Hi guys, as you all might know I'm a !codecel. Recently I discovered a vulnerability in the site, which from what I can tell has existed for a while. In exchange for the countless hours of work I put into combing through the code and testing exploits, I'd like a little sum sum from @A (not monetary, just stupid shit/basic respect, see below) but he does not seem interested in cooperating with me.
Among the options presented to @A he had were reinstating HeyMoon or calling me on groomercord/snapchat, both of which he denied without explanation. I'm happy to help him out with his (arguably transphobic) website, but I'm not going to just spoonfeed him code while he gives me the cold shoulder. I would like to mention that HeyMoon (@CarpathianMoon) had utterly no knowledge or consent or anything to do with this, I just recently heard about the drama and thought that it's something nice that I could do as, from what I have heard, HeyMoon was unjustly removed.
For your information: I am NOT going to give this info out to anyone or use it nefariously. I INTEND to do good for the website; I have not stolen any IPs or anything, but I have verified that the exploit works and would give an attacker that ability. I would best describe my alignment as "Chaotic Good". I'm not intending to hold this over anyone or anything; I will NEVER release the exploit unless given explicit permission from @A after it's patched. But I would like to use my small bit of leverage that I've stumbled upon to improve the site, further my own (innocuous) goals, and maybe take @A down a peg.
Please note that an IP/username leak isn't the worst in the world either. Worst case scenario, people figure out what city you live in and your ISP. Note that large institutions might be their own ISP, so people might, by extension, be able to figure out where you work. (Of course, law enforcement would be able to find you too). But otherwise it's not that bad. If you are super concerned about this, you should be using TOR or a VPN anyways, as any website on the internet can see your IP. The real kicker here is that this exploit allows you to connect a username to an IP, which is perhaps a bit more information than many would be willing to give out.
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
oops i think i hit the angwy wacist button
Jump in the discussion.
No email address required.
I usually just pick a funny image from camera roll and hit submit
Jump in the discussion.
No email address required.
that ones good
Jump in the discussion.
No email address required.
More options
Context
More options
Context
just release it all to create drama, but keep posting here.
Jump in the discussion.
No email address required.
Randomize which real IPs belong to which account for ~5% of the data first to make it extra fun.
Jump in the discussion.
No email address required.
More options
Context
More options
Context
DING! DING! DING! DING! DING! DING! DING! DING! DING! DING! DING! DING! DING! DING! DING!
Jump in the discussion.
No email address required.
More options
Context
More options
Context
!chuds
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
More options
Context
More options
Context
!verifiedwhites do the sneedful
Jump in the discussion.
No email address required.
More options
Context
More options
Context
carp ban this guy for bypassing the slur filter
Jump in the discussion.
No email address required.
More options
Context
More options
Context
Prove it by posting my IP, I give consent or whatever
Jump in the discussion.
No email address required.
109.148.188.174
United Kingdom, Kettering
Firefox (116.0)
Windows 10
Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/116.0
host109-148-188-174.range109-148.btcentralplus.com
British Telecommunications PLC
Jump in the discussion.
No email address required.
God darn she's right
Jump in the discussion.
No email address required.
Can't they execute you there for posting current meta soyjacks?
Jump in the discussion.
No email address required.
Local britbong chud posts sharty jacks -- JAILED for hate speech. Many such cases!
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
GEM
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
More options
Context
LMAO is this actually correct?
If so I kneel
(pls dont doxx me queen)
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
More options
Context
Pls don't compare revealing your city to doxxing, it's not even close.
Jump in the discussion.
No email address required.
Assuming the average city-region contains 2 million people, this is already around 12 bits of entropy of the 33 you need. You get another bit for the poster being male, and I suppose around 4 for the likely age group of our userbase, so only 16 to go. So you need to filter out half of the remaining population only 16 times in a row to find the person.
Add username, linked reddit accounts, leaked info about hobbies, job, interests, married/incel status, and it becomes plausible that you can filter out enough people to hone in a very small set of plausible people that an account might belong too.
Jump in the discussion.
No email address required.
If they had revealed some much about themselves, then it wasn't the IP that doxxed them.
It's not like it matters anyway, why would somebody come to your house if you're not a giga power user. Neighbors afraid of the doxx think way too highly of themselves.
Jump in the discussion.
No email address required.
If you live in the US, you can't be blackmailed with your account. In europe, you would at least face social repercussions.
I agree that if the user leaks tons of information, country + maybe city is already in the open. IP just makes it easier to find.
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
More options
Context
More options
Context
Prove it
@Transgender_spez
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
Call your IP and say the password
@Transgender_spez
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
More options
Context
More options
Context
Jump in the discussion.
No email address required.
More options
Context
Jump in the discussion.
No email address required.
More options
Context
EW
Jump in the discussion.
No email address required.
More options
Context
Post mine
Jump in the discussion.
No email address required.
too many people are asking and i got other stuff to do. but i did it with multiple ppl already in this thread. im doing it manually rn bc i havent written any kind of script to harvest them or anything
Jump in the discussion.
No email address required.
All good, I'm using a mobile network atm.
It's 108.147.102.32 , in case you maybe wanted to verify further or something. doesn't matter much since some r-slur keeps getting us banned from 4cuck for posting racism on /k/
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
do me do me do me do me do me
Jump in the discussion.
No email address required.
More options
Context
More options
Context
192.168.0.1
Jump in the discussion.
No email address required.
when the frick did you get access to my router you creep
Jump in the discussion.
No email address required.
programmer socks
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
Jump in the discussion.
No email address required.
More options
Context
69.80.08.69
Jump in the discussion.
No email address required.
She's right
Jump in the discussion.
No email address required.
More options
Context
More options
Context
Ooo ooo do me next do me next
Jump in the discussion.
No email address required.
More options
Context
More options
Context
IP doesn't really matter, pretty much for the reason you said. Unless you write your r-slur manifesto here it would make it easier for the feds to hunt that "person" (carp) down.
Jump in the discussion.
No email address required.
ye but mix it in with api access to posts and the general demographic unironically living near their ip zone and you've got quite the data dump for geographic trends
(i'm pinged here and only read the title of the post from my notif, 65% sure this comment will make sense)
Jump in the discussion.
No email address required.
It narrows you down to a city, which is a lot worse than anywhere in the world. So let's say that you post a pic w a tree or smth in the background, I now know that I can scour Google streetview of that city for that tree to find out exactly where you were. It narrows down the search area by a lot, but on its own its useless.
Jump in the discussion.
No email address required.
If you're dumb enough to do that near your home it really doesn't matter if your IP got leaked you're already r-slurred enough
Jump in the discussion.
No email address required.
More options
Context
Lmbo, depends on the city. Have fun scouring google street view for a tree in any decent sized city, especially if it's in a back yard or park or some shit.
Where is this tree:
Jump in the discussion.
No email address required.
More options
Context
what tree
post details fully please (i have no idea what you are possibly seeing)
Jump in the discussion.
No email address required.
its a hypothetical tree dumb butt
Jump in the discussion.
No email address required.
Is that like an aspen
Jump in the discussion.
No email address required.
More options
Context
oh i thought u were replying to another comment
The comment here I thought the post was somethint about meta's threads having an ip leak
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
lol k
@Transgender_spez
Jump in the discussion.
No email address required.
More options
Context
More options
Context
lul i thought this was a thread about threads in meta but it's a meta thread
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
thanks morally-ambiguous transgender hackerbro(sis)
Jump in the discussion.
No email address required.
More options
Context
This is kind of cringe but also kind of funny I guess
Jump in the discussion.
No email address required.
Rare August W. For a foid anyway.
Jump in the discussion.
No email address required.
I'm not a foid, check my feet pics swine
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
rdrama.jpg
Jump in the discussion.
No email address required.
More options
Context
More options
Context
Fake pysop implanted to induce fear
try harder + fake + capy more
Jump in the discussion.
No email address required.
Would you like to be a guinea pig for the class? I've already gotten 1 persons ip (voluntarily)
Jump in the discussion.
No email address required.
Nah. Sounds like good enough of an excuse to drop rdrama for now, which I was already planning
Jump in the discussion.
No email address required.
NOOOO MY BABBBYYYYY
Jump in the discussion.
No email address required.
I'm too consistently busy with college and work to be bullied by s online for a few hours every day.
Jump in the discussion.
No email address required.
I'm not here to bully you!!! I'm here to LOVE you!
Jump in the discussion.
No email address required.
Truly?
Jump in the discussion.
No email address required.
Yes
Jump in the discussion.
No email address required.
Awwh thank you
Jump in the discussion.
No email address required.
More options
Context
More options
Context
!friendsoflappland
Jump in the discussion.
No email address required.
What?
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
More options
Context
More options
Context
@XY
I love seeing a "I'm a sensitive baby who cannot handle words" button attached to every single reply I receive it really makes me feel like this is a safe place
Jump in the discussion.
No email address required.
More options
Context
More options
Context
Hope to see you around, friend!
But you also would have to be a real kittyass b-word to Drop because of some IP-nonsense.
Jump in the discussion.
No email address required.
I'm just getting very busy and rdrama isnt the best use of my time.
Jump in the discussion.
No email address required.
Extra shifts at Taco Bell 😭
Jump in the discussion.
No email address required.
I know I'm going to be made fun of for saying this but I just don't care, working long hours at Taco Bell really is hard and I feel totally drained after a day of work.
Jump in the discussion.
No email address required.
Tbh I understand, back in my food service days I remember being exhausted 😴
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
More options
Context
More options
Context
More options
Context
More options
Context
Meds schizo it's all real
Jump in the discussion.
No email address required.
More options
Context
More options
Context
Frick. I swear to god if any of you show up at my house
Secured my spot as a top 100 most memorable rdrama poster
Jump in the discussion.
No email address required.
!dramatards if you show up to my house I am fricking you in the butt regardless of your s*x
Jump in the discussion.
No email address required.
awesome awesome that's great
gonna just send some people over to you
Jump in the discussion.
No email address required.
More options
Context
More options
Context
See you soon
Jump in the discussion.
No email address required.
More options
Context
You should tell me where you live so I can help you cover more than one entry point.
Jump in the discussion.
No email address required.
will you cover my "entry point"
Jump in the discussion.
No email address required.
Go to church
Jump in the discussion.
No email address required.
More options
Context
More options
Context
Oklahoma
Secured my spot as a top 100 most memorable rdrama poster
Jump in the discussion.
No email address required.
More options
Context
More options
Context
How is somebody gonna get you house from an IP? Lol
Jump in the discussion.
No email address required.
More options
Context
More options
Context