A message regarding the enemies of this website

Status
Not open for further replies.
I know Null basically covered this in the main post but i'm going to throw it down here for any newbies who couldn't be bothered to read the whole post.

Basically, be aware of what you're getting into here, What may just be a source of amusement for you could potentially come back to bite you in the ass if say a potential employer in the future found out about this they'd see it as discriminating against disabled people, not an ideal trait for an employee plus who the hell wants every tumblrina knowing your name and where you live
Yes, we are a forum that laughs at people like Chris and ADF. Unlike others of this site, a potential employed knows nothing of someone like ADF other than that he's just some homeless guy we a laugh at for no or some sadistic reason, despite the reasons we have to laugh at him. This is why many of us should try and be careful on the internet. We don't want to put everything about ourselves out there, especially if some tumblrina tries to use it against us.

That's why whenever they ask for personal information on sites like this I give a bunch of stupid and bs answers.
It's also why some of us use a different username when we sign onto other sites along with using another email address.
 
A lot of people do need to be warned and made aware of how simple connecting a real life identity to a profile here or anywhere else online can be.

However on the flip side I feel like the surge in discussion and practice of doxxing have far overblown its effect.
Obviously if you are a well established gentleman or lady you shouldn't go flinging around photos of your lewd bits, posting real life contact info, work place info, ect. Ect.
Everyone's level of comfort with what they share is going to be different and will change based on their own personal life.

Basically don't let the threat of doxxing cause more damage to you than the action itself. Just that fear really will for some. Stay safe.
 
This is a subject that has interested me for a while.

Doxxing is one of the most cowardly things a person can do. It's admitting you have no good leg to stand upon so you must silence the other person through fear.

It's something I've thought quite hard about. I've learned a great deal about how to dox individuals and how easily people post their information on the internet. I've accidentally found critical information on people through just googling their username. From there I was able to find things like links to Facebook, which would fetch stuff like their address or their phone number.

It's crazy how easy it is at times. Something I recommend everyone do is to try and dox yourselves so you can plug up any leaks you find.
 
In light of this I have to ask; why is Steam integration supported? Given the level of interconnectivity that people attach to their Steam accounts, surely that's just a massive honeypot?

There are options in the personal details field for people to link their twitter and facebook accounts. Steam is pretty benign compared to that.
 
In light of this I have to ask; why is Steam integration supported? Given the level of interconnectivity that people attach to their Steam accounts, surely that's just a massive honeypot?
You can change your username with your Steam account by just editing your settings.

If you're prone to using your real name as your username on Steam I don't know what to tell you.

There's also the fact there's already a Steam group. So if you wanted to find out a member's steam profile it's not that hard to do already unless you intentionally hide it. *cough* @Glaive *cough*
 
I'm so scared :roll:
legion.png
 
After what went down with @Wizzrobe, I was inspired to ask permission to start a thread/group for people to voluntarily discover how "doxxable" they were, in order to strengthen their own security. Since that incident, I've been bouncing back and forth on whether or not this would even be a good idea (personal information would be sent via PM). No matter how I tried to rationalize this, it felt like a huge security risk, and the last thing I want to be responsible for is a massive compromise of the forum full of people I like, respect, and waste my spare time with.

So instead, I'll draw up a list of tips and general guidelines. Some of this will be either common sense or something Null has already brought up, but I'll lay it all out here anyways.

One of the most glaring problems I've found, after just a cursory glance at a few threads (especially in the Tumblr subforum), is that people tend to reveal a lot more than they should about themselves. I know it seems like a good idea to compare one's own struggles with a Tumblrina in an effort to get them to feel that they aren't alone, or that they can improve themselves, but after all is said and done you're still sharing more about yourself than you should. Flipping through a few choice threads, I've been able to discover various Kiwis' mental/physical disorders, what kind of job they currently have, sexual preferences, embarrassing blogs, etc. "Hide your powerlevel" isn't a suggestion or a guideline, it's a personal rule you should follow as strictly as you possibly can. Anything can and will be used against you.

Another good tip is to keep separate "personas" when it comes to your internet habits. Keep all of your porn and weird fetish stuff completely separate from your other internet endeavours. Have separate identities for your personal hobbies. I first got this idea back in high school when I realized it was best to use a clean email address for "professional" use, so you're not putting "xxx_bloodyfistfuck1987_xxx @ dickmail.com" on your resume. Don't use the same name for everything, unless you're specifically trying to get your name out there (artist, programmer, whatever), and even then, keep that separated from everything else. If I can Google your username to find your DeviantArt, then from there your alt usernames, then from there your Hardcore Prawn username, so can every Dick and Jane online who can use a search engine.

Always remember that if someone has access to your email address, they have access to almost everything else.

If you have a hard time keeping up with managing several email addresses, I highly recommend using an encrypted password manager like KeePass, especially if you're having a hard time keeping up with all of the various passwords for your logins (and if you don't use different passwords, you damn well should). I'm particularly fond of KeePass because it allows you to set up randomly-generated passwords, which are way stronger than anything you could think of. There's also a plugin for one-time passcodes, if you're the type who likes to have authenticators for your accounts, but feel squeamish about the idea of losing your keys when your phone gets lost/destroyed.

When sharing screenshots, be extra careful about what personal information could be seen. If you use anything Google, your email will most likely be plastered somewhere on that screenshot, whether it be a search result, YouTube page, Google maps, etc. I shared some screengrabs from Maps on the divisive Shaner thread, and just before I posted the message, realized my email address could be shown right on the screencap. If you're going to do anything like that, I recommend using Incognito Mode or whatever the equivalent is on other browsers. Or if you're just trying to grab a specific part, use Gyazo.

Keep in mind that many sites abuse trackers, especially Tumblr. I cannot stress enough how important it is to use addons like AdBlock and Ghostery to better protect yourself. Checking the "Do Not Track" option in your browser is not good enough. Addons like this are a little sketchy on mobile, so if you can avoid it, try to limit your mobile browsing habits to things you know you can trust, unless you have beefy enough devices that can handle the Firefox browser with addons without it taking a dump over all of your memory.

Circling back to the multiple personas advice: if you want to share your stuff with fellow Kiwis, it's a good idea to make a separate YouTube/SoundCloud/whatever specifically for that sort of material. Again, use a password manager if you have a hard time keeping up with all of the user:pass combinations when juggling accounts. It also wouldn't hurt to vanity search once in a while to find out how easily doxxable you could be for the average bear. If you find a hole, plug it.

Be safe and be smart.

Addendum: several sites offer a password recovery feature that asks about personal information only you should know about. In theory this is a good idea; however, if someone knows you well enough (or if you powerlevel too much), it wouldn't be too hard for someone else to get into that. I've found it's really easy to pull this off on PhotoBucket, Facebook, and more. The best thing to do with these, is give a bullshit answer that isn't tied to you at all. For example, your birthday could instead be a holiday or historical event. Your first pet could be something false, but funny enough to remember. Mother's maiden name, school you went too, etc: give false answers to all of these. Even if someone knows you well enough to find out your first pet was "Chairman Meow", they wouldn't be able to guess you jokingly put "Bootsy Collins" in there instead, or that your first school was actually "Elbert Hubbard's School of Hard Knocks".
 
Last edited:
Status
Not open for further replies.
Back