/mlpol/ - My Little Politics


If you want to see the latest posts from all boards in a convenient way please check out /overboard/
For Pony, Pony, Pony and Pony check out >>>/poner also Mares

Name
Email
Subject
Comment
0
Select File / Oekaki
File(s)
Password (For file and/or post deletion.)

S0I1337 hack info.png
/4chan hack/ info thread and refugee landing point
Anonymous
b7668bd
?
No.384069
384070 384071 384073 384084 384190 387029
Welcome to /mlpol/ weary travellers. In this thread I will collect what I can find about the 4chan hack and try to provide a base camp for those lost 4nons that have managed to find their way here. Feel free to add anything you know or swap stories as well. The following is roughly gathered to ensure it is saved.

kiwifarms threads: https://kiwifarms.st/threads/4chan.37222/page-421#post-21099990
janny lists
https://kiwifarms.st/threads/4chan.37222/page-474#post-21102637
yotsuba sauce
https://kiwifarms.st/threads/4chan.37222/page-475#post-21102680

Hiro on twitter: https://xcancel.com/4chan/status/1912242601102844078
https://x.com/4chan/status/1912242601102844078

Commit messages on 4chan repo:
https://files.catbox.moe/yypkoa.txt

Potential information sources you may keep an eye on:

4chan's IRC channel on Rizon

Hiro's 4chan twitter: https://x.com/4chan

Sun article tracking the incident: https://www.the-sun.com/tech/14029069/4chan-down-updates-controversial-website-hacking/

Sinister/pol/: https://leftypol.org/

Know your meme article: https://knowyourmeme.com/memes/events/april-2025-4chan-sharty-hack-and-janitor-email-leak

Sharty: https://www.soyjak.st/news/thread/4104.html

4chan itself of course: https://boards.4chan.org/

NHNB: https://nhnb.org/fim/res/19935.html

Is it down: https://www.isitdownrightnow.com/4chan.org.html

reddit: https://www.reddit.com/r/technology/comments/1jzoofg/4chan_hacked_taken_down_emails_and_ips_leaked/

The Official thread by the man of the hour himself over on SoyJack.st: https://www.soyjak.st/soy/thread/10615723.html

The sharty's own summary of events: https://wiki.soyjak.st/The_Great_Cuckset

Janny logs: https://bvll.neocities.org/j/
525 replies and 91 files omitted.
Anonymous
b7668bd
?
No.384070
Hiroyuki Japanese.png
>>384069
https://xcancel.com/hirox246/status/1912603340292448258
https://x.com/hirox246/status/1912603340292448258
Anonymous
b7668bd
?
No.384071
384735
>>384069
Janny logs block 1:

>#253
Discussion on the rules governing rapidshared content on /co/ and the possibility of updating them.

>#272
About the policy on motivators on /a/.
They are to be deleted and user banned if they persist.

>#281
About deleting unmarked spoilers on /a/.
They are to be deleted even if the series is old.

>#282
A janny is unsure on what should be deleted on /s/. They are bothered by fake tits and female bodybuilders and wonder if they should be allowed.
They are told by a Mod that discussion should improve the board as a whole. Good discussion should be left alone even if the content personally displeases them. The picture should be judged on its own merits.
Another janny then says that they will instantly delete any picture they consider "gross" even if people seem to be enjoying it, and that they believe the board has too much porn on it.
Finally something about "report "misa campo/leah dizon" catchphrases as ban-requests"

>#288
Asking whether they should delete dogs, cats and prinnies from /c/ as they should apparently be posted on /cm/.
Told that animal pictures as well as anything close to furry should be deleted with the exception of catgirls.
A mod asks why anime animals can't be posted on /a/.
People then agree and say anime animals are fine, just no furries or photographs.

>#295
Asking whether fapping to female mech pilots is allowed on /m/.
Another janny says they would rather not see female pilots on /m/. That /m/ is sfw so there should be nothing too revealing and that they can be strict about it being a mech board so at least try to relate it to a mech.

>#307
Another website is flooding /g/. Discussion about what the jannies are doing about it.
Anonymous
b7668bd
?
No.384073
Janny excerpt.png
>>384069
Janny logs random 1:

>4471
Jannies talking about cooking? I guess if anyone needed proof they aren't robots.
>5147
Surprisingly reasonable discussion of banning gun control posts on /k/. They seem to recognize that it can be on topic.
>5333
Jannies noticing that everything on /a/ and /v/ is political around the 2016 election.
>8289
Jannies celebrating Christmas
>9838
Jannies pondering when and why new boards are created. Ends with the excerpt I posted.
Anonymous
b7668bd
?
No.384075
janny menu.png
Janny ban control.
Anonymous
6d5f866
?
No.384079
384082
image.png

Anonymous
7a810d9
?
No.384082
384083 384087
>>384079
this is a fake edit of 4plebs
Anonymous
2fa72bb
?
No.384083
>>384082
It's accurate if you take into consideration the amount of memeflag posts.
Anonymous
6d5f866
?
No.384084
384110 384487
image.png
image.png
>>384069
The Tranny admin's Info
Anonymous
6d5f866
?
No.384087
Equesrtia.png
>>384082
you got me heres the real one
Anonymous
b047411
?
No.384092
For anyone interested in looking up usernames: https://github.com/sherlock-project/sherlock
Anonymous
ec6e657
?
No.384106
15 APR 2025.png
Bored lately.
So I made this to commemorate the happening.
You're welcome.
Anonymous
5986be8
?
No.384110
>>384084
>Mr.
>Literally just some normal dude
Ironic to call him "Tranny Admin" when the word "Tranny" is an instaban for LGBT discrimination on Soyjak party. You Jaktards are the quintessential projecting faggots.
Anonymous
7a810d9
?
No.384117
384120
45 hours without 4chan
Anonymous
ec6e657
?
No.384120
384124 384242
Accidental get.png
>>384117
I checked desuarchive out of curiosity. Every thread that was active when it happened has been dumped to the archive, so if they do bring it back, it's more or less a complete reset.
Guess that's for the best, people were mad at me for this get.
Anonymous
7a810d9
?
No.384124
384128
>>384120
>complete reset
like that one time their DB failed and many boards had their catalog wiped?
would be interesting to see first new threads on all boards
I hope /po/ gets something interesting
Anonymous
8f1e6fb
?
No.384128
384165
>>384124
Noooo, you can clean slate /mlp/ and the like, but /po/ is /po/
Every thread there is an old growth coastal redwood, it's ancient
Anonymous
ec6e657
?
No.384165
384184
>>384128
Papercraft and Origami?
Anonymous
8f1e6fb
?
No.384184
384191
>>384165
Yeah, every thread there is like 5 years old and new posts happen every other week, they're also the chillest anons around, dudes just wanna do paper stuff
Can't just kill that off and start from scratch
Anonymous
62d317c
?
No.384190
384254 384381
>>384069
Do we know if the hacker is telling the truth about user data?
Anonymous
90f06fd
?
No.384191
>>384184
Imagine if /po/ got an altchan. one post per month.
Anonymous
d051649
?
No.384226
384232 384234 386211
17448455565211.png
ETA: Few Days
Anonymous
62d317c
?
No.384232
384763 384777
>>384226
I honestly think this is going to kill the site. Anons are getting comfy in their new altchans and when 4chan comes back the cuck timer is going to remind people why those altchans exist in the first place.
Anonymous
94f9b71
?
No.384234
>>384226
>a few days
Watch it go down again shortly after. A few days is not enough to fix the internal issues 4chan has.
Anonymous
f21f51a
?
No.384238
сися.png
Something tells me that a lot of staff have quit and no way in hell they're achieving the old staff count when it's still hot news. The few that are remaining will become even worse cunts than before while still doing J-A-C-K-S-H-I-T to counter the shitposting.
Anonymous
7cd4ab3
?
No.384240
384241 384669 384707 385226
1744845448079j-0.png
rapeape email (real????)
approx 7 hours ago

Hey,

I'm sending this to everyone, just in case there are people who weren't in Discord or IRC, haven't been paying attention to the news, and are completely unaware of the events that have transpired, but are still checking their email. On the afternoon of April 14th, one of our servers was breached. The attacker managed to exfiltrate quite a bit of data before going public with a brief shitposting spree, at which point I became aware of what had happened and shut the servers down. Over the next ~24 hours the hacker released some of the data he had taken.

Relevant to you are that he released mod and janitor usernames, password hashes, email addresses, and the IP address last used to log in. With this information made public, people were able to find additional information from public sources, including major data breaches on other websites, to partially or fully dox some 4chan mods and janitors. Even if you have not been doxxed, please check your email address against https://haveibeenpwned.com/ to see if there may be leaks of data from other websites that may be associated with you.

Unfortunately there's no way for us to take this back and undo the harm that you've suffered due to this hack, but you can take steps to mitigate further harm. I'd recommend that everyone change the password of the email account you used when applying to be a janitor, and any other email accounts you have used thereafter in association with 4chan. You should also add two-factor authentication if at all possible, ideally via an authenticator app, such as Google Authenticator or Authy.

I would also recommend using a password manager of some sort, such that you can use strong passwords easily. Keepass or KeepassXC are good examples, but there are other popular password managers such as Bitwarden, 1Password, or those integrated into popular browsers like Firefox. Generate random passwords of at least 16 characters using upper case, lower case, numbers, and symbols. Do not re-use any passwords. If you had used the password associated with your mod or janitor account elsewhere for some other account(s), you should change that password for those other accounts as soon as you can. We will be doing a forced password reset when the site is back up, and 2FA via an authenticator app will be mandatory for both mods and janitors.

Most IPs are dynamic, but if your IP address is static, you can usually just unplug your modem or router overnight to get a new one. Failing that, you should consider calling your ISP to have it changed. In either case, you should also consider using a VPN such as NordVPN, Surfshark, or Private Internet Access (there are plenty of options here).

A lot of you will want to change your login names, discord names, or email addresses. I will contact each of you individually on Discord to discuss these changes, so please wait until I do so. Much easier keep things organized that way, contacting each person in turn rather than having to get blasted with hundreds of emails or Discord messages of people asking to change info.

As for when the site will be back (and it will be back), "We get there when we get there". Obviously we have a lot of work ahead of us with respect to patching holes and updating software, so please bear with us. Maybe catch up on your backlog, watch some anime, play some vidya, and enjoy this extended break from reports and shitposting.

For those of you who have had personal information exposed, I'm sorry this happened. We had bought new servers a few months ago and were working to transfer 4chan's functionality to them as quickly as we could, but obviously we weren't fast enough, and all of you have suffered due to our failure. I know you've placed your trust in us to keep your personal information safe, and we have let you down. I can't undo what happened, but we're going to do everything we can as fast as we can to secure 4chan's servers and codebase, and get the site back online. All I can do is hope that, despite what you've suffered, that you'll continue to help keep this community alive. There's nothing else quite like it on the internet, and without you, there might never be anything like it ever again.

Regardless of your personal decisions in the coming days and weeks, I want to thank you for all the time and effort you've put in to this website and this community. 4chan's users might not show it openly, but I know they appreciate what you do as well. I think they'll appreciate you even more when 4chan returns, as now they've had time to feel 4chan's absence, and absence makes the heart grow fonder.

Odds are the contents of this email will be posted on Sharty and Kiwifarms shortly after I send it, but I don't much care. If they want to make fun of me for appreciating the 4chan Team, they can go right ahead. I think you are all wonderful and I don't care who knows.

I will be in touch with each of you via Discord in the coming days, but if there's something that can't wait, please reach out.

--GrapeApe
Anonymous
94f9b71
?
No.384241
>>384240
What is this, a picture for lyrants?
Anonymous
dac8d9b
?
No.384242
384243
1726944839242316.jpg
>>384120
>Every thread that was active when it happened has been dumped to the archive
damn that blows but i suppose i was somewhat naive to assume i could just pick up where i left off like last time the site went down
this time is some real shit
read somewhere someone say it would take a couple weeks for them to get the site back on the rails
Anonymous
9c8e36e
?
No.384243
384246
>>384242
I haven't spent much time looking into it, but the retards apparently went something like a fucking decade without updating their software. I work in IT and I sausage if events conspire to stop us from deploying updates to our systems within 30 days. I suppose bigger things like OS updates are a bit slower and we wait for the vendor to release the first round of patches or two so that we're not the early adopters, but we always have a fucking plan to get everything updated before end of life.
Anonymous
4ea2262
?
No.384246
>>384243
feel like in the coming years after its eventual death rattle more will come out about the mismanagement of the site that has led to catastrophic shit like this
has moot written a book yet? id read it if he ever does
Anonymous
b7668bd
?
No.384254
384262 384364 384381
>>384190
Not for certain but you can check to see if your email appears here:

https://haveibeenpwned.com/
Anonymous
b624615
?
No.384262
384263
>>384254
lol, they did in fact get my burner e-mail
Anonymous
b7668bd
?
No.384263
384266
>>384262
That's not necessarily from this hack by the way it's just if you have been ever. If you are on it you should change your passwords and stuff though.
Anonymous
b624615
?
No.384266
>>384263
Fair. I did a complete overhaul wipe of my accounts a couple months ago, and neither my actual accounts nor my sock puppets have any registry
Anonymous
b7668bd
?
No.384337
A bump to say we are still here. Hearing unconfirmed reports of the site being up within the week but we shall see. Now onto day 3 of being down.
Anonymous
7b284f9
?
No.384355
384363 384366 384401
I honestly don't even miss it anymore.
It's obvious at this point that the slower boards were just 99% jannies posting to flame bait and gaslight people, and the faster boards were 99% corporate/political shills stifling legitimate discussion and 100% of the time I would have otherwise wasted, taking the bait, on the off chance that I was actually having a legitimate conversation with another human being has now been diverted to things I actually enjoy.
Anonymous
a7944b5
?
No.384363
>>384355
Yeah, out of all catalogue on /mlp/ I only give a shit about the dozen of threads and participate in 2-5 at any given week.
Anonymous
59437a6
?
No.384364
384381
>>384254
That would only work if Troy Hunt ends up getting ahold of a leaked database so he can add it to HIBP. So far said database doesn't exist and I doubt the hacker would care about selling it.
Anonymous
9c8e36e
?
No.384366
>>384355
The main reason that I miss 4chan are the general threads on /vg/. As shitty as the general threads were, they were a hell of a lot of better place to actually discuss a game than plebbit or discord.
Anonymous
9c8e36e
?
No.384381
384394 384411
>>384254
>>384364
>>384190
It's sort of a moot point. Hackers are not trustworthy actors. We know that a data breach has occurred. It is prudent to assume that any lists of email addresses associated with 4chan have been identified, and that any password that you may have used with 4chan has been compromised. If you re-use that password anywhere, then you should go change it as soon as you can.
Anonymous
b7668bd
?
No.384394
>>384381
Sure, it doesn't hurt to be safe regardless.
Anonymous
4c072f2
?
No.384401
384403 384413
Celestia angry.jpg
>>384355
I only miss /tg/ for the generals of the games I liked it and it doesn't look like they moved to any splinter.
Anonymous
acee4cd
?
No.384403
384413 384422
>>384401
/vx/ has rpgs here.
Anonymous
a665a04
?
No.384411
>>384381
In general I sincerely believe that if you're not using a password manager in this day and age, you deserve to be hacked anyway. Just download keepass it's that easy
Anonymous
b624615
?
No.384413
384422
>>384401
>>384403
This. /vx/ is expressly for TTRPGs, (pno-pony) Video games, and /X/ content. It's only been used by a handful of anons for years, so feel free to make yourself comfortable
Anonymous
d5e47de
?
No.384415
384419 384436
i refuse to trust digital password managers because it just feels like putting all of your eggs in one basket
all it takes is one one zero day exploit and it's game over
either memorize your passwords or if you absolutely must record them then write them on a sheet of paper and stash it in a safe or some other secured location because paper can't be hacked [yet]
Anonymous
a665a04
?
No.384419
384436
>>384415
The thing is good password managers (for example: keepass = good, lastpass = bad) don't connect to the internet and the only thing that can be "hacked" is the encrypted database file, assuming you sync it between devices and put it in backups and stuff. But the encryption is normally very standard stuff that is almost impossible to get wrong unless you're a moron.

So the only way for the password manager to get exploited is if you get a virus on your computer and it tries to attack the manager. But if that happens it's game over anyway. A keylogger is vastly simpler than a secret 0-day and will slurp up all your passwords just the same.
Anonymous
4c072f2
?
No.384422
2896236__safe_minuette_pony_unicorn_animated_blue+coat_female_frown_gif_horn_looking+at+you_mare_mare+stare_seizure+warning_solo_two+toned+mane.gif
>>384413
>>384403
I meant with my old homies from /gurpsgen/ and /mtg/ who probably aren't into ponies
Anonymous
9c8e36e
?
No.384436
384443 384449
>>384415
>>384419
Here's my take for it. For anything TRULY important, such as the passwords for online banking/stock broker/etc, use a unique strong password and record it in duplicate on pen and paper and store them in a secure place like a safe or safe deposit box. It is a hassle storing them this way, but you shouldn't have too many accounts that fall into this category. I think a paper copy should be recorded so that close family can access the assorted banking accounts in the event of your death, or so that you can remember the password in the event that you are injured in a way that impairs your memory.

Furthermore you should have a dedicated computer for interacting with these critical accounts. A simple laptop or something should do. This banking computer should only have essential software installed on it and you should exclusively use it for banking tasks. No games, no recreational web browsing, etc. Just the barebones of what is needed for any interaction between your banking or investment accounts.

Then, on your recreational PC, use a password manager like keepass for everything else.
Anonymous
2abefc7
?
No.384443
384445 384455
>>384436
Lines/phrases from poetry are my usual go to. William Barnes is quite good for complex passwords.
https://www.best-poems.net/poem/milken-time-by-william-barnes.html
Anonymous
b7668bd
?
No.384445
384453
>>384443
>When your password has an umlaut
Anonymous
b624615
?
No.384449
384473
>>384436
This is correct. No one can hack/datamine a spiral-bound notebook
Anonymous
2abefc7
?
No.384453
>>384445
Or just funny lines
>An' there wer Jenny Coom a-gone
Anonymous
9f1c569
?
No.384455
384458 384464 384474
password_strength_2x.png
>>384443
As insufferable a faggot as XKCD is, he does have a good point on how to generate safe passwords.
Anonymous
2abefc7
?
No.384458
384459 384464
>>384455
I send this to my users before I reset their password. Guess how many of them use the example provided?
Anonymous
7c0b52b
?
No.384459
384460
>>384458
0 because they're lazy bastards who probably changed only one character in their password.

>t. lazy faggot who does the same and relies on 2fa to cove his ass
Anonymous
2abefc7
?
No.384460
384465
large.png
>>384459
I maintain a strict password policy to prevent that.
Anonymous
d5e47de
?
No.384464
>>384458
>>384455
randomwordgenerator is a godsend
it only took me a week working a help desk to learn to NEVER allow end users to make their own passwords without supervision
>Musicallemonparty[random number + symbol]
i may or may not sneak some funny word combinations when I do so though
Anonymous
a665a04
?
No.384465
384470
>>384460
I bet you're one of those sites that have inane password requirements that make it impossible to generate
>password must be at least 8 characters...
>also this long password is invalid it must also be below 64 characters or whatever again for no reason
>you must include a letter, a number, and at least one of these special characters
>but those special characters are invalid for some reason
>yeah have fun setting the custom character set in your generator just for my website!
Anonymous
2abefc7
?
No.384470
384472 384485
>>384465
>inane password requirements
Not particularly. Minimum of 8 alphanumeric characters, maximum of 64, 90 day lifespan, MFA is required. Fairly basic stuff, if a user can't create a password longer than 8 characters they'll be given a password. Service accounts have a minimum bit entropy of 128 with additional security measures.
Anonymous
b7668bd
?
No.384472
384474
>>384470
He does have a point. Most of those have no relation to how strong a password is. They just make them harder for you to remember.
Anonymous
9c8e36e
?
No.384473
384474 384485
>>384449
>No one can hack/datamine a spiral-bound notebook
But like anon said, a keylogger can compromise the password as you use it. That's why I think it is critical to have a separate computer dedicated for any kind of online banking that you may partake in. That way you can minimize potential exposure to software vulnerabilities and malware.
Anonymous
2abefc7
?
No.384474
384475 384482 384485
>>384472
Hence >>384455
I try to encourage my users to actively understand the technology they are using. Unsurprisingly Accounts and HR are always lacking, which is annoyingly considering they are the most desirable targets.
>>384473
>keylogger can compromise the password as you use it.
I'm surprised people aren't more concerned with microsofts telemetry habits, or the incoming Recall feature.
Anonymous
b7668bd
?
No.384475
384482
>>384474
Yes that's what I mean. Numbers and special characters don't faze a computer. They're only a problem for meatbags.
Anonymous
9c8e36e
?
No.384482
384492
>>384474
>I'm surprised people aren't more concerned with microsofts telemetry habits, or the incoming Recall feature.
People won't care until it, inevitably, blows up on microsoft in some huge way. Right now my banking PC uses windows out of convenience, but I'm probably going to transition to linux in the nearish future for it. My recreational PC is probably going to be stuck using windows 11 due to a mix of software compatibility for windows and my opinion that persisting on OS that is beyond EOL is a greater problem than dealing with 11's warts.

>>384475
>Yes that's what I mean. Numbers and special characters don't faze a computer
Here's the thing. It's not what computers are capable of doing, it's what the hackers instruct the computers to attempt. Including numbers and special characters within the character set used to brute force passwords does increase the amount of effort that a computer needs to check the possible combinations by an appreciable margin. They're usually not trying to hack you in particular. They just want to steal as many accounts as possible as quickly as possible because they're racing two clocks. The first clock is that the user might change their password in response to hearing about the data breach. The second clock is that a third party hacker who also bought a copy of the data from the data breach might hack the passwords first and steal the accounts before he can. A computer might not care about running through all of the permutations of numbers and special characters to brute force a password, but the hacker behind that computer sure fucking does because the expanded character set will slow down his brute forcing relative to the hackers who don't include the special characters. Consequently his more comprehensive cracking attempt is likely to lose the race to compromise the legions of shitty weak passwords.

tl;dr, this is sort of like that saying about encountering a grizzly bear while hiking in a group in the woods. You don't need to outrun the grizzly bear, you just need to outrun the slower people in the group. It's not about making your passwords uncrackable, it's about not being the low hanging fruit. The hackers are all chasing the low hanging fruit because weak passwords are everywhere and it is more profitable to pursue them.
Anonymous
a665a04
?
No.384485
384492 384493
>>384470
>maximum of 64
Why? Even bcrypt takes up to 72. Argon2 and others can take much longer passwords. This is important to allow long passphrases.
>90 day lifespan
Also why? The only way for a user to comply with this is using a password manager, but if they use one they can generate a good enough password that brute forcing it would take 90 millenia, rather than 90 days. The rotation then just forces extra annoyance in having to go through the change procedure. And for anyone not using a manager it just leads to busywork e.g. having an incrementing number at the end of the password they increase every time, giving basically no extra security.

>>384474
>Unsurprisingly Accounts and HR are always lacking
Imho mandating a company-wide cloud password manager is probably a decent compromise. Yes >cloud but it's for a company. For example 1password I've seen used in some pretty security-conscious places. Then you just mandate that 1password is used for logins, and must also be used for password generation, and assuming HR karens are able to follow the most basic of instructions they shouldn't have any more issues with bad passwords.

>>384473
MFA is pretty good against keyloggers honestly. I'm not too worried about any of my accounts I have MFA on.
Hardware (U2F) where possible, but even TOTP makes it vastly harder to hijack even with full keylogger access. (Honestly it'd be easier to bundle the keylogger with a cookie stealer and hijack your session in most cases.)
Anonymous
795c019
?
No.384487
384488 384502
>>384084
>DOB 2000-09-04
Jesus Christ. Pardon me for oldfagging, but there's something ridiculous about knowing you've been banned by people who were in diapers while you were on 4chan. No wonder the moderation on most boards sucks.
Anonymous
8b0c3d8
?
No.384488
>>384487
hey, at least they're older than the forum
Anonymous
e243ea8
?
No.384490
384492
password.gif

Anonymous
2abefc7
?
No.384492
384494 384501
Screenshot_20250417_235757.png
>>384482
If you have a dedicated machine that doesn't connect to the internet in ANY capacity, it's secure to an extent. Stuxnet was a thing after all.
>>384485
That's the limit of domain accounts I've set. I can't expect Josie in Accounts to remember a long sentence, given she can barely hold a casual conversation with her colleagues.
>90 day lifespan
Personally I'd have them change their passwords on the first of every month, but that was deemed as too 'problematic'.
>Adding a number to the end
Not a configured option. No new password can be related to any previously used ones.
>cloud password manager is probably a decent compromise
And I immediately stomped my foot down at that suggestion because it's fucking retarded.
>>384490
That's pretty cheap
Anonymous
9c8e36e
?
No.384493
384498 384501
>>384485
>MFA is pretty good against keyloggers honestly. I'm not too worried about any of my accounts I have MFA on.
Oh definitely. I didn't cover multi-factor authentication. I hope I didn't come off as inferring that it shouldn't be used. MFA should be used wherever possible. I just think that a standalone banking computer is a prudent extra step to help segregate work and play. I don't think that recreational computers can be assumed to be fully secure. But when it comes to protecting your retirement nest egg, I think that a 2nd computer used exclusively for banking is a reasonable extra safeguard that is more likely to be secure than a recreational computer. Granted nation state level actors probably still have backdoors into everything at a hardware level, but Uncle Sam probably isn't intending to steal your money via password cracking when it is so much easier for him to do that via inflation.

>Also why? The only way for a user to comply with this is using a password manager, but if they use one they can generate a good enough password that brute forcing it would take 90 millenia, rather than 90 days. The rotation then just forces extra annoyance in having to go through the change procedure
The problem is assuming that it will take 90 millenia to crack the password. That may be true today, but that isn't necessarily true for tomorrow. Advancements in mathematics or computational capabilities might identify flaws in the encryption algorithm or vastly improve our ability to perform calculations faster. Password expiration places additional strain on the attacker. Now simply being able to crack the password isn't good enough. They are now on a strict deadline to crack the password before it expires. This makes things more complicated and more expensive for an attacker.
Anonymous
9c8e36e
?
No.384494
384498
>>384492
>If you have a dedicated machine that doesn't connect to the internet in ANY capacity, it's secure to an extent. Stuxnet was a thing after all.
There is a bit of a power gap between
>I want to protect myself from the Five Eyes
and
>I want to protect my savings account from chinks, jeets, and the infamous hacker 4chan
Anonymous
2abefc7
?
No.384498
>>384493
An interesting paper (https://ieeexplore.ieee.org/document/10934298) and news articles (US: https://www.forbes.com/sites/timothypapandreou/2024/12/16/googles-code-cracking-quantum-leap-heres-what-it-mean-for-business/ UK: https://www.theregister.com/2025/04/15/uk_quantum_funding/)
>>384494
>Five Eyes
https://torrentfreak.com/google-cloudflare-cisco-will-poison-dns-to-stop-piracy-block-circumvention-240613/
Anonymous
a665a04
?
No.384501
>>384492
>Personally I'd have them change their passwords on the first of every month, but that was deemed as too 'problematic'.
That completely doesn't answer "why".

>Not a configured option. No new password can be related to any previously used ones.
Assuming you're doing it by storing hashes of related passwords, any metric of "related" you use will be limited in some way and users will find some workaround that does let them use a related one. You cannot possibly pre-empt every possible mutation scheme an annoyed user that's being forced to change his password every three months will come up with.

>And I immediately stomped my foot down at that suggestion because it's fucking retarded.
Elaborate.

>>384493
>The problem is assuming that it will take 90 millenia to crack the password
There are certain realistic limits on computation to where around 200 bits or so of entropy, it starts becoming likely that a universe-sized computer operating at maximum theoretical efficiency would not be able to crack it before heat death. Now this does hinge on the definition of maximum theoretical efficiency but, while I don't remember the exact assumption, it was something pretty ridiculous and I think it's safe to say that we're not getting anywhere close to breaking that limit on a universe-sized computer any time soon.

And another thing is that even if one day it does become possible, it's pretty certain that it won't be within the next 90 days. Unless suddenly google announces Quantum Password Cracker 9000 available for commercial purchase out of fucking nowhere, but if that happens, you can just force a password expiry for all users at that exact point. And up till then, passwords that took 90 millenia to crack last quarter will still take just as much by next quarter, and there's no need to reset.

Besides, quantum computers are not a panacea and it's completely unclear whether they'll ever be useful for more than just a pretty limited set of algorithms. Maybe they will, but theoretical quantum algorithms have been under research for decades (completely independently from the engineering progress, since the algorithms are again purely theoretical) and we still aren't anywhere near any sort of general quantum computing model. So if you really want to be anal, use a quantum resistant hash, which as far as I can tell currently most good hashes basically are. And again, if a new paper comes out called New Quantum Algorithm That Completely Breaks SHA Family Hashes or something, then you a) update your backend to use a different hash and b) force-reset everyone's passwords.
Or just fucking wait because nobody has a working useful quantum computer yet and might not have any for decades. None of this warrants resetting every 90 days.
Anonymous
6ff8c02
?
No.384502
384515 384549
>>384487
The jannies switched to discord because they couldn't figure out IRC.
Anonymous
feb7377
?
No.384515
384541
>>384502
I always wondered: how do you use Rizon? All I saw was #4chan.
Do you need a password? An IP? I never understood how people used that as a chatroom. I tried, but I never get it.
Anonymous
8b27499
?
No.384529
384537
media_Gki9tt9XQAAe_La.jpg
Watch out for a site being shilled that's called miladychan. It's run by an indian pedophile named Rohit Krishna Okhandiar who currently namefags as @charlottefang77 on twitter. He is a child groomer who previously ran a discord server that targeted underaged girls for self-harm.
Anonymous
7b67a40
?
No.384537
384543
>>384529
he looks like a second life character
Anonymous
bec4365
?
No.384540
384546
i6hx8v.png
I fucking knew it. They made it intentionally frustrating and unreliable to pressure you to buy gold accounts.
Anonymous
c3e1d4c
?
No.384541
384544
>>384515
Rizon is an IRC server, one of the few old big ones.
There is a pony IRC server too, irc.canternet.net if I recall.
hexchat is generally the preferred desktop IRC client, but there are probably thousands of others for every platform imaginable.
Anonymous
8b27499
?
No.384543
384557
>>384537
I've never played tbh. Is it still alive?
Anonymous
c3e1d4c
?
No.384544
>>384541
I lied, its irc.canternet.org, best if you use SSL.
canternet is in the list of servers by default, just scroll down, its in alphabetical order, and uses SSL by default.
Anonymous
63be934
?
No.384546
384564 384578
4chancaptcha.png
>>384540
>captchas had a chance to fail even if you typed it in correctly
This has it backwards. When you type the captcha wrong, there's logic that will falsely show "post successful" if cloudflare thinks you're a bot (score < 80) AND you aren't a "known user". Not 100% sure what "known user" means, but it looks to be something like: you first posted >= 1 day ago and you've made >= 3 total posts. Once you've hit those thresholds, or if cloudflare thinks you're not a bot, none of this applies.
Anonymous
3ddf906
?
No.384549
384561
>>384502
I remember when the internet became popular in 1995. All the children from my highschool class (ALL if them) were able to use IRC (after being taught how to of course). Apart from a few people like me, none of them were nerds. Just regular people in secondary education (not even top level either). What happened to society that they have become unable to operate a simple program?
Anonymous
7b67a40
?
No.384557
>>384543
i don't think itll ever truly die
Anonymous
e243ea8
?
No.384561
>>384549
Public education is uninterested in teaching children how to think critically for themselves, communicate effectively, or organize beyond the next meal.
Parents are kept too busy to teach children anything beyond how to wipe their own bum.
Anonymous
e243ea8
?
No.384564
384573
>>384546
Known user is probably someone who has a recent 4chan cookie on their device.
Anonymous
63be934
?
No.384573
384577
>>384564
It's a bit more complicated than that - there are a bunch of different checks in the isUserKnown function. The cookie needs to be at least 1 day old and have 3 posts associated with it, and there are other checks about how recently / how often you've changed IP addresses while keeping the same cookie
Anonymous
e243ea8
?
No.384577
>>384573
That last must be how the detective proxy users, since there was a rule for that.
Anonymous
8b27499
?
No.384578
384745
__rainbow_dash_my_little_pony_and_1_more_drawn_by_pudgeruffian__a356a568551ee6fc9585e870a7d58fa2.jpg
>>384546
Where's the complete source code leak including the captcha? I only have the source code for the main site.
Anonymous
560c0d0
?
No.384579
384580 384634 384637
Holy shit I can't believe this place still exists but I'm glad it does, came here via Kiwi Farms.

You guys have probably discussed it ad nauseam but they were running a 15 year old unsupported OS and hadn't updated the code since Moot left, I am shocked this didn't happen sooner and with the source code leak it is 100% gonna happen again when they come back online unless they completely rewrite it or just admit defeat and switch to Tinyboard or something.

I'm astonished by the level of incompetence and stupidity.
Anonymous
62d317c
?
No.384580
384583
>>384579
>I'm astonished by the level of incompetence and stupidity.
Astonished certainly isn't the word I would use...
Anonymous
560c0d0
?
No.384583
>>384580
...fair, the only thing they changed since Hiro took over was the captcha and we all saw what unusable shit that was.
Anonymous
560c0d0
?
No.384591
384597 384620 384628 384640 384669 384670 384675 386532
grapeseethe.png
Also the janny exodus is supposedly real
https://kiwifarms.net/threads/4chan.37222/post-21146301
I wouldn't stick around either if I was getting doxed for $0
Anonymous
d4fed93
?
No.384597
>>384591
funniest thing in that is fact that moderation has been already shown to be full of shit, meaning rules were followed and not followed wantonly and boards turned shit due it. So that reads pretty much "oh nooo, we didn't do shit before this and if people leave, then we would need to do shit and we don't want to do shit, we want things to be as they were". So yeah, no hope there.
Anonymous
d051649
?
No.384615
17449520417414.png
Hiro is going through his day like if nothing happened to 4chan. It's fucking funny.
Anonymous
62d317c
?
No.384620
384628
>>384591
Looks like this is actually going to kill 4chan. Wow.
Anonymous
f2b23f2
?
No.384628
>>384591
I felt like this would happen. Paid shills and jannies won't get paid to do nothing. They will find new jobs.
It's USAID for 4chan spammers. It's going to lead right back to the glowniggers handling these shills.
>>384620
It's for the best. People will regroup. If it does come back it's going to be the new reddit.
Anonymous
5ce8d45
?
No.384631
384633
Hey anons, I came back to congratulate you all

In the end, /mlpol/ outlived /pol/, it outlived all of 4chan. Congrats guys! mlpol.net is the best bunker after all!
Anonymous
b624615
?
No.384633
384644 385618
7200976 (1).jpg
>>384631
>/mlpol/ outlasted /pol/
That's like saying you lost your limbs but are still alive. Thank you anon for the sentiment, but you'll hear no cheers from his end of the gallery
Anonymous
9c8e36e
?
No.384634
384636 384647
>>384579
>You guys have probably discussed it ad nauseam but they were running a 15 year old unsupported OS
Yeah, it's outrageous. WTF were their admins fucking doing? Just fucking each other in the ass all day? It's bad to be slow on your software updates. It's worse to be slow enough that your software reaches EOL. You can't make it up that you let it stay EOL for a decade and a half.