Plagued 4chan - the Internet hate machine

  • 🐕 I am attempting to get the site runnning as fast as possible. If you are experiencing slow page load times, please report it.

Will the 4chan hack be the end of it?

  • Yes, goodbye forever 4chan

    Votes: 1,031 18.5%
  • No, they will rise from the ashes, stronger than ever

    Votes: 343 6.2%
  • This will rattle them but it will be forgotten about next week

    Votes: 2,322 41.6%
  • I am just here for the janny phonebooking

    Votes: 1,093 19.6%
  • What the fuck is 4chan

    Votes: 218 3.9%
  • Yotsuba&!

    Votes: 569 10.2%

  • Total voters
    5,576
No one really knows. He made his money from 4chan and Google and probably doesn't need to work another day in his life if he doesn't need to. Keeping on the down low is the smart move.
Yeah, that wouldn't surprise me. I do unironically wonder if he hasn't retreated to a goon cave on some tropical island to rp colon three as a female toddler or some other troonery. He'll resurface when least expected in very agp circumstances
 
I don't understand how the 4chin admins could be so retarded anyway.

```
# freebsd-update fetch
# freebsd-update install
# pkg update
# pkg upgrade
# reboot
```

eh wa la, you have updated your OS and PHP and Ghostscript and whatnot that haven't been touched in 10 years.

then disable PDF upload and you're mostly good to go
They are on 10.1 now on a custom kernel. FreeBSD is up to 14.something now. Updating is only supported to the next major version. You cant jump from 10.x to 14.x. Even going up one version you have to go through all the release notes to see what changed in user land.
And 4chan is a big mess of crusty old code. I doubt it would just run on a modern version of FreeBSD and php. It's going to be a big project to port it in to this decade.
 
/gig/, a year ago
He was posting IRL photos of some merch he bought while the thread was an unusable disaster from shitposting, and in the background of his screen you could see janny tools with 90something ignored reports in just one thread.
Found it.
e237fff1dd72ea4152e2819e0e14bd626866e71ed34163da5e66396201062c50.webp
This is who is was moderating your site by the way.
 
you're astonished? Why? Are you fucking retarded?

It came out as part of these leaks that the jannies are mostly fucking feds and account sharing and all the janny activity is a demoralization campaign to lower the quality of the site, prevent its users from engaging in open discussion, and alter their opinions. They weren't trying to moderate the boards to improve board quality
As someone else said already - the vibe of 4chan became low effort. They fostered this themselves (the jannies), and in turn project outwardly what they are internally.
Sad, really, but here we are. I cant believe Ive lived long enough to have an account here now, but reading this thread and some others gives me some hope there will be some good discussion on here.

Further, as others have also said, 4chan didnt just go to shit in a vacuum, the rest of the internet has also. Zoomies have zero attention span and cant and could never handle being given social media access at such a young age.
 
Was the server really running on a Mac Mini?

Date of Breach: April 2025
Environment: FreeBSD (EOL), PHP (legacy), Ghostscript/ImageMagick
Stack: Yotsuba-based imageboard software

Key Failures
– Running EOL FreeBSD and unsupported PHP
– Allowed .pdf uploads on legacy boards (/po/, /tg/)
– No MIME type checks or extension whitelisting
– Executed unfiltered input via eval(), system(), shell_exec()
– No sandboxing, no disable_functions, SSH exposed

Relevant Code Samples

postfilter.php:
PHP:
shell_exec("some_command $file");
system("convert $file output.png");

HTMLPurifier.standalone.php (line 21864):
PHP:
$result = eval("\$var = $expr;");

InterchangeBuilder.php (line 127):
PHP:
$directive->default = $this->varParser->parse(
$hash->offsetGet('DEFAULT'),
$directive->type
);

Attack Flow

1. PDF uploaded via board with legacy file support

2. Content read by vulnerable parser or CLI processor

3. Payload reaches eval() or system()

4. Shell command executed (e.g. reverse shell, SSH key injection)

5. Attacker escalates to root via misconfig

How They Could've Prevented It
Bash:
freebsd-update fetch install

pkg update && pkg upgrade

reboot

Then:

– Remove all
eval(), shell_exec(), system()

– Enforce:
Code:
disable_functions = system, exec, shell_exec, passthru, popen, proc_open, eval

– Validate uploads via mime_content_type()

– Disable PDF uploads

– Drop web user privileges, isolate SSH

Conclusion
No zero-day. No fancy exploit. Just years of tech debt, lazy security, and root via a PDF. Completely avoidable.
 
Maybe I'm naive, but I didn't know you could dox someone with such limited information as an IP address and a spoof email.
when one of these retards downloads some malware that's "no big deal" and they clean it with an antivirus or an adware remover, it actually takes a screenshot of their desktop and scrapes basic system info immediately, before it's even detected. It scrapes cookies and checks which sites you're logged into and grabs the most recently cached versions of targeted websites and zips them up and sends it off to a database within seconds of installation.

Then the malware shows a popup message or directs the user to an advertisement and allows the user to totally uninstall it without issue or complaint, as if it really was no big deal. But in the background every login to every website, every email address, every StreetView search, every social media account, etc. is being vacuumed up and combined together in a big database that is used to de-anonymize users with just an ip address or a spoof email.
 
As someone else said already - the vibe of 4chan became low effort. They fostered this themselves (the jannies), and in turn project outwardly what they are internally.
Sad, really, but here we are. I cant believe Ive lived long enough to have an account here now, but reading this thread and some others gives me some hope there will be some good discussion on here.

Further, as others have also said, 4chan didnt just go to shit in a vacuum, the rest of the internet has also. Zoomies have zero attention span and cant and could never handle being given social media access at such a young age.
"The internet went to shit because I can't find child porn on the first page of my imageboards anymore."
 
you're astonished? Why? Are you fucking retarded?

It came out as part of these leaks that the jannies are mostly fucking feds and account sharing and all the janny activity is a demoralization campaign to lower the quality of the site, prevent its users from engaging in open discussion, and alter their opinions. They weren't trying to moderate the boards to improve board quality
where did it come out that they are mostly feds?
 
Hey I'm from 4chan and came over here while things get rectified. Kiwi is cringe and gives me heavier incel vibes, not to mention the fact that this place seems also more smug. What the fuck are you smug are you guys so smug about? You fucking avatar losers. Anyways, fuck all of you. Maybe one day you'll get some head or your asshole licked and then you can be less miserable. Later.
>my guy I'm getting suchhh strong incel vibess here 😭😭😭 im going somewhere else yall so smug and extra n shit, maybe just get laid?

You have to go back
 
  • Agree
Reactions: Qonas
Further, as others have also said, 4chan didnt just go to shit in a vacuum, the rest of the internet has also. Zoomies have zero attention span and cant and could never handle being given social media access at such a young age.
That's more a result of poor parenting, which has led to e celeb culture taking root and propelling idoltary of video game playing as a job.
 
Back