Reported by:
  • ACA : Google: how to libertarians multiply?

Oopsie whoopsie, someone did a little fricky wucky and admited to protecting a known libertarian on their fediverse instance, poa.st

Bottom Text

For context, one of my favorite people on the fediverse who I don't understand at all is bot. She's active on http://seal.cafe currently (hosted by friend of the site & cat enjoyer @kroner), and is constantly getting into fights with lots of people about random issues; I enjoy these even without context because I'm a fan of incendiary rhetoric and bot is a world class shit talker who also seems to feel strongly about the things she choses to argue about.

If you don't take my word for it, here's a snapshot of recent box posts

https://i.rdrama.net/images/16850802876566367.webp

You might have seen that http://poa.st and http://bae.st, two popular instances on the free speech zone of the fediverse got hacked recently. We had a small thread here that didn't get the attention it deserved but there's a lot of rightoid seethe going on. Reminder that http://rdrama.cc is still the best instance that has all the marseys and has never been hacked; shout out @nekobit. If you remember the http://chudbuds.lol hack/leak, you'll know that private messages sent on the fediverse/Activity Pub are not end-to-end encrypted, so naturally lots of alt-tech wannabe e-celebs got their DMs leaked from this. For further context, graf is the admin/owner of http://poa.st who has recently feuded with Null and Crunklord420, over some dumb shit (watch MATI from 3 weeks ago if you want some context); he also defederated http://rdrama.cc over a meme nose emoji that he called doxing his admin (his admin runs a lolicon posting instance and also had a falling out with graf, so the image isn't doxing anymore but http://rdrama.cc is still blocked because he's a b-word)

So here's the meat. Box has been posting about s*x pests that use http://poa.st for well over a year at this point. As with many posts of someone claiming someone else on the internet is a s*x-pest, I was initially credulous, until this leak came out in which graf goes to bat for a guy who he says admitted to raping a minor to him directly. You could potentially get away with just staying silent on this issue, in my eyes, especially if you're wearing the mask of a free speech extremist alt-tech nerd, but graf is not that. He blocked http://rdrama.cc initially from sending any information to his instance, and later blocked both sent and recieved information from our instance to his. He blocked http://kiwifarms.cc under the pretense that http://kf.cc allowed cp on its servers, despite the fact that the 3rd party instance he claimed was the source of this cp had the policy set against it on the http://kf.cc server as it did on http://poa.st. Null sperging on the graf question about a month ago here.

Onion link for anyone who wants to explore more because kiwi farms is powered by a cat on one of those big wheels where they can run if they feel like it

https://i.rdrama.net/images/16850802878141081.webp

I have done my journ*listic duty and asked bot about this revelation, the response was incredibly keyed

https://i.rdrama.net/images/16850802881319487.webp

TLDR: Graf is homosexual (bad kind). Bot @ http://seal.cafe is vindicated. I am always right about fediverse tyrants being r-slur neurodivergents. Crunklord420 keeps being based and Terrypilled.

@Aevann, IDK if this is enough of a rightoid exposé to qualify for grant marseybux, but I love you

Someone remind me to pin award this in the morning so that people see this because I have to spend some marsey bux and also this is good drama. k thanks


https://i.rdrama.net/images/17187151446911044.webp https://i.rdrama.net/images/1735584487Pd3ql1pai5_mfA.webp https://i.rdrama.net/images/17177781034384797.webp

163
Jump in the discussion.

No email address required.

:marseyxd: I knew bot wasn't lying :marseydeception: this entire time, and now they're vindicated. I wonder :marseygigathonk: what else will come out of these leaks

Jump in the discussion.

No email address required.

I've 180'ed from thinking bot is insane to thinking she know far more than I do about randos on activity pub being scum. I have nothing but awe for her now. Incredibly :#marseygem:


https://i.rdrama.net/images/17187151446911044.webp https://i.rdrama.net/images/1735584487Pd3ql1pai5_mfA.webp https://i.rdrama.net/images/17177781034384797.webp

Jump in the discussion.

No email address required.

Female :marseywomanmoment: intuition is powerful

Jump in the discussion.

No email address required.

maybe bot is right

maybe i am secrectly a wef paid libertarian :marseyahs:

Jump in the discussion.

No email address required.

brother, you dopn't need to be a genius :marseyslab: to think :marseybigbussyhunterlove: that a terminally online :marseyidio3: admin :marseycarppearlclutch: of a super :marseylueshi: small :marseytiny3: social :marseyredcheck: media :marseyjourno: site can read user's doxxes. It then follows if he didn't ban him it was probably a coverup, nobody needed a million :marseysamhyde: different threads on lolicon to figure :marseypop: this out.

Jump in the discussion.

No email address required.

I've always tried to maintain friendly relations with graf because there :marseycheerup: are people on Poast :marseyfediverse: I like talking to, but this is fricked.

Jump in the discussion.

No email address required.

https://i.rdrama.net/images/168508399918493.webp

for a second i thought @box was cool but thank god it was just a spelling error on your part

Jump in the discussion.

No email address required.

I AM COOL :tayaaa:

Jump in the discussion.

No email address required.

I've confused a few people from fedi with rdrama people with the same username. If she's really the same @box here than I will be buying her an engagement ring.


https://i.rdrama.net/images/17187151446911044.webp https://i.rdrama.net/images/1735584487Pd3ql1pai5_mfA.webp https://i.rdrama.net/images/17177781034384797.webp

Jump in the discussion.

No email address required.

i don't think it's likely :marseysmug2:

https://i.rdrama.net/images/16850846489848468.webp

Jump in the discussion.

No email address required.

typing do be difficult some days. I do wish only the best for bot and box chads


https://i.rdrama.net/images/17187151446911044.webp https://i.rdrama.net/images/1735584487Pd3ql1pai5_mfA.webp https://i.rdrama.net/images/17177781034384797.webp

Jump in the discussion.

No email address required.

Dramamine casually Chaos Chud-Dunking in the middle of the night like

https://i.rdrama.net/images/16850831385965395.webp

Jump in the discussion.

No email address required.

heck threads are when they come to you! Also we should get a group together and watch this movie at some point (full disclosure, Wiz said it was shit, but I still want to watch it) https://i.rdrama.net/images/16850833853574955.webp


https://i.rdrama.net/images/17187151446911044.webp https://i.rdrama.net/images/1735584487Pd3ql1pai5_mfA.webp https://i.rdrama.net/images/17177781034384797.webp

Jump in the discussion.

No email address required.

"Play Trump's favorite playlist" starts dancing

Yup, I smell kino.

Jump in the discussion.

No email address required.

>Genetic engineering has given him eternal life... and large hands

:mar#seyemojirofl:

Jump in the discussion.

No email address required.

:marseyxd: I'm in!

Jump in the discussion.

No email address required.

Didn't you miss us watching the globglogabgalab movie? We probably can do that again first (and I for one will gladly join!)

Jump in the discussion.

No email address required.

Add Zardoz to the mix

https://media.giphy.com/media/5DM35KwDpbJJe/giphy.webp

Jump in the discussion.

No email address required.

No I was there, Dramamine was already a taken name on cytube tho :marseycry:


https://i.rdrama.net/images/17187151446911044.webp https://i.rdrama.net/images/1735584487Pd3ql1pai5_mfA.webp https://i.rdrama.net/images/17177781034384797.webp

Jump in the discussion.

No email address required.

It’s not against the rules :marseypeterson: to r*pe minors once upon a time, and the people who were spreading information about the libertarian were just stirring shit or trying to manipulate him into banning someone for something that wasn’t a rules :marseypeterson: infraction.

It makes an neurodivergent :marseyslm: kind of sense @Dramamine

Jump in the discussion.

No email address required.

!downmarseyrs Greu is doing a heckin libertarian apologia.

Jump in the discussion.

No email address required.

That's my bit!

Jump in the discussion.

No email address required.

>It’s not against the rules to r*pe minors once upon a time

I can't parse this sentence no matter how often I read it

Jump in the discussion.

No email address required.

Reportmaxxer: “User so-and-so r*ped a minor a few years ago!!” :marseyreportmaxxer:

Admin: “Ok, and?” :marseyautism: :marseyretardchad:

Jump in the discussion.

No email address required.

!dramatards !edgelords You very fine people should have strong opinions on this comment.

Jump in the discussion.

No email address required.

It’s not against the rules to r*pe minors [...]

- Greu, 2023

:#marseynotes:

Jump in the discussion.

No email address required.

Won’t someone think of the hecking rule-abiding :marseypdf:iles

Jump in the discussion.

No email address required.

Depends on whether they are based or not :chudsmug:

Jump in the discussion.

No email address required.

>blah blah blah blah blah, discuss

No.

:#marseyatsume:

Jump in the discussion.

No email address required.

Reported by:

Shut up I’m fishing for a ban award

Jump in the discussion.

No email address required.

>43k coins

The goyim fear the nonbinary jew

Jump in the discussion.

No email address required.

Goofy neighbor

Jump in the discussion.

No email address required.

jfc it's friday greu log off n think bout the stupid shit u just said

Jump in the discussion.

No email address required.

Keep yourself safe

Jump in the discussion.

No email address required.

ur such a cutie! :marseyhearts:

Jump in the discussion.

No email address required.

Everyone involved in this is turbo online and should close their laptops and move to a monastery ASAP

@nekobit is cool tho, keep up the terminal illness

Jump in the discussion.

No email address required.

thanks :hapyday:

i applied some apache mitigations but apparently there are other potential vulnerabilities.

I'm probably going to search for vulnerabilities with trial and error then report them to ensure nothing happens.

Jump in the discussion.

No email address required.

so how does the vuln work exactly? like user uploads poz.jz to your server then real user runs poz.js client side and it posts their dms to http://fedirelay.xyz or is it serverside?

Jump in the discussion.

No email address required.

it's a little :marseymanlet: sophisticated, don't think :marseybigbussyhunterlove: anyone has figured out what exactly ran the script (seems like reports were vulnerable when opened on the admin :marseymoplicker: panel but don't know if that was the one used to hack http://poa.st and http://bae.st)

what the hackers actually :marseyakshually: got was the user's token, once they got a token :marseybadgejewgold: from an admin :marseycarpflorist: they could access :marsey403: the admin :marseymoplicker: panel where :marseydrama: all dms are easily visible (then made a simple :marseysmug4: script to scrape them)

the tokens were encoded and sent to http://fedirelay.xyz in a very very fancy way that i barely understand and couldn't hope to explain

Jump in the discussion.

No email address required.

I initially thought this was social engineering because graf is an oversocialized homo but turns out it was a real exploit in pleroma. rDrama was effected too sadly. https://rdrama.cc/notice/AW29QC8VrV7GjzcT0C

also next time if some fedi drama happens mention me too, someone should make a !fedizens or something,im new and idk how.

Jump in the discussion.

No email address required.

I'm more interested from a perspective of digging up dirt on people who are asses. But yeah, from what I've skimmed it seems like a pretty severe security flaw. I, as a very principled actor, have nothing to hide because I don't DM e-thots or anyone, and I will post any incendiary thought that I do have publicly in hope of causing a heck thread.

It costs 10,000 dramacoin to make a ping group, but I'd kick in some virtual points if people are interested, but there's probably like 10 people here that actively follow fediverse drama outside of big happenings like http://mastodon.lol.


https://i.rdrama.net/images/17187151446911044.webp https://i.rdrama.net/images/1735584487Pd3ql1pai5_mfA.webp https://i.rdrama.net/images/17177781034384797.webp

Jump in the discussion.

No email address required.

It was attempted but not abused. There were no DMs or sensitive emails anyway because dramanauts aren't that r-slurred

i patched it anyway and dropped old oauth tokens

Jump in the discussion.

No email address required.

blah blah blah who gives a frickin shit

Jump in the discussion.

No email address required.

For real, they handing out MB for this lukewarm spew?

Maybe if the dude got caught red handed grooming or something, but this is...about some b-word who talks some shit and is kinda catty?

https://i.rdrama.net/images/168509833810746.webp

Jump in the discussion.

No email address required.

:#taylaugh:

Jump in the discussion.

No email address required.

idk what any of this means

Jump in the discussion.

No email address required.

self-styled freeze peach man loves free speech for libertarians, but not when people criticize him. Story as old as time


https://i.rdrama.net/images/17187151446911044.webp https://i.rdrama.net/images/1735584487Pd3ql1pai5_mfA.webp https://i.rdrama.net/images/17177781034384797.webp

Jump in the discussion.

No email address required.

White people noncense

Jump in the discussion.

No email address required.