25 ms·

Anonymous Hacks Epik

413 points by cbtacy 5y ago

ryan29 5y ago
Did anyone download it and look? This is huge if it's true isn't it? I don't want to download it because I don't know what the laws are, but I'm really interested to know if it's true. Rob Monster is a really big domain investor, right? This is really big news if it's true. Edit: I looked it up. Rob started Epik [1]. I wonder if that's really his password. Lol. Edit 2: I wasn't aware of Epik's reputation either. I just knew they're a big (ish) registrar. 1. https://en.wikipedia.org/wiki/Rob_Monster https://en.wikipedia.org/wiki/Rob_Monster
- r721 5y ago
  From Emma Best (DDoSecrets)'s tweets it looks like it's unavailable at the moment (6h ago): >There don't seem to be any active seeds and just under 0.5% seems to be available ATM, so... we'll see what happens! https://twitter.com/NatSecGeek/status/1437827363505573896 https://twitter.com/NatSecGeek/status/1437827363505573896
  - commoner 5y ago
    It's possible that the source sharded the torrent payload and then distributed the shards among multiple "seeds" that are brought online/offline on a rolling schedule, to avoid being identified as the lone seed. Since none of the "seeds" have the entire payload, they are identified as peers (specifically, leechers) in the torrent client.
    - nebula8804 5y ago
      This 30+ MB torrent file is choking ruTorrent and Deluge clients on my seedbox. Not sure how to fix it. Do you know of some alternative way to process such a large file? I have never seen such a large torrent file like this before.
      - commoner 5y ago
        The screenshot from one of the replies to the tweet (https://twitter.com/pompompur_in/status/1437905607273635847 https://twitter.com/pompompur_in/status/1437905607273635847) seems to be of qBittorrent. It's open source and cross-platform, just like Deluge. https://www.qbittorrent.org/download.php https://www.qbittorrent.org/download.php
        nebula8804 5y ago
        Not available on my server unfortunately. Otherwise qBitorrent is the client of choice. I have found magnet links from DdosSecrets here: https://ddosecrets.com/wiki/Epik https://ddosecrets.com/wiki/Epik Edit: Turns out I didn't give enough attention to Transmission as it handled the file. Very impressive. As a side note: this has got me pondering about testing edge cases on open source software. Wonder how much of that actually gets done.
        deleted 5y ago
        [deleted]
      - cheeze 5y ago
        rtorrent has handled literally _everything_ I've ever thrown at it
        generalizations 5y ago
        It didn't handle this one when I tried it.
- Natsu 5y ago
  I heard about it yesterday but only the release on Twitter, I haven't seen the torrent. It will be interesting to see which media outlets report on it after so many adopted a policy of not reporting on hacked info.
  - zavertnik 5y ago
    The torrent is on her website, a few people tweeted that they finally had seeders, but I'm unsure if they got the entire archive. I'm currently trying to download it now, but the torrent file is so large that it's crashing most torrent software (pico, deluge, webtorrent) I throw at it, on 2 machines!
    - NavinF 5y ago
      How big is it? I had similar issues downloading danbooru2020 (3.4TB), but rtorrent did the job with only ~5G RSS. Every other client used 4x the memory and never completed the download.
      - TaylorAlexander 5y ago
        Another commenter mentions that the actual .torrent file is 32MB.
      - fybs 5y ago
        it's 180 GB. transmission works fine.
        sleepybrett 5y ago
        it's not the size of the data that's the problem, it's the size of the metadata and the sheer number of files in the data. Torrents suck for lots of tiny files, and we have that here in spades.
    - adriancr 5y ago
      transmission seems fine
- deleted 5y ago
  [deleted]
- iszomer 5y ago
  I downloaded the torrent file and casually browsed the index but didn't want to waste my time, bandwidth, and storage for a 150+ GB dump.
r721 5y ago
Twitter thread: https://twitter.com/chadloder/status/1437517323775086594 https://twitter.com/chadloder/status/1437517323775086594 Archived OP link: https://archive.is/KJTHN https://archive.is/KJTHN
greyface- 5y ago
Other discussion: https://news.ycombinator.com/item?id=28531447 https://news.ycombinator.com/item?id=28531447
banana_giraffe 5y ago
Looks like the seeder is gone, but they were online just barely briefly enough to get the torrent metadata. For those that are curious what's in there: https://gist.github.com/Q726kbXuN/57f3825493d04867c3d192fd9306076f https://gist.github.com/Q726kbXuN/57f3825493d04867c3d192fd93...
- sieabahlpark 5y ago
  Looks like just a pretty standard WP frontend. Not really much of value.
  - 1vuio0pswjnm7 5y ago
    Thats because that page doesnt show the full list. Try this instead https://gist.github.com/Q726kbXuN/57f3825493d04867c3d192fd9306076f/raw/98e3231ba3c8aeb1b4de97d35bd74e6ebe4d853c/gistfile1.txt https://gist.github.com/Q726kbXuN/57f3825493d04867c3d192fd93...
    - banana_giraffe 5y ago
      Or just click on "view the full file" to see the full list.
      - deleted 5y ago
        [deleted]
- wp381640 5y ago
  Wordpress with a bunch of plugins and a theme from themeforest. Figures. I wouldn't be poking any bears had I been running that setup.
- deleted 5y ago
  [deleted]
gfodor 5y ago
Eventually the cloud is going to burst and everyone’s data will be public. The motive will be similar to this one, where a huge blast radius of collateral damage is accepted in the name of harming bad people. Seeing people eagerly download this data that surely includes countless amounts of personal info of non-Nazis shows this clearly.
- kadoban 5y ago
  How many just regular folks would actually pick Epik? Why?
  - desine 5y ago
    If you truly believe in freedom of speech, it makes sense to support companies who enable those ideals. I'm not familiar enough with the company/drama/story here, but if Epik does not do anything "problematic" other than allow "problematic" speech, then I would consider them. A certain quote often mis-attributed to Voltaire comes to mind [0]. It appears they do have some lines drawn in the sand for free speech, they cancelled service for 8chan. [0] : https://en.wikipedia.org/wiki/Evelyn_Beatrice_Hall https://en.wikipedia.org/wiki/Evelyn_Beatrice_Hall
    - ohashi 5y ago
      I wouldn't support this borderline nutjob. Making employees watching a video of christchurch shooting and saying it was fake? Yeah, no. He has a lot of ties to extremist right wing too. https://en.wikipedia.org/wiki/Rob_Monster#Views https://en.wikipedia.org/wiki/Rob_Monster#Views
      - ryantgtg 5y ago
        This message to epik customers about this "alleged security incident" ends with: > You are in our prayers today. We are grateful for your support and prayer. When situations arise where individuals might not have honorable intentions, I pray for them. I believe that what the enemy intends for evil, God invariably transforms into good. Blessings to you all.
mikedilger 5y ago
Epik pushed back against the mob, particularly against Chad Loder who some consider (according to Andy Ngo) to be an Antifa extremist. No doubt this was retaliation. https://t.co/LUvexnk0fk https://t.co/LUvexnk0fk
- mikedilger 5y ago
  I'm being downed for reporting on the information that I have about this? Fine. Downvote me a thousands times I will not hold my tongue. ADD: I pointed out the info was from Andy Ngo so that people could take that into account according to their own view of him. EDIT2: Ok, I got the order of events backwards.
  - mikedilger 5y ago
    This is my final comment. This account has been abandoned. Mike Dilger has lost faith in the Hacker News community. Mike Dilger would rather engage with retorts and argumentation than downvotes which just amount to an anonymous slap in the face, convey large amounts of emotion but zero information, and are frequently used punitively. BAD DESIGN. Goodbye. Since I can't delete my account I will scramble my password.
    - smoldesu 5y ago
      It's also a shame that I can't read your comments to see if they were worthy of being at the bottom of the page. Bad design indeed.
      - BoHerfIVJrEsq 5y ago
        HN has evolved features for simultaneously doing wrong and hiding the evidence of that wrongdoing. When there's no evidence, who's to say HN isn't really a wonderful place where openminded and curious people have freewheeling discussions? Edit: aaand I'm shadowbanned.
      - pvg 5y ago
        Go to your profile and turn on showdead
vmception 5y ago
> OFFICIAL ANONYMOUS (not to be confused with 'Anonymous Official' grifters) They should sign an ethereum address to reduce ambiguity (Any crypto asset address is fine, even PGP is good enough for this but PGP had 25 years to make that user friendly and common but failed, and cryptocurrencies made signing software more prevalent and uniform wayyyyy faster)
- smoldesu 5y ago
  Trust me, nobody wants to make crypto any easier to use either. What kind of company has interests in maintaining a zero-profit moneypit?
  - vmception 5y ago
    GPG Suite tried to charge for their email plugin, what a disaster that was Cryptocurrency address signing and wallets inherit the whole feature set so might as well run with that
- iszomer 5y ago
  Signing in this context would be debatable, in that it may call into question of how much one would (personally) be willing to risk ownership claims of a crypto asset or content. Remember when satellite.earth "pioneered" this idea for their platform? (not ragging on them but some of the content posted on there were insightful and unique)
  - vmception 5y ago
    I dont remember and I have no idea what you are alluding to You can literally generate any public key / address hash that conforms with a blockchain and sign it and anyone can verify that you therefore control it This has zero crypto assets involved and has no trail of assets so what are you talking about? If anyone sends funds to the address hash the owners can just tornado.cash it and withdraw it somewhere else with an instruction sent over the relay with no prior link to the funds or address. Its perfect right now. But what do you perceive?
r721 5y ago
Gizmodo story: https://gizmodo.com/anonymous-claims-to-have-stolen-huge-trove-of-data-from-1847673935 https://gizmodo.com/anonymous-claims-to-have-stolen-huge-tro...
throwawepik 5y ago
There is a .swp file in the torrent: > strings .whois.sql.swp b0nano 5.4 anonymous datahound whois.sql I tested on my machine and nano swap files contain the nano version (5.4), the username (anonymous), the hostname (datahound) and the filename (whois.sql).
- southerntofu 5y ago
  Nice catch! I downvoted though, because helping to deanonymize antifascist hackers is against my ethics.
  - rijoja 5y ago
    The ethical thing to do when you find a security breach is to report it to them. If you support people who are willing to commit crime to get into power then I really hope that you take some time to think about your political convictions.
    - createunderrate 5y ago
      Quietly reporting a security breach to the company you breached will not make other companies think twice about mishandling the data of their users.
    - southerntofu 5y ago
      > The ethical thing to do when you find a security breach is to report it to them. Do you hold secret services and private hacking companies (Hacking Team, Cellebrite..) to the same standards? If not, why are you complaining about this instance of small-scale hacking for the lulz, and not about the actual insecurity industry who derives power/authority and money from hacking? > If you support people who are willing to commit crime to get into power I certainly don't. I despise power in all forms, unless you're talking power as in "empowerment" or "power to the people". I will however, defend and help anyone committing crimes to abolish power and injustice, because "justice" is not something that can be measured or achieved with the oppressors's tools, namely laws and repression. If you don't support people who break unjust laws and help make those abusing power accountable, I really hope that you take some time to think about your political convictions, and what you would have thought of the Resistance movement against nazi occupation during WWII.
deleted 5y ago
[deleted]
deleted 5y ago
[deleted]
mam2 5y ago
Anyone thinks its a apple employee who did the hack ?
- Thorrez 5y ago
  This wasn't Epic Games, which is in a lawsuit with Apple. This was Epik, a webhosting company.
- pjerem 5y ago
  Not Epic Games but Epik. But nevertheless, in the real world, Apple employees don’t care much about Epic Games. A lot of them probably have a personal account on Epic Games Store to get their free games. Like the random people they are. Pay attention to not mix up the marketing bullshit drama of those companies around this trial with the humans working for theses companies. I doubt anyone working in there is bothered with this trial (appart from legal departments).
Lammy 5y ago
>NOTORIOUS "HACKERS ON ESTRADIOL" PRESENT GRAND REVEAL I love how this is a tongue-in-cheek reference to the "hackers on steroids" piece from 2007 https://www.youtube.com/watch?v=DNO6G4ApJQY https://www.youtube.com/watch?v=DNO6G4ApJQY
- deleted 5y ago
  [deleted]
- Redoubts 5y ago
  Surprised there’s no ascii art of programmer socks.
  - jtvjan 5y ago
    That's a 2016 meme. Much too recent.
- markenqualitaet 5y ago
  I mean technically correct. I think cortisol would have been funnier tho.
Beaver117 5y ago
I don't get it, didn't anonymous start on 4chan? Why are they attacking this company which is hosting similar content? I thought anonymous used to only attack megacorps
- deleted 5y ago
  [deleted]
- hsbauauvhabzb 5y ago
  Anonymous is a collective with different motives. even if it wasn’t, anonymous was never much more than opportunistic hacks painted to look political.
- drdeca 5y ago
  Anonymous isn’t really a single thing, is my impression. Anyone can write “-anonymous” at the end of a message.
  - SilverRed 5y ago
    It's also what shows up in the "username" section of posts for everyone except admins (maybe other cases)
- deleted 5y ago
  [deleted]
- southerntofu 5y ago
  Parts of the anonymous trend started on 4chan. However not everyone involved with anonymous is/was involved with 4chan, and it was also at a time when 4chan was more of an anonymous meme board and less of a pedo/nazi aggregator. Anonymous doesn't only attack megacorps. First because anonymous is not a group so there's no central leadership to decide who to attack. Second because they're overall involved with fighting injustices of all kinds. It's not the first nazi-friendly site to get hacked by anonymous, but to my knowledge the first nazi-friendly webhost. Also, depending on your understanding of what a megacorp is, Epik may very well qualify.
CallMeJim 5y ago
This has been updated to include a spiel about Kent Dahlgren. I'm not aware of the story there — is there some sort of feud between the two parties?
- user764743 5y ago
  just some drama between treehouses within anon, just like old times.
Thorrez 5y ago
Lest anyone be confused, this is Epik the web hosting company[1], not Epic Games the videogame company[2], or Epic Systems the healthcare software company[3]. [1] https://en.wikipedia.org/wiki/Epik_(company) https://en.wikipedia.org/wiki/Epik_(company) [2] https://en.wikipedia.org/wiki/Epic_Games https://en.wikipedia.org/wiki/Epic_Games [3] https://en.wikipedia.org/wiki/Epic_Systems https://en.wikipedia.org/wiki/Epic_Systems
- LewisVerstappen 5y ago
  Nor is it Epic! the digital reading platform for kids[1], not EPIC the Electronic Privacy Information Center[2], or EPIC Provisions the company behind high protein meat snacks[3]. [1] https://www.getepic.com/ https://www.getepic.com/ [2] https://epic.org/ https://epic.org/ [3] https://epicprovisions.com/ https://epicprovisions.com/
  - chrischen 5y ago
    While I wasn't going to get it confused with any other Epics, I had no idea what Epik with a K was.
  - FDSGSG 5y ago
    >[2] https://epic.org/ https://epic.org/ https://epic.org/privacy/surveillance/prg-scorecard/basis.php?id=1%20UNION%20ALL%20SELECT%20NULL,@@HOSTNAME,NULL,VERSION(),user()-- https://epic.org/privacy/surveillance/prg-scorecard/basis.ph... Only two left to go?
    - Thorrez 5y ago
      Wow, do you try to SQL inject every site linked from HN comments?
  - Hackbraten 5y ago
    Neither is it Epyx, Inc., the venerable videogame company [1]. [1]: https://en.wikipedia.org/wiki/Epyx https://en.wikipedia.org/wiki/Epyx
vermilingua 5y ago
> OFFICIAL ANONYMOUS (not to be confused with 'Anonymous Official' grifters) I find it ironic that this is the first line of a “press release” from a group that was always defined by its nebulous nature.
- AllegedAlec 5y ago
  Yeah. For a group claiming to be Anonymous, they care a whole fucking lot about 'lmao muh politics' rather than doing shit for the lulz.
  - deleted 5y ago
    [deleted]
  - southerntofu 5y ago
    Why can't politics be fun? Also, do you remember a time when Anonymous wasn't about politics? I clearly remember some strong political positions against the Church of Scientology, against the surveillance apparatus, etc..
    - deleted 5y ago
      [deleted]
    - gurkendoktor 5y ago
      I don't disagree with what you wrote, but as far as 4chan has developed a style/brand, the tone of the page felt surprisingly non-edgy to me. Anons usually aren't known for unironically repeating media slogans, are they? ("Abortion is a human right!") The mudkipz catchphrase was also very forced. Reminded me of the "hello fellow young people" meme. Of course, it might all be intentional.
  - tcmart14 5y ago
    I believe Anonymous claimed to do a DOS on the DOJ website because of the arrest of Kevin Dotcom (2012). Operation Ferguson (2014). Operation Saudi (2013). Operation KKK (2015). Operation Avenge Asange (2011). Quiet a few operations under the name of anonymous have had some sort of political or social motivation.
kgeist 5y ago
Just a few days ago a Russian web host was hacked as well, with a similar statement. I guess they're all exploiting some recently discovered bug in web hosting software.
- schleck8 5y ago
  Not infrastructure related, but on monday the german anonymous collective managed to get a former IT admin of one of the largest covid conspiracy theorists to hand over his credentials, transferred all domains (he had ~ 10 aliases) and deleted his telegram channels he still hasn't regained control -> https://www.attilahildmann.de/ https://www.attilahildmann.de/
  - southerntofu 5y ago
    Operation Tinfoil. Thanks for the link, love that!
chairmanwow1 5y ago
uTorrent Web doesn't seem to understand this torrent file ¯\_(ツ)_/¯
- deleted 5y ago
  [deleted]
petecooper 5y ago
The linked .torrent file is ~30MB, and appears to be ~180GB of data with ~190,000 files. It's split into ~689,000 pieces of ~256KB, hence the comparatively large .torrent file overall.
- schleck8 5y ago
  I'm sure this will become a running gag, someone commenting epic/epik after large leaks
  - was_a_dev 5y ago
    Now that was epik
AllegedAlec 5y ago
> Time to find out who in your family secretly ran an Ivermectin horse porn fetish site, disinfo publishing outfit, or yet another QAnon hellhole. > Decloak origin IPs of nazi websites for further investigation, poking, prodding! > Map out a decade of online fash with a level of clarity nobody has been able to UNTIL NOW! > Support your starving hacktivists, and they will bless you in turn. > So long, for now! Support #OperationJane and mess with Texas today! > Abortion is a human right! Yeah... This is not Anonymous. This is a bunch of people larping as them.
- twistslider 5y ago
  Anyone can claim to be part of Anonymous, that's kind of the point. It's not an official group with representatives or any kind of official viewpoints. All you need to do is say you're part of Anonymous and that's it, no 'larping' required.
  - cbg0 5y ago
    I think the larping is actually mandatory if you want to pose as Anonymous.
- duemti 5y ago
  yep
- Cthulhu_ 5y ago
  There is no one Anonymous, just like there is no one "antifa" or one "black lives matter"; it's a movement, a conviction, not an organized entity. I mean who is the leader of anonymous? Who is the leader of "antifa"? BLM? TL;DR you don't really get internet trolls / anarchists / unorganized entities operating under a shared name.
- Applejinx 5y ago
  So you're saying Anonymous IS someone's personal army, and that this contradicts the rules of that personal army's conduct? Big if true.
- mekkkkkk 5y ago
mcintyre1994 5y ago
Looks like they had access to their CDN at some point too: https://archive.is/traih https://archive.is/traih
- tcmart14 5y ago
  xD I love the PS down there in the bottom.
  - Zancarius 5y ago
    The Q references had me laughing pretty hard.
jungleanimal 5y ago
All these recent hacks. Cant any of these companies use proper security experts? I mean they have the funds, why skip this and avoid all the backlash that comes with this. Its expensive but not as much as letting everyone know you messed up hard
- southerntofu 5y ago
  Implementing security guidelines is not as easy as paying a security expert. You then have to follow their advice, which means security practice for all employees. It can be costly and cumbersome. Of course, it would have reduced damaged, such as pointing out that unhashed or unsalted MD5 passwords in a database is... what we've stopped doing 20 years ago for good reasons? :) But well, if you're a big hosting provider tailoring to white supremacist content, you usually don't need so much security, since apart from anonymous-adjacent antifascists pretty much everyone is licking your boots, including law enforcement. The biggest neonazi forums have been around for decades, and their biggest proponents are well hidden behind the walls of our police stations, banks and parliaments. Love the reference to Woody Guthrie, too https://en.wikipedia.org/wiki/This_machine_kills_fascists https://en.wikipedia.org/wiki/This_machine_kills_fascists
  - vmoore 5y ago
    > It can be costly and cumbersome That's the opportunity cost of defending. It's like walking through treacle at times, but you have to visualize the worst case scenario in your head and act as if you're gonna get breached. You need to essentially enact the situation in your head so that it gives you the momentum you need to keep defending.
  - tcmart14 5y ago
    Yup. Security is a lot of time an after-thought and a burden to quiet a few companies since security is something that is not of immediate value. Last spring we had a speaker from northrup-grunman who talked about the need to push for a DevSecOps strategy.
    - 5y ago
TheTester 5y ago
"The Internet Hate Machine hates fascists." Patently a certain lie. I would definitively not be that surprised if it turns out this is just some intelligence agency, posing as anonymous.
tomc1985 5y ago
Loving all the 2000s era meme references. What cultured taste.
jungleanimal 5y ago
Anonymous strikes again, this time with a well known web registration company with a decade of data. This is a blatant example how poor security management leads to the hardship of thousands if not millions of regular people. Now their private details have a risk of being public and fully open to scrutiny. And its not just some simple data breach they allegedly stole domain purchases and transfers, account credentials of pretty much all their clients. Unacceptable. Embarrassing. They should be held accountable for all this if it comes out to be true.
- qeternity 5y ago
  Epik’s lack of security is the least damning thing about Epik. Google around for their very colorful history. These are bad hombres.
  - capableweb 5y ago
    Could you share something damning instead of referring people to search, as we probably will find different information. As far as I can tell, Epik focused on hosting and DNS management for marginalized/excluded groups on the internet, so naturally they attract a lot of groups. Not sure why that'd be bad though. Things like this also makes me actually like the company more: > Pharmaceutical watchdog website LegitScript reported in 2018 that they had alerted Epik to the sale of illegal drugs and counterfeit medications on websites registered by Epik, and that Epik had refused to act upon the information without a court order That's exactly how I want my hosting company to act, and any that don't are actively fragile. From https://en.wikipedia.org/wiki/Epik_(company) https://en.wikipedia.org/wiki/Epik_(company)
    - lelandfe 5y ago
      Remember when a guy murdered 11 people in a Pittsburgh synagogue? When it was revealed the shooter had posted about it on Gab beforehand, every service powering the social network pulled the plug. Epik was who brought them back online.[0] The hero of hate speech is not exactly a sterling reputation to have. [0] https://www.wired.com/story/how-right-wing-social-media-site-gab-got-back-online/ https://www.wired.com/story/how-right-wing-social-media-site...
bigbaguette 5y ago
Have a look at the response headers (!)
- milt 5y ago
  Thank you, those were a treat.
agnesobel 5y ago
Did anyone download this and confirm? Quite some news if this is all real
genr8 5y ago
One step closer to anarcho-tyranny. Anonymous has become the Antifa of the Internet. Basically a far-left strike force, cloaked but public, with enough plausible deniability that the 3 letter agencies allow to exist because they can do things beyond the law - as long as they dont go after the gov... One has to wonder why they are so focused on [Combating far right extremism and misinformation] when it's clearly designed to benefit the overall establishment system status-quo. Even _if_ this whole Operation Jane anti anti-abortion-law texas hacktivism politics made sense to someone, it now has a much larger effect on the internet as a whole. Epik - one of the last hosting providers on the internet in favor of absolute free speech (within the law) that still exists. The risk/reward equation doesnt add up. More innocent rights are being violated with this hack alone compared to saving womens abortion rights.
- kitd 5y ago
  Well, if they've nothing to hide, they've nothing to fear. That's what me & my innocent rights have been told all this time.
- nextlevelwizard 5y ago
  Quite a LARP you have going on there.
  - Applejinx 5y ago
    Probably also anon, but more /pol/ of recent years.
- Cthulhu_ 5y ago
  Is being anti-fascist a bad thing now? Wasn't there a bloody war fought over that? I thought the default was to be against fascism? It's the kind of thing where you approve of it if you're not explicitly against it. Also, are you implying Epik is fascist? I mean you're not wrong.
  - chroem- 5y ago
    What's the difference between an anti-fascist and a fascist if they use the same tactics? Two weeks ago "anti-fascists" opened fire into a crowd of peaceful demonstrators in my state's capitol.
staticelf 5y ago
While I think people should have good security and hash the passwords I honestly think the guys behind this are real scumbags. Probably not going to happen, but it would be interesting with an arrest.
hplovecraftscat 5y ago
Actually looks like fun to work for the CIA/Mossad... Getting to larp as hacktivists and do useless things like this that have zero impact on the elites/mic/zog but still have normies soy facing. Glows lel
EamonnMR 5y ago
I love the old school memes (seven proxies, cowsay, nine thousand, the whole thing being a txt file.) Some early aughts charm right there.
- hwers 5y ago
  Tells you something about the age of the hackers probably (over 30)
  - optimalsolver 5y ago
    The old boys ride again.
- 2OEH8eoCRo0 5y ago
  Herd u liek mudkipz.
  - pnemonic 5y ago
    OMG I LOVE MUDKIPS (UNF UNF UNF)
ollybee 5y ago
Not a great day for this HostBill to be announcing their new Epik integration.. https://twitter.com/hostbillappcom/status/1438113494973489159 https://twitter.com/hostbillappcom/status/143811349497348915...
vmoore 5y ago
Are they currently writing up a blogpost about this? Their blog has nothing: https://www.epik.com/blog/ https://www.epik.com/blog/ And this is a megadump of a hack. But you can buy a .MONSTER TLD For $1.49: https://www.epik.com/promos/monster https://www.epik.com/promos/monster
- schleck8 5y ago
  rob.monster is still available apparently
  - vmoore 5y ago
    Looks registered to me, but seems like it's parked: https://whois.domaintools.com/rob.monster https://whois.domaintools.com/rob.monster Domain Name: ROB.MONSTER Registry Domain ID: D98633729-CNIC Registrar WHOIS Server: whois.psi-usa.info Registrar URL: https://www.internetx.com/ Updated Date: 2021-06-05T01:19:43.0Z Creation Date: 2019-04-01T14:00:01.0Z Registry Expiry Date: 2022-04-01T23:59:59.0Z Registrar: InternetX GmbH Registrar IANA ID: 151 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Registrant Organization: Registrant State/Province: nrw Registrant Country: DE Registrant Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Admin Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Tech Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Name Server: NS1.WESELLTHISDOMAIN.COM Name Server: NS2.WESELLTHISDOMAIN.COM Name Server: NS3.WESELLTHISDOMAIN.COM DNSSEC: unsigned Billing Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Registrar Abuse Contact Email: Registrar Abuse Contact Phone: URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
Threeve303 5y ago
For every action, there must be an equal but opposite reaction.
robalfonso 5y ago
Speaking to Gizmodo, Epik said they were unaware that they had been hacked, but would investigate. What's interesting here is that if you are an ICANN accredited registrar there is a window in which you must report a breach to them, may be interesting to find if they have/have not reported said breach.
Threeve303 5y ago
If someone was hired and trusted with the data then they leaked it or used it for personal gain then it’s not all that virtuous
happyrock 5y ago
Any technical analysis of the hack yet? How'd they get in?
maytrixfree 5y ago
Sorry but i have no idea what any of you are saying, nor do i have any idea where to direct this question, but can someone/anyone plz listen to my (probably useless) idea, and/or share with whoever takes requests? In just tired of all of the kids around here following all these self-destructing and mindless 'trends' from all of these social media sites! Its just so embarrassing, i wish these younger generations would stop copying bad examples probably started by some evil genius that works for the govt of a country who hates us and wants to see what stupid tricks they can make us do. ANYWAYS.... i sure would like to know what would happen if everyone who has youtube, tiktok, facebook (etc) account had their personalized results/preferences changed so that all of the suggestions and 'similar' results would consist of 'Restoring Faith in Humanity' type videos. Thank you for listening, sorry its probably a dumb idea.
maytrix_free 5y ago
Sorry but i have no idea what any of you are saying, nor do i have any idea where to direct this question, but can someone/anyone plz listen to my (probably useless) idea, and/or share with whoever takes requests? In just tired of all of the kids around here following all these self-destructing and mindless 'trends' from all of these social media sites! Its just so embarrassing, i wish these younger generations would stop copying bad examples probably started by some evil genius that works for the govt of a country who hates us and wants to see what stupid tricks they can make us do. ANYWAYS.... i sure would like to know what would happen if everyone who has youtube, tiktok, facebook (etc) account had their personalized results/preferences changed so that all of the suggestions and 'similar' results would consist of 'Restoring Faith in Humanity' type videos. Thank you for listening, sorry its probably a dumb idea.

413 points by cbtacy 5y ago

Did anyone download it and look? This is huge if it's true isn't it? I don't want to download it because I don't know what the laws are, but I'm really interested to know if it's true. Rob Monster is a really big domain investor, right? This is really big news if it's true. Edit: I looked it up. Rob started Epik [1]. I wonder if that's really his password. Lol. Edit 2: I wasn't aware of Epik's reputation either. I just knew they're a big (ish) registrar. 1. https://en.wikipedia.org/wiki/Rob_Monster https://en.wikipedia.org/wiki/Rob_Monster

r721 5y ago
From Emma Best (DDoSecrets)'s tweets it looks like it's unavailable at the moment (6h ago): >There don't seem to be any active seeds and just under 0.5% seems to be available ATM, so... we'll see what happens! https://twitter.com/NatSecGeek/status/1437827363505573896 https://twitter.com/NatSecGeek/status/1437827363505573896
- commoner 5y ago
  It's possible that the source sharded the torrent payload and then distributed the shards among multiple "seeds" that are brought online/offline on a rolling schedule, to avoid being identified as the lone seed. Since none of the "seeds" have the entire payload, they are identified as peers (specifically, leechers) in the torrent client.
  - nebula8804 5y ago
    This 30+ MB torrent file is choking ruTorrent and Deluge clients on my seedbox. Not sure how to fix it. Do you know of some alternative way to process such a large file? I have never seen such a large torrent file like this before.
    - commoner 5y ago
      The screenshot from one of the replies to the tweet (https://twitter.com/pompompur_in/status/1437905607273635847 https://twitter.com/pompompur_in/status/1437905607273635847) seems to be of qBittorrent. It's open source and cross-platform, just like Deluge. https://www.qbittorrent.org/download.php https://www.qbittorrent.org/download.php
      - nebula8804 5y ago
        Not available on my server unfortunately. Otherwise qBitorrent is the client of choice. I have found magnet links from DdosSecrets here: https://ddosecrets.com/wiki/Epik https://ddosecrets.com/wiki/Epik Edit: Turns out I didn't give enough attention to Transmission as it handled the file. Very impressive. As a side note: this has got me pondering about testing edge cases on open source software. Wonder how much of that actually gets done.
        deleted 5y ago
        [deleted]
    - cheeze 5y ago
      rtorrent has handled literally _everything_ I've ever thrown at it
      - generalizations 5y ago
        It didn't handle this one when I tried it.
Natsu 5y ago
I heard about it yesterday but only the release on Twitter, I haven't seen the torrent. It will be interesting to see which media outlets report on it after so many adopted a policy of not reporting on hacked info.
- zavertnik 5y ago
  The torrent is on her website, a few people tweeted that they finally had seeders, but I'm unsure if they got the entire archive. I'm currently trying to download it now, but the torrent file is so large that it's crashing most torrent software (pico, deluge, webtorrent) I throw at it, on 2 machines!
  - NavinF 5y ago
    How big is it? I had similar issues downloading danbooru2020 (3.4TB), but rtorrent did the job with only ~5G RSS. Every other client used 4x the memory and never completed the download.
    - TaylorAlexander 5y ago
      Another commenter mentions that the actual .torrent file is 32MB.
    - fybs 5y ago
      it's 180 GB. transmission works fine.
      - sleepybrett 5y ago
        it's not the size of the data that's the problem, it's the size of the metadata and the sheer number of files in the data. Torrents suck for lots of tiny files, and we have that here in spades.
  - adriancr 5y ago
    transmission seems fine
deleted 5y ago
[deleted]
iszomer 5y ago
I downloaded the torrent file and casually browsed the index but didn't want to waste my time, bandwidth, and storage for a 150+ GB dump.

r721 5y ago

Twitter thread: https://twitter.com/chadloder/status/1437517323775086594 https://twitter.com/chadloder/status/1437517323775086594 Archived OP link: https://archive.is/KJTHN https://archive.is/KJTHN

greyface- 5y ago

Other discussion: https://news.ycombinator.com/item?id=28531447 https://news.ycombinator.com/item?id=28531447

banana_giraffe 5y ago

Looks like the seeder is gone, but they were online just barely briefly enough to get the torrent metadata. For those that are curious what's in there: https://gist.github.com/Q726kbXuN/57f3825493d04867c3d192fd9306076f https://gist.github.com/Q726kbXuN/57f3825493d04867c3d192fd93...

sieabahlpark 5y ago
Looks like just a pretty standard WP frontend. Not really much of value.
- 1vuio0pswjnm7 5y ago
  Thats because that page doesnt show the full list. Try this instead https://gist.github.com/Q726kbXuN/57f3825493d04867c3d192fd9306076f/raw/98e3231ba3c8aeb1b4de97d35bd74e6ebe4d853c/gistfile1.txt https://gist.github.com/Q726kbXuN/57f3825493d04867c3d192fd93...
  - banana_giraffe 5y ago
    Or just click on "view the full file" to see the full list.
    - deleted 5y ago
      [deleted]
wp381640 5y ago
Wordpress with a bunch of plugins and a theme from themeforest. Figures. I wouldn't be poking any bears had I been running that setup.
deleted 5y ago
[deleted]

gfodor 5y ago

Eventually the cloud is going to burst and everyone’s data will be public. The motive will be similar to this one, where a huge blast radius of collateral damage is accepted in the name of harming bad people. Seeing people eagerly download this data that surely includes countless amounts of personal info of non-Nazis shows this clearly.

kadoban 5y ago
How many just regular folks would actually pick Epik? Why?
- desine 5y ago
  If you truly believe in freedom of speech, it makes sense to support companies who enable those ideals. I'm not familiar enough with the company/drama/story here, but if Epik does not do anything "problematic" other than allow "problematic" speech, then I would consider them. A certain quote often mis-attributed to Voltaire comes to mind [0]. It appears they do have some lines drawn in the sand for free speech, they cancelled service for 8chan. [0] : https://en.wikipedia.org/wiki/Evelyn_Beatrice_Hall https://en.wikipedia.org/wiki/Evelyn_Beatrice_Hall
  - ohashi 5y ago
    I wouldn't support this borderline nutjob. Making employees watching a video of christchurch shooting and saying it was fake? Yeah, no. He has a lot of ties to extremist right wing too. https://en.wikipedia.org/wiki/Rob_Monster#Views https://en.wikipedia.org/wiki/Rob_Monster#Views
    - ryantgtg 5y ago
      This message to epik customers about this "alleged security incident" ends with: > You are in our prayers today. We are grateful for your support and prayer. When situations arise where individuals might not have honorable intentions, I pray for them. I believe that what the enemy intends for evil, God invariably transforms into good. Blessings to you all.

mikedilger 5y ago

Epik pushed back against the mob, particularly against Chad Loder who some consider (according to Andy Ngo) to be an Antifa extremist. No doubt this was retaliation. https://t.co/LUvexnk0fk https://t.co/LUvexnk0fk

mikedilger 5y ago
I'm being downed for reporting on the information that I have about this? Fine. Downvote me a thousands times I will not hold my tongue. ADD: I pointed out the info was from Andy Ngo so that people could take that into account according to their own view of him. EDIT2: Ok, I got the order of events backwards.
- mikedilger 5y ago
  This is my final comment. This account has been abandoned. Mike Dilger has lost faith in the Hacker News community. Mike Dilger would rather engage with retorts and argumentation than downvotes which just amount to an anonymous slap in the face, convey large amounts of emotion but zero information, and are frequently used punitively. BAD DESIGN. Goodbye. Since I can't delete my account I will scramble my password.
  - smoldesu 5y ago
    It's also a shame that I can't read your comments to see if they were worthy of being at the bottom of the page. Bad design indeed.
    - BoHerfIVJrEsq 5y ago
      HN has evolved features for simultaneously doing wrong and hiding the evidence of that wrongdoing. When there's no evidence, who's to say HN isn't really a wonderful place where openminded and curious people have freewheeling discussions? Edit: aaand I'm shadowbanned.
    - pvg 5y ago
      Go to your profile and turn on showdead

vmception 5y ago

> OFFICIAL ANONYMOUS (not to be confused with 'Anonymous Official' grifters) They should sign an ethereum address to reduce ambiguity (Any crypto asset address is fine, even PGP is good enough for this but PGP had 25 years to make that user friendly and common but failed, and cryptocurrencies made signing software more prevalent and uniform wayyyyy faster)

smoldesu 5y ago
Trust me, nobody wants to make crypto any easier to use either. What kind of company has interests in maintaining a zero-profit moneypit?
- vmception 5y ago
  GPG Suite tried to charge for their email plugin, what a disaster that was Cryptocurrency address signing and wallets inherit the whole feature set so might as well run with that
iszomer 5y ago
Signing in this context would be debatable, in that it may call into question of how much one would (personally) be willing to risk ownership claims of a crypto asset or content. Remember when satellite.earth "pioneered" this idea for their platform? (not ragging on them but some of the content posted on there were insightful and unique)
- vmception 5y ago
  I dont remember and I have no idea what you are alluding to You can literally generate any public key / address hash that conforms with a blockchain and sign it and anyone can verify that you therefore control it This has zero crypto assets involved and has no trail of assets so what are you talking about? If anyone sends funds to the address hash the owners can just tornado.cash it and withdraw it somewhere else with an instruction sent over the relay with no prior link to the funds or address. Its perfect right now. But what do you perceive?

r721 5y ago

Gizmodo story: https://gizmodo.com/anonymous-claims-to-have-stolen-huge-trove-of-data-from-1847673935 https://gizmodo.com/anonymous-claims-to-have-stolen-huge-tro...

throwawepik 5y ago

There is a .swp file in the torrent: > strings .whois.sql.swp b0nano 5.4 anonymous datahound whois.sql I tested on my machine and nano swap files contain the nano version (5.4), the username (anonymous), the hostname (datahound) and the filename (whois.sql).

southerntofu 5y ago
Nice catch! I downvoted though, because helping to deanonymize antifascist hackers is against my ethics.
- rijoja 5y ago
  The ethical thing to do when you find a security breach is to report it to them. If you support people who are willing to commit crime to get into power then I really hope that you take some time to think about your political convictions.
  - createunderrate 5y ago
    Quietly reporting a security breach to the company you breached will not make other companies think twice about mishandling the data of their users.
  - southerntofu 5y ago
    > The ethical thing to do when you find a security breach is to report it to them. Do you hold secret services and private hacking companies (Hacking Team, Cellebrite..) to the same standards? If not, why are you complaining about this instance of small-scale hacking for the lulz, and not about the actual insecurity industry who derives power/authority and money from hacking? > If you support people who are willing to commit crime to get into power I certainly don't. I despise power in all forms, unless you're talking power as in "empowerment" or "power to the people". I will however, defend and help anyone committing crimes to abolish power and injustice, because "justice" is not something that can be measured or achieved with the oppressors's tools, namely laws and repression. If you don't support people who break unjust laws and help make those abusing power accountable, I really hope that you take some time to think about your political convictions, and what you would have thought of the Resistance movement against nazi occupation during WWII.

deleted 5y ago

[deleted]

deleted 5y ago

[deleted]

mam2 5y ago

Anyone thinks its a apple employee who did the hack ?

Thorrez 5y ago
This wasn't Epic Games, which is in a lawsuit with Apple. This was Epik, a webhosting company.
pjerem 5y ago
Not Epic Games but Epik. But nevertheless, in the real world, Apple employees don’t care much about Epic Games. A lot of them probably have a personal account on Epic Games Store to get their free games. Like the random people they are. Pay attention to not mix up the marketing bullshit drama of those companies around this trial with the humans working for theses companies. I doubt anyone working in there is bothered with this trial (appart from legal departments).

Lammy 5y ago

>NOTORIOUS "HACKERS ON ESTRADIOL" PRESENT GRAND REVEAL I love how this is a tongue-in-cheek reference to the "hackers on steroids" piece from 2007 https://www.youtube.com/watch?v=DNO6G4ApJQY https://www.youtube.com/watch?v=DNO6G4ApJQY

deleted 5y ago
[deleted]
Redoubts 5y ago
Surprised there’s no ascii art of programmer socks.
- jtvjan 5y ago
  That's a 2016 meme. Much too recent.
markenqualitaet 5y ago
I mean technically correct. I think cortisol would have been funnier tho.

Beaver117 5y ago

I don't get it, didn't anonymous start on 4chan? Why are they attacking this company which is hosting similar content? I thought anonymous used to only attack megacorps

deleted 5y ago
[deleted]
hsbauauvhabzb 5y ago
Anonymous is a collective with different motives. even if it wasn’t, anonymous was never much more than opportunistic hacks painted to look political.
drdeca 5y ago
Anonymous isn’t really a single thing, is my impression. Anyone can write “-anonymous” at the end of a message.
- SilverRed 5y ago
  It's also what shows up in the "username" section of posts for everyone except admins (maybe other cases)
deleted 5y ago
[deleted]
southerntofu 5y ago
Parts of the anonymous trend started on 4chan. However not everyone involved with anonymous is/was involved with 4chan, and it was also at a time when 4chan was more of an anonymous meme board and less of a pedo/nazi aggregator. Anonymous doesn't only attack megacorps. First because anonymous is not a group so there's no central leadership to decide who to attack. Second because they're overall involved with fighting injustices of all kinds. It's not the first nazi-friendly site to get hacked by anonymous, but to my knowledge the first nazi-friendly webhost. Also, depending on your understanding of what a megacorp is, Epik may very well qualify.

CallMeJim 5y ago

This has been updated to include a spiel about Kent Dahlgren. I'm not aware of the story there — is there some sort of feud between the two parties?

user764743 5y ago
just some drama between treehouses within anon, just like old times.

Thorrez 5y ago

Lest anyone be confused, this is Epik the web hosting company[1], not Epic Games the videogame company[2], or Epic Systems the healthcare software company[3]. [1] https://en.wikipedia.org/wiki/Epik_(company) https://en.wikipedia.org/wiki/Epik_(company) [2] https://en.wikipedia.org/wiki/Epic_Games https://en.wikipedia.org/wiki/Epic_Games [3] https://en.wikipedia.org/wiki/Epic_Systems https://en.wikipedia.org/wiki/Epic_Systems

LewisVerstappen 5y ago
Nor is it Epic! the digital reading platform for kids[1], not EPIC the Electronic Privacy Information Center[2], or EPIC Provisions the company behind high protein meat snacks[3]. [1] https://www.getepic.com/ https://www.getepic.com/ [2] https://epic.org/ https://epic.org/ [3] https://epicprovisions.com/ https://epicprovisions.com/
- chrischen 5y ago
  While I wasn't going to get it confused with any other Epics, I had no idea what Epik with a K was.
- FDSGSG 5y ago
  >[2] https://epic.org/ https://epic.org/ https://epic.org/privacy/surveillance/prg-scorecard/basis.php?id=1%20UNION%20ALL%20SELECT%20NULL,@@HOSTNAME,NULL,VERSION(),user()-- https://epic.org/privacy/surveillance/prg-scorecard/basis.ph... Only two left to go?
  - Thorrez 5y ago
    Wow, do you try to SQL inject every site linked from HN comments?
- Hackbraten 5y ago
  Neither is it Epyx, Inc., the venerable videogame company [1]. [1]: https://en.wikipedia.org/wiki/Epyx https://en.wikipedia.org/wiki/Epyx

vermilingua 5y ago

> OFFICIAL ANONYMOUS (not to be confused with 'Anonymous Official' grifters) I find it ironic that this is the first line of a “press release” from a group that was always defined by its nebulous nature.

AllegedAlec 5y ago
Yeah. For a group claiming to be Anonymous, they care a whole fucking lot about 'lmao muh politics' rather than doing shit for the lulz.
- deleted 5y ago
  [deleted]
- southerntofu 5y ago
  Why can't politics be fun? Also, do you remember a time when Anonymous wasn't about politics? I clearly remember some strong political positions against the Church of Scientology, against the surveillance apparatus, etc..
  - deleted 5y ago
    [deleted]
  - gurkendoktor 5y ago
    I don't disagree with what you wrote, but as far as 4chan has developed a style/brand, the tone of the page felt surprisingly non-edgy to me. Anons usually aren't known for unironically repeating media slogans, are they? ("Abortion is a human right!") The mudkipz catchphrase was also very forced. Reminded me of the "hello fellow young people" meme. Of course, it might all be intentional.
- tcmart14 5y ago
  I believe Anonymous claimed to do a DOS on the DOJ website because of the arrest of Kevin Dotcom (2012). Operation Ferguson (2014). Operation Saudi (2013). Operation KKK (2015). Operation Avenge Asange (2011). Quiet a few operations under the name of anonymous have had some sort of political or social motivation.

kgeist 5y ago

Just a few days ago a Russian web host was hacked as well, with a similar statement. I guess they're all exploiting some recently discovered bug in web hosting software.

schleck8 5y ago
Not infrastructure related, but on monday the german anonymous collective managed to get a former IT admin of one of the largest covid conspiracy theorists to hand over his credentials, transferred all domains (he had ~ 10 aliases) and deleted his telegram channels he still hasn't regained control -> https://www.attilahildmann.de/ https://www.attilahildmann.de/
- southerntofu 5y ago
  Operation Tinfoil. Thanks for the link, love that!

chairmanwow1 5y ago

uTorrent Web doesn't seem to understand this torrent file ¯\_(ツ)_/¯

deleted 5y ago
[deleted]

petecooper 5y ago

The linked .torrent file is ~30MB, and appears to be ~180GB of data with ~190,000 files. It's split into ~689,000 pieces of ~256KB, hence the comparatively large .torrent file overall.

schleck8 5y ago
I'm sure this will become a running gag, someone commenting epic/epik after large leaks
- was_a_dev 5y ago
  Now that was epik

AllegedAlec 5y ago

> Time to find out who in your family secretly ran an Ivermectin horse porn fetish site, disinfo publishing outfit, or yet another QAnon hellhole. > Decloak origin IPs of nazi websites for further investigation, poking, prodding! > Map out a decade of online fash with a level of clarity nobody has been able to UNTIL NOW! > Support your starving hacktivists, and they will bless you in turn. > So long, for now! Support #OperationJane and mess with Texas today! > Abortion is a human right! Yeah... This is not Anonymous. This is a bunch of people larping as them.

twistslider 5y ago
Anyone can claim to be part of Anonymous, that's kind of the point. It's not an official group with representatives or any kind of official viewpoints. All you need to do is say you're part of Anonymous and that's it, no 'larping' required.
- cbg0 5y ago
  I think the larping is actually mandatory if you want to pose as Anonymous.
duemti 5y ago
yep
Cthulhu_ 5y ago
There is no one Anonymous, just like there is no one "antifa" or one "black lives matter"; it's a movement, a conviction, not an organized entity. I mean who is the leader of anonymous? Who is the leader of "antifa"? BLM? TL;DR you don't really get internet trolls / anarchists / unorganized entities operating under a shared name.
Applejinx 5y ago
So you're saying Anonymous IS someone's personal army, and that this contradicts the rules of that personal army's conduct? Big if true.
mekkkkkk 5y ago

mcintyre1994 5y ago

Looks like they had access to their CDN at some point too: https://archive.is/traih https://archive.is/traih

tcmart14 5y ago
xD I love the PS down there in the bottom.
- Zancarius 5y ago
  The Q references had me laughing pretty hard.

jungleanimal 5y ago

All these recent hacks. Cant any of these companies use proper security experts? I mean they have the funds, why skip this and avoid all the backlash that comes with this. Its expensive but not as much as letting everyone know you messed up hard

southerntofu 5y ago
Implementing security guidelines is not as easy as paying a security expert. You then have to follow their advice, which means security practice for all employees. It can be costly and cumbersome. Of course, it would have reduced damaged, such as pointing out that unhashed or unsalted MD5 passwords in a database is... what we've stopped doing 20 years ago for good reasons? :) But well, if you're a big hosting provider tailoring to white supremacist content, you usually don't need so much security, since apart from anonymous-adjacent antifascists pretty much everyone is licking your boots, including law enforcement. The biggest neonazi forums have been around for decades, and their biggest proponents are well hidden behind the walls of our police stations, banks and parliaments. Love the reference to Woody Guthrie, too https://en.wikipedia.org/wiki/This_machine_kills_fascists https://en.wikipedia.org/wiki/This_machine_kills_fascists
- vmoore 5y ago
  > It can be costly and cumbersome That's the opportunity cost of defending. It's like walking through treacle at times, but you have to visualize the worst case scenario in your head and act as if you're gonna get breached. You need to essentially enact the situation in your head so that it gives you the momentum you need to keep defending.
- tcmart14 5y ago
  Yup. Security is a lot of time an after-thought and a burden to quiet a few companies since security is something that is not of immediate value. Last spring we had a speaker from northrup-grunman who talked about the need to push for a DevSecOps strategy.
  - 5y ago

TheTester 5y ago

"The Internet Hate Machine hates fascists." Patently a certain lie. I would definitively not be that surprised if it turns out this is just some intelligence agency, posing as anonymous.

tomc1985 5y ago

Loving all the 2000s era meme references. What cultured taste.

jungleanimal 5y ago

Anonymous strikes again, this time with a well known web registration company with a decade of data. This is a blatant example how poor security management leads to the hardship of thousands if not millions of regular people. Now their private details have a risk of being public and fully open to scrutiny. And its not just some simple data breach they allegedly stole domain purchases and transfers, account credentials of pretty much all their clients. Unacceptable. Embarrassing. They should be held accountable for all this if it comes out to be true.

qeternity 5y ago
Epik’s lack of security is the least damning thing about Epik. Google around for their very colorful history. These are bad hombres.
- capableweb 5y ago
  Could you share something damning instead of referring people to search, as we probably will find different information. As far as I can tell, Epik focused on hosting and DNS management for marginalized/excluded groups on the internet, so naturally they attract a lot of groups. Not sure why that'd be bad though. Things like this also makes me actually like the company more: > Pharmaceutical watchdog website LegitScript reported in 2018 that they had alerted Epik to the sale of illegal drugs and counterfeit medications on websites registered by Epik, and that Epik had refused to act upon the information without a court order That's exactly how I want my hosting company to act, and any that don't are actively fragile. From https://en.wikipedia.org/wiki/Epik_(company) https://en.wikipedia.org/wiki/Epik_(company)
  - lelandfe 5y ago
    Remember when a guy murdered 11 people in a Pittsburgh synagogue? When it was revealed the shooter had posted about it on Gab beforehand, every service powering the social network pulled the plug. Epik was who brought them back online.[0] The hero of hate speech is not exactly a sterling reputation to have. [0] https://www.wired.com/story/how-right-wing-social-media-site-gab-got-back-online/ https://www.wired.com/story/how-right-wing-social-media-site...

bigbaguette 5y ago

Have a look at the response headers (!)

milt 5y ago
Thank you, those were a treat.

agnesobel 5y ago

Did anyone download this and confirm? Quite some news if this is all real

genr8 5y ago

One step closer to anarcho-tyranny. Anonymous has become the Antifa of the Internet. Basically a far-left strike force, cloaked but public, with enough plausible deniability that the 3 letter agencies allow to exist because they can do things beyond the law - as long as they dont go after the gov... One has to wonder why they are so focused on [Combating far right extremism and misinformation] when it's clearly designed to benefit the overall establishment system status-quo. Even _if_ this whole Operation Jane anti anti-abortion-law texas hacktivism politics made sense to someone, it now has a much larger effect on the internet as a whole. Epik - one of the last hosting providers on the internet in favor of absolute free speech (within the law) that still exists. The risk/reward equation doesnt add up. More innocent rights are being violated with this hack alone compared to saving womens abortion rights.

kitd 5y ago
Well, if they've nothing to hide, they've nothing to fear. That's what me & my innocent rights have been told all this time.
nextlevelwizard 5y ago
Quite a LARP you have going on there.
- Applejinx 5y ago
  Probably also anon, but more /pol/ of recent years.
Cthulhu_ 5y ago
Is being anti-fascist a bad thing now? Wasn't there a bloody war fought over that? I thought the default was to be against fascism? It's the kind of thing where you approve of it if you're not explicitly against it. Also, are you implying Epik is fascist? I mean you're not wrong.
- chroem- 5y ago
  What's the difference between an anti-fascist and a fascist if they use the same tactics? Two weeks ago "anti-fascists" opened fire into a crowd of peaceful demonstrators in my state's capitol.

staticelf 5y ago

While I think people should have good security and hash the passwords I honestly think the guys behind this are real scumbags. Probably not going to happen, but it would be interesting with an arrest.

hplovecraftscat 5y ago

Actually looks like fun to work for the CIA/Mossad... Getting to larp as hacktivists and do useless things like this that have zero impact on the elites/mic/zog but still have normies soy facing. Glows lel

EamonnMR 5y ago

I love the old school memes (seven proxies, cowsay, nine thousand, the whole thing being a txt file.) Some early aughts charm right there.

hwers 5y ago
Tells you something about the age of the hackers probably (over 30)
- optimalsolver 5y ago
  The old boys ride again.
2OEH8eoCRo0 5y ago
Herd u liek mudkipz.
- pnemonic 5y ago
  OMG I LOVE MUDKIPS (UNF UNF UNF)

ollybee 5y ago

Not a great day for this HostBill to be announcing their new Epik integration.. https://twitter.com/hostbillappcom/status/1438113494973489159 https://twitter.com/hostbillappcom/status/143811349497348915...

vmoore 5y ago

Are they currently writing up a blogpost about this? Their blog has nothing: https://www.epik.com/blog/ https://www.epik.com/blog/ And this is a megadump of a hack. But you can buy a .MONSTER TLD For $1.49: https://www.epik.com/promos/monster https://www.epik.com/promos/monster

schleck8 5y ago
rob.monster is still available apparently
- vmoore 5y ago
  Looks registered to me, but seems like it's parked: https://whois.domaintools.com/rob.monster https://whois.domaintools.com/rob.monster Domain Name: ROB.MONSTER Registry Domain ID: D98633729-CNIC Registrar WHOIS Server: whois.psi-usa.info Registrar URL: https://www.internetx.com/ Updated Date: 2021-06-05T01:19:43.0Z Creation Date: 2019-04-01T14:00:01.0Z Registry Expiry Date: 2022-04-01T23:59:59.0Z Registrar: InternetX GmbH Registrar IANA ID: 151 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Registrant Organization: Registrant State/Province: nrw Registrant Country: DE Registrant Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Admin Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Tech Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Name Server: NS1.WESELLTHISDOMAIN.COM Name Server: NS2.WESELLTHISDOMAIN.COM Name Server: NS3.WESELLTHISDOMAIN.COM DNSSEC: unsigned Billing Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Registrar Abuse Contact Email: Registrar Abuse Contact Phone: URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/

Threeve303 5y ago

For every action, there must be an equal but opposite reaction.

robalfonso 5y ago

Speaking to Gizmodo, Epik said they were unaware that they had been hacked, but would investigate. What's interesting here is that if you are an ICANN accredited registrar there is a window in which you must report a breach to them, may be interesting to find if they have/have not reported said breach.

Threeve303 5y ago

If someone was hired and trusted with the data then they leaked it or used it for personal gain then it’s not all that virtuous

happyrock 5y ago

Any technical analysis of the hack yet? How'd they get in?

maytrixfree 5y ago

Sorry but i have no idea what any of you are saying, nor do i have any idea where to direct this question, but can someone/anyone plz listen to my (probably useless) idea, and/or share with whoever takes requests? In just tired of all of the kids around here following all these self-destructing and mindless 'trends' from all of these social media sites! Its just so embarrassing, i wish these younger generations would stop copying bad examples probably started by some evil genius that works for the govt of a country who hates us and wants to see what stupid tricks they can make us do. ANYWAYS.... i sure would like to know what would happen if everyone who has youtube, tiktok, facebook (etc) account had their personalized results/preferences changed so that all of the suggestions and 'similar' results would consist of 'Restoring Faith in Humanity' type videos. Thank you for listening, sorry its probably a dumb idea.

maytrix_free 5y ago