.”

the good old days have a smell that you don't recognize until the days are in the past, and every time you smell that smell you remember the days
every group of days has a different smell

 

[Meat Target]

Really makes you wonder why websites don't just range-ban the entirety of India, SEA, Pakistan and so on.

If you're selling shady ads, they're the ideal audience to sell to. People from developed countries have a century of built-up tolerance for advertising trickery whereas your average Indian is a potential new mark for dick pills and hot bobs and vagene in your area.

The boards would lose most of their traffic.

 

[GillyLilly]

If you're selling shady ads, they're the ideal audience to sell to. People from developed countries have a century of built-up tolerance for advertising trickery whereas your average Indian is a potential new mark for dick pills and hot bobs and vagene in your area.

i have it think of the great plans in history The Marshall plan, Trajans walls and now what i call the new SEA deal check it they get to only see the advert on the front page and all pages and boards and they never get to see any threads except for in /cm/ /lgbt/ /gif/ and /aco/ since they congregate there

 

[Max Free]

There was a setuid binary called /usr/local/bin/suid_run_global which simply execves a perl script. Said perl script was writable by www so it could be hijacked to acquire a shell.

Makes sense now. Thanks for the info.

 

[Drive She Said]

I think a good example of why 4chan jannies are so hated is when Billy Mitchell won his lawsuit several weeks ago. The rules of /v/ lay out that it is a board discussing video games and video game culture. Well, Billy Mitchell is clearly a major figure in video game culture, and this was a topic that a lot of people wanted to discuss. Jannies were patrolling the board deleting anything that looked like a Billy Mitchell thread, including OPs that were just about the Donkey Kong arcade game.

Now if the board was like 25% threads about Billy Mitchell and his lawsuit, then yes, of course you've got to clean some of those up, but just one thread about this topic that clearly a lot of people wanted to discuss isn't going to hurt anything. Especially considering how many threads are just dedicated to masturbating to fanart of video game characters, which there are other boards for.

 

[Accept Some Substitutes]

I wanted to unearth my old farms account to post, but it was security locked and leading to an email that was tied to a throwaway mobile number
I hope 4chan stays dead and ahem

OOOOH YOU KNOW IT LAD
YOU KNOW IT KENKAI KRIAL YOU FUCKING TRASH TRANNY CHASING JANNY
I'M COMING TO KILL YOU IN YOUR HOUSE IN GEORGIA
IN REAL LIFE

 

[burусhU1О]

favorite /dbs/ screencaps

 

[AnOminous]

View attachment 7229458
Gee Hiro. You really put that cybersecurity cert to good use...

Total Gookmoot Death.

 

[Throwaway Email Enjoyer]

There was a setuid binary called /usr/bin/suid_run_global which simply execves a perl script. Said perl script was owned by www so it could be hijacked to acquire a shell.

The best part being that in scripts the suid bit is generally ignored by the interpreters, you have to go out of your way to wrap it in an exec* that calls setuid(0) to run a script not owned by root as root.

 

[Johnny Ringo]

never said it was all i said was it's wrong to call 4chan dead...

...social media's panopticon like algorithm effect amplifies it every literally who retard's tweet to a massive audience

But you agree that it's lame and nothing of note really happens anymore? I like 4chan. I've posted there for nearly 20 years now, there's some excellent discussions to be had on smaller boards especially on niche topics that you'll be hard pressed to have elsewhere without wading through some circlejerk on discord or whatever.

But at the same time there's hardly a sense of community and culture anymore and this is amplified by the fact every other fucking thread is a twitter screencap.
4chan doesn't create culture, it subsumes it.

 

[Pointless Debater]

I used to post on 4chan many years ago (stopped regularly visiting there about a decade ago), and has lurked here occasionally for a number of years, here for the popcorn/debate. I visited a smattering of boards, but mainly the tech board. I eventually stopped as the quality of conversation got worse (maybe it was never good) and I got tired of arguing with internet strangers (hence, the username here.)

(Boring nerd shit coming).

I don't think it's a surprise to anyone that 4chan's code was not of the highest quality. I think it was shocking to see that at least from a backend software perspective (FreeBSD, PHP versions at a bare minimum) weren't updated for a decade and went EOL almost a decade ago. PHP 5.6 versions have over 100 CVE (vulnerability listings)... by all accounts, no regular care and feeding (updates) were done on the backend software. The end vulnerability as I've read it is that some boards permitted PDF upload, but the library they had was so old/vulnerable you could give it postscript with a fake PDF extension and then execute arbitrary code (whatever malicious code you want).

Now updating the board software itself, I'm really not that surprised - it's not like there's a ton of features added to 4chan in the last decade. And when the board software had some rewrites to improve HTML output and create a read only JSON API to reduce data consumption/server load, that had a dev domain with a developer capcode. From what I understand, that wasn't moot - that was moot bringing in Max Goldberg (of YTMND). He had a test.4chan.org domain many many years ago and that went down nowhere before it came back and the JSON API came about circa 2012. Leaks of the current source code show that it is pretty dogshit in quality with really bad practices (hardcoded credentials being just one of many examples) and that it used deprecated PHP calls to MySQL that would have gone from deprecated (shouldn't be used but still works) to unsupported (it would have broken the site had they updated the PHP version).

Okay, so boring nerd shit aside, tl;dr, what does this mean? In short, the site returning anytime soon is dubious.

1. If they update the site to remove the hole that the hacker used to get in (patch the PDF library only), the site is now known to have multiple end of life versions of software with vulnerability. The chance that someone would hack their way in is 100%.
2. If they update the backend software (PDF library, PHP, MySQL, FreeBSD OS) without updating the site software, at least for PHP, the site will break.
3. If they update the backend software and then perform bare minimum updates to get the site code working on the new PHP version (more probable since there seems to be a large amount of community interest that didn't previously exist), the source code for the site has leaked, and it is pretty trash. The likelihood that someone finds an exploit is pretty high.
4. Taking the existing site code and taking a larger overhaul of it to screen it for security/change it to be more resilient from a security perspective is not trivial and will take more time. It still bears risk of some autist going through the code and stashing a vuln aside.
5. If they go and implement a newer board software that isn't as much of an outdated mess as Yotsuba was on 4chan then that will take time, will have compatibility issues with the current DB, etc... however, people on other sites (such as refugees on other sites trying to "fix" the code) say that despite all its ills, 4chan's code is a dumpster fire, but highly performant, which could be a scalability issue. Also, all the customization (bot fingerprinting, ban system, etc.) would have to be redone.

A few other things:

1. From what I've read, everything they did was tested in production, the leak has files where there are files in the vein of whatever.php and whatever-test.php. This is probably why some updates to the site software were made but the backend was untouched (no non-production/test environment to see if your changes were going to stop the site or grind it to a halt).
2. Once an environment is compromised that badly, you just flatten it and rebuild it, you don't trust the compromised environment, meaning they should reinstall everything on the box. Setting up from scratch can take time, but making sure the box was clean would be more arduous and time consuming.
3. How thick or thin of skins the doxxed janitors/mods have remains to be seen. Hard to run a site without mods if you want advertisers (and Hiroyuki is in it for money, so that matters.)

My guess? 4chan returns in some form, minimum time two weeks. If it's less than that, there's a very high chance they're using dogshit from the old site in the relaunch that will get exploited. If they take too long though, there's a large risk that a lot of users start to move on.

The biggest wildcard is if they realize how much work it's going to be to relaunch the site, whether there's anybody they trust for free/cheap to be involved, and that if it's too much effort, Hiroyuki may just pull the plug and look to sell the site and wash his hands of it, and it doesn't come back.

Time will tell.

 

[Rapist Monkey]

View attachment 7229575

why would you take away individual freedoms and censor the Net?

 

[GillyLilly]

I think a good example of why 4chan jannies are so hated is when Billy Mitchell won his lawsuit several weeks ago. The rules of /v/ lay out that it is a board discussing video games and video game culture. Well, Billy Mitchell is clearly a major figure in video game culture, and this was a topic that a lot of people wanted to discuss. Jannies were patrolling the board deleting anything that looked like a Billy Mitchell thread, including OPs that were just about the Donkey Kong arcade game.

Now if the board was like 25% threads about Billy Mitchell and his lawsuit, then yes, of course you've got to clean some of those up, but just one thread about this topic that clearly a lot of people wanted to discuss isn't going to hurt anything. Especially considering how many threads are just dedicated to masturbating to fanart of video game characters, which there are other boards for.

the sad thing is we already knew the jannies were hardly one step below discord mods aka destroy intelligent discussion replace with rage bait and porn but when the new mods come in i hope that shit will finally get the purge it needs