Reported by:
  • ACA : Google: how to p-dophiles multiply?

Oopsie whoopsie, someone did a little fricky wucky and admited to protecting a known p-do on their fediverse instance, poa.st

Bottom Text

For context, one of my favorite people on the fediverse who I don't understand at all is bot. She's active on http://seal.cafe currently (hosted by friend of the site & cat enjoyer @kroner), and is constantly getting into fights with lots of people about random issues; I enjoy these even without context because I'm a fan of incendiary rhetoric and bot is a world class shit talker who also seems to feel strongly about the things she choses to argue about.

If you don't take my word for it, here's a snapshot of recent box posts

https://i.rdrama.net/images/16850802876566367.webp

You might have seen that http://poa.st and http://bae.st, two popular instances on the free speech zone of the fediverse got hacked recently. We had a small thread here that didn't get the attention it deserved but there's a lot of rightoid seethe going on. Reminder that http://rdrama.cc is still the best instance that has all the marseys and has never been hacked; shout out @nekobit. If you remember the http://chudbuds.lol hack/leak, you'll know that private messages sent on the fediverse/Activity Pub are not end-to-end encrypted, so naturally lots of alt-tech wannabe e-celebs got their DMs leaked from this. For further context, graf is the admin/owner of http://poa.st who has recently feuded with Null and Crunklord420, over some dumb shit (watch MATI from 3 weeks ago if you want some context); he also defederated http://rdrama.cc over a meme nose emoji that he called doxing his admin (his admin runs a lolicon posting instance and also had a falling out with graf, so the image isn't doxing anymore but http://rdrama.cc is still blocked because he's a b-word)

So here's the meat. Box has been posting about s*x pests that use http://poa.st for well over a year at this point. As with many posts of someone claiming someone else on the internet is a s*x-pest, I was initially credulous, until this leak came out in which graf goes to bat for a guy who he says admitted to raping a minor to him directly. You could potentially get away with just staying silent on this issue, in my eyes, especially if you're wearing the mask of a free speech extremist alt-tech nerd, but graf is not that. He blocked http://rdrama.cc initially from sending any information to his instance, and later blocked both sent and recieved information from our instance to his. He blocked http://kiwifarms.cc under the pretense that http://kf.cc allowed cp on its servers, despite the fact that the 3rd party instance he claimed was the source of this cp had the policy set against it on the http://kf.cc server as it did on http://poa.st. Null sperging on the graf question about a month ago here.

Onion link for anyone who wants to explore more because kiwi farms is powered by a cat on one of those big wheels where they can run if they feel like it

https://i.rdrama.net/images/16850802878141081.webp

I have done my journ*listic duty and asked bot about this revelation, the response was incredibly keyed

https://i.rdrama.net/images/16850802881319487.webp

TLDR: Graf is homosexual (bad kind). Bot @ http://seal.cafe is vindicated. I am always right about fediverse tyrants being r-slur autists. Crunklord420 keeps being based and Terrypilled.

@Aevann, IDK if this is enough of a rightoid exposΓ© to qualify for grant marseybux, but I love you

Someone remind me to pin award this in the morning so that people see this because I have to spend some marsey bux and also this is good drama. k thanks


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

163
Jump in the discussion.

No email address required.

Not gonna lie, bit of a Daniel Stevens from Ontario moment :marseycringe2:

Jump in the discussion.

No email address required.

Bot is a dramatard at heart I guess but that doesn't make her less insufferable. She can be right but not barge into every single fricking thread to make it about lolicon and back a swatting cute twink. Never forget she calls herself an "internet villan" :marseycringe: and ahas tried to suck off two other cute twinks for programming lessons.

https://fediverse.wiki/wiki/Bot

Jump in the discussion.

No email address required.

The kiwifarms :marseyitsoverwereback: thread on this is pretty :marseyglam: great. It's been so boring :marseysleep: over there :marseycheerup: lately since they got banished to the darknet, this drama :marseydramaddictrentfree: finally woke them up again. It's very entertaining.

https://kiwifarmsaaf4t2h7gc3dfc5ojhmqruw2nit3uejrpiagrxeuxiyxcyd.onion/threads/poa-st-chudbuds-lol-general-discussion-thread.129209/post-16348664

Jump in the discussion.

No email address required.

>https://kiwifarmsaaf4t2h7gc3dfc5ojhmqruw2nit3uejrpiagrxeuxiyxcyd.onion/threads/poa-st-chudbuds-lol-general-discussion-thread.129209/post-16348664

:#gigachadglow:

Jump in the discussion.

No email address required.

I mean yeah, practically everyone thinks the CIA has compromised Tor years ago, but you're not going to get in trouble just for reading shit.

Jump in the discussion.

No email address required.

Bot has an unhealthy :marseyhealthy: obsession :marseyrentfree: with p-dophiles and claims someone new is a p-dophile :marseycirno: every day.

Was bound to be correct :marseyhesklennyyouknow: eventually.

Jump in the discussion.

No email address required.

Janny :marseycapymerchant: Jersh :marseynulloverback: :marseynull: was right :marseysoren: yet again lol.

Jump in the discussion.

No email address required.

Many such cases


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

It’s not against the rules :marseypeterson: to r*pe minors once upon a time, and the people who were spreading information about the p-do were just stirring shit or trying to manipulate him into banning someone for something that wasn’t a rules :marseypeterson: infraction.

It makes an neurodivergent :marseyslm: kind of sense @Dramamine

Jump in the discussion.

No email address required.

Keep yourself safe

Jump in the discussion.

No email address required.

ur such a cutie! :marseyhearts:

Jump in the discussion.

No email address required.

jfc it's friday greu log off n think bout the stupid shit u just said

Jump in the discussion.

No email address required.

>It’s not against the rules to r*pe minors once upon a time

I can't parse this sentence no matter how often I read it

Jump in the discussion.

No email address required.

Reportmaxxer: β€œUser so-and-so r*ped a minor a few years ago!!” :marseyreportmaxxer:

Admin: β€œOk, and?” :marseyautism: :marseyretardchad:

Jump in the discussion.

No email address required.

!downvoters Greu is doing a heckin p-do apologia.

Jump in the discussion.

No email address required.

That's my bit!

Jump in the discussion.

No email address required.

!dramatards !edgelords You very fine people should have strong opinions on this comment.

Jump in the discussion.

No email address required.

It’s not against the rules to r*pe minors [...]

- Greu, 2023

:#marseynotes:

Jump in the discussion.

No email address required.

Won’t someone think of the hecking rule-abiding :marseypdf:iles

Jump in the discussion.

No email address required.

Depends on whether they are based or not :chudsmug:

Jump in the discussion.

No email address required.

>blah blah blah blah blah, discuss

No.

:#marseyatsume:

Jump in the discussion.

No email address required.

Reported by:

Shut up I’m fishing for a ban award

Jump in the discussion.

No email address required.

Goofy neighbor

Jump in the discussion.

No email address required.

>43k coins

The goyim fear the nonbinary jew

Jump in the discussion.

No email address required.

I still don't see where :marseydrama: he admitted to protecting a p-do. He seems to say "send me proof and I'll ban him, but I won't just trust antifa"

Jump in the discussion.

No email address required.

Looks like the guy self-yeeted a couple days later after that dox piece. Hope there is some more drama than just that:marseycocaine:

Jump in the discussion.

No email address required.

I like fedi and I had to read your r-slur summary.


Follower of Christ :marseyandjesus: Tech lover, IT Admin, heckin pupper lover and occasionally troll. I hold back feelings or opinions, right or wrong because I dislike conflict.

Jump in the discussion.

No email address required.

Lol thx for the marsify award :marseybadgejewgold: - I was calling myself :marseycyanide: the r-slur btw.


Follower of Christ :marseyandjesus: Tech lover, IT Admin, heckin pupper lover and occasionally troll. I hold back feelings or opinions, right or wrong because I dislike conflict.

Jump in the discussion.

No email address required.

Wish i was smart :marseycapygigabrain: enough :marseyitsallsotiresome: to use fediverse :marseyneko:


Secured my spot as a top 100 most memorable rdrama poster

Jump in the discussion.

No email address required.

Go to an instance that caters to your likes, sign up, click follow on the global timeline and local timeline, and boom! Youll be shitposting within the hour :marseyhacker:

Jump in the discussion.

No email address required.

>I was initially credulous

U mean β€œincredulous” bby

Jump in the discussion.

No email address required.

probably, lol


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

Reminder that http://rdrama.cc is still the best instance that has all the marseys and has never been hacked

has never been hacked

:marseyclueless:

https://rdrama.cc/notice/AW2B604TD62bRDE7F2

Jump in the discussion.

No email address required.

I mitigated it last night when this all occured. Presumably this wasn't abused anyway.

I dropped all oauth tokens so any exposed tokens are now unusuable. This caused force logout of course

Jump in the discussion.

No email address required.

:chadthankskingcapy: noticed i was logged out, figured you did that

Jump in the discussion.

No email address required.

i have no where :marseydrama: near the amount of autism :marseyfediverse: required to understand any of this

Jump in the discussion.

No email address required.

This is actually a good thing, Soldier of Allah.


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

:#marseynull: is going :marseysal2: to laugh :marseymonstercocklaugh: his butt off.

Jump in the discussion.

No email address required.

The chudbuds and poast DM leaks are so funny bro, these neighbors literally sit around all day on there conspiring to drink some z-list e celebs blood

Jump in the discussion.

No email address required.

Bot will win

Jump in the discussion.

No email address required.

She won and anyone who dislikes it is coping. It's astonishing to see that clean of a cut


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

https://i.rdrama.net/images/168508399918493.webp

for a second i thought @box was cool but thank god it was just a spelling error on your part

Jump in the discussion.

No email address required.

I AM COOL :tayaaa:

Jump in the discussion.

No email address required.

I've confused a few people from fedi with rdrama people with the same username. If she's really the same @box here than I will be buying her an engagement ring.


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

i don't think it's likely :marseysmug2:

https://i.rdrama.net/images/16850846489848468.webp

Jump in the discussion.

No email address required.

typing do be difficult some days. I do wish only the best for bot and box chads


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

:marseyxd: I knew bot wasn't lying :marseydeception: this entire time, and now they're vindicated. I wonder :marseygigathonk: what else will come out of these leaks

Jump in the discussion.

No email address required.

I've 180'ed from thinking bot is insane to thinking she know far more than I do about randos on activity pub being scum. I have nothing but awe for her now. Incredibly :#marseygem:


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

brother, you dopn't need to be a genius :marseyslab: to think :marseybigbussyhunterlove: that a terminally online :marseyidio3: admin :marseycarppearlclutch: of a super :marseylueshi: small :marseytiny3: social :marseyredcheck: media :marseyjourno: site can read user's doxxes. It then follows if he didn't ban him it was probably a coverup, nobody needed a million :marseysamhyde: different threads on lolicon to figure :marseypop: this out.

Jump in the discussion.

No email address required.

I've always tried to maintain friendly relations with graf because there :marseycheerup: are people on Poast :marseyfediverse: I like talking to, but this is fricked.

Jump in the discussion.

No email address required.

maybe bot is right

maybe i am secrectly a wef paid p-dophile :marseyahs:

Jump in the discussion.

No email address required.

Female :marseywomanmoment: intuition is powerful

Jump in the discussion.

No email address required.

Dramamine casually Chaos Chud-Dunking in the middle of the night like

https://i.rdrama.net/images/16850831385965395.webp

Jump in the discussion.

No email address required.

heck threads are when they come to you! Also we should get a group together and watch this movie at some point (full disclosure, Wiz said it was shit, but I still want to watch it) https://i.rdrama.net/images/16850833853574955.webp


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

Didn't you miss us watching the globglogabgalab movie? We probably can do that again first (and I for one will gladly join!)

Jump in the discussion.

No email address required.

No I was there, Dramamine was already a taken name on cytube tho :marseycry:


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

Add Zardoz to the mix

https://media.giphy.com/media/5DM35KwDpbJJe/giphy.webp

Jump in the discussion.

No email address required.

"Play Trump's favorite playlist" starts dancing

Yup, I smell kino.

Jump in the discussion.

No email address required.

>Genetic engineering has given him eternal life... and large hands

:mar#seyemojirofl:

Jump in the discussion.

No email address required.

:marseyxd: I'm in!

Jump in the discussion.

No email address required.

blah blah blah who gives a frickin shit

Jump in the discussion.

No email address required.

:#taylaugh:

Jump in the discussion.

No email address required.

I initially thought this was social engineering because graf is an oversocialized homo but turns out it was a real exploit in pleroma. rDrama was effected too sadly. https://rdrama.cc/notice/AW29QC8VrV7GjzcT0C

also next time if some fedi drama happens mention me too, someone should make a !fedizens or something,im new and idk how.

Jump in the discussion.

No email address required.

It was attempted but not abused. There were no DMs or sensitive emails anyway because dramanauts aren't that r-slurred

i patched it anyway and dropped old oauth tokens

Jump in the discussion.

No email address required.

I'm more interested from a perspective of digging up dirt on people who are asses. But yeah, from what I've skimmed it seems like a pretty severe security flaw. I, as a very principled actor, have nothing to hide because I don't DM e-thots or anyone, and I will post any incendiary thought that I do have publicly in hope of causing a heck thread.

It costs 10,000 dramacoin to make a ping group, but I'd kick in some virtual points if people are interested, but there's probably like 10 people here that actively follow fediverse drama outside of big happenings like http://mastodon.lol.


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

idk what any of this means

Jump in the discussion.

No email address required.

White people noncense

Jump in the discussion.

No email address required.

self-styled freeze peach man loves free speech for pedos, but not when people criticize him. Story as old as time


https://i.rdrama.net/images/17092367509484937.webp https://i.rdrama.net/images/17093267613293715.webp https://i.rdrama.net/images/1711210096745272.webp

Jump in the discussion.

No email address required.

Everyone involved in this is turbo online and should close their laptops and move to a monastery ASAP

@nekobit is cool tho, keep up the terminal illness

Jump in the discussion.

No email address required.

thanks :hapyday:

i applied some apache mitigations but apparently there are other potential vulnerabilities.

I'm probably going to search for vulnerabilities with trial and error then report them to ensure nothing happens.

Jump in the discussion.

No email address required.

so how does the vuln work exactly? like user uploads poz.jz to your server then real user runs poz.js client side and it posts their dms to http://fedirelay.xyz or is it serverside?

Jump in the discussion.

No email address required.

it's a little :marseymanlet: sophisticated, don't think :marseybigbussyhunterlove: anyone has figured out what exactly ran the script (seems like reports were vulnerable when opened on the admin :marseymoplicker: panel but don't know if that was the one used to hack http://poa.st and http://bae.st)

what the hackers actually :marseyakshually: got was the user's token, once they got a token :marseybadgejewgold: from an admin :marseycarpflorist: they could access :marsey403: the admin :marseymoplicker: panel where :marseydrama: all dms are easily visible (then made a simple :marseysmug4: script to scrape them)

the tokens were encoded and sent to http://fedirelay.xyz in a very very fancy way that i barely understand and couldn't hope to explain

Jump in the discussion.

No email address required.

I was dating this young, fit, hot girl with a sunny disposition. Then I found out she's only been to 2 continents...and she only has her BA. Like one single BA. I threw up in my fricking mouth and left. I didn't even bother to grab my Naruto backpack.

Snapshots:

http://seal.cafe:

http://poa.st:

http://bae.st:

http://rdrama.cc:

http://chudbuds.lol:

http://kiwifarms.cc:

http://kf.cc:

Null sperging on the graf question about a month ago here:

Onion link for anyone who wants to explore more:

Jump in the discussion.

No email address required.

Might wanna remove the chudbuds link from this sometime lol.... its dead

Jump in the discussion.

No email address required.

Oh its just how the bot works I might be dumb

Jump in the discussion.

No email address required.

Link copied to clipboard
Action successful!
Error, please refresh the page and try again.