6 ms·
Still standing
- lysace 1y agoThis is a worthwhile read. Don't trust user input and try your damnest not to feed it into third party components. If you do, keep them up to date.
- hutderek 1y ago[dead]
- Funes- 1y agoOne of the pillars of the old, non-infested-by-normies Internet, still stands. Good news.
- deleted 1y ago[deleted]
- RIMR 1y agoKeeping a website that has openly catered to pedophiles and nazis online is hardly "good news", unless you are a pedophile or a nazi. It won't matter for long though. The userbase has had its trust shattered, and this blogpost makes it clear that 4chan has no ability to defend itself from future attacks, which are absolutely coming.
- joejoo 1y ago[flagged]
- esseph 1y agoI remember when that site came about. It was a shithole then, and it's even worse of a shithole now.
- bslanej 1y agoThere will always be places devoid of normies, thankfully. They exist in every platform, new and old. Knowledge of dog whistles will be necessary though…
- yapyap 1y agolol. I think it’s moreso that when a normal person enters 4chan they either decide to get out while they still can or stay and become whatever the opposite of a “normie” is. Wouldn’t say the latter sounds like it would be worth it at all though.
- mrandish 1y agoYeah, it's never really been a place I'm interested frequenting but I'm also oddly pleased that we live in a world where it can still exist.
- deleted 1y ago[deleted]
- silexia 1y ago4chan is controversial and often very ugly, but it is one of the few old school message boards that allows free speech left. Like the ACLU used to do, we should help them stay online and exercising their free speech, even if it is annoying and gross.
- santoshalper 1y agoAs a long time ACLU financial supporter, I could not disagree more. 4chan is not and never was a bastion of free speech. Comparing 4chan to the ACLU is like comparing a toddler smearing shit on a wall to art. To practice free speech requires an intent to express a point of view. 4chan had to point of view and was just a shithole.
- john-h-k 1y ago> To practice free speech requires an intent to express a point of view Excellent, now we can ban speech we don’t like by just saying it doesn’t actually express a point of view
- chris_wot 1y agoYou can't yell out in a theatre that there is a fire and cause a stampede.
- mrandish 1y agoJust in case you're not citing that old debunked free speech trope ironically, please see: "Don’t Use These Free-Speech Arguments Ever Again" by First Amendment expert Ken White (https://www.theatlantic.com/ideas/archive/2019/08/free-speech-cliches-media-should-stop-using/596506/ https://www.theatlantic.com/ideas/archive/2019/08/free-speec...).
- chris_wot 1y agoI have no idea what you are talking about, and I am unable to read the article as it is behind a paywall.
- tonnydourado 1y agoHopefully, not for long.
- smitty1e 1y agoCurious as to the basis for animus.
- knowitnone 1y agothey were clearly focused on purchasing hardware over writing secure code
- bradly 1y agoI agree. It is interesting how much they focus the hardware servers in the article. I'd be more interested knowing which package was vulnerable?, was it a known exploit?, and what systems were/are in place to alert on vulnerable dependencies?. Instead they are focused on the new servers just taking too long and not enough money because of advertiser pressures.
- dbaggerman 1y agoThey do mention their OS being out of date. One possible interpretation is they are using packages provided by a Linux distro, and getting up to date may have required a full OS update. If that's were case, it would be easy to see how they might want to tie their OS upgrade to a hardware refresh rather than taking servers offline for a reinstall.
- j_bum 1y agoAccording to a Firebase video [0], the outdated and exploited package was called GhostScript. [0] https://youtu.be/XNratwOrSiY?si=dxfD8Y7-wfOi0XcJ https://youtu.be/XNratwOrSiY?si=dxfD8Y7-wfOi0XcJ
- sadeshmukh 1y agoFireship is the channel name - firebase is the product he initially had based his channel off
- j_bum 1y agoOops - thanks for correcting my typo
- xnx 1y agoProbably didn't even need to change their code, just get on current versions.
- Waterluvian 1y agoI think it’s kind of funny but also entirely unsurprising that 4chan’s post about getting hacked is one of the most honest posts about this topic I’ve seen.
- baggy_trough 1y agoWonder what they were feeding that pdf into. Ghostscript perhaps?
- romanhn 1y agobeing starved of money for years by advertisers, payment providers, and service providers Given the language in this announcement that lays blame at everyone else's feet except the people responsible for maintaining the platform, I'm pretty sure that no lessons were learned, and that the security is not likely to improve beyond whatever bandaids that were needed to address this hack.
- stego-tech 1y agoSo…it sounds like typical 4chan?
- bradly 1y agoEven when talking about themselves in the article they mostly focus on some hardware server business. In software outdated dependencies are vulnerabilities. The tech leadership knew this tradeoff and closed their eyes and hoped they'd get to it before someone else did. They did not and you shouldn't expect to be able to either. If you do not have the resources to support the continual, ongoing updating of a dep, you do not the resources to add said dep.
- transcriptase 1y agoGet real. Companies with infinitely more money, staff, and robust security practices are hacked every day. The only difference is they put out a vague generic corpospeak statement whereas this one admitted it was caused by a skeleton crew on a shoestring budget getting caught out. Given the nature of their user base and how many others would love to see 4chan go down, if things were as bad as you imply then hackers would be taking the site down weekly.
- MichaelZuo 1y agoSource? I have never heard of a bank’s core mainframes being hacked in the last decade (outside of pen tests), even for mid size banks outside the global top 100.
- sjdrc 1y ago
- santoshalper 1y agoImaging dedicating hundreds or thousands of unpaid hours of your life to protect and preserve what amounts to a truck stop toilet. What a total fucking waste. They should, in fact, give up and use the time for literally anything else.
- RIMR 1y ago>One slow but much beloved board, /f/ - Flash, will not be returning however, as there is no realistic way to prevent similar exploits using .swf files. Wow, this is a pretty incredible level of incompetence. Server-side SWF exploits are easily mitigated, unless they are using some sort of server-side SWF interpreter, which is absolutely not needed if you implement client-side Ruffle (or just require people to install the browser extension). They can complain all they want that advertisers and payment processors refuse to work with them, but it's clear that no competent engineers want to work with them either if they're saying stuff like this.
- moralestapia 1y agoYou can always volunteer to help "the incompetents".
- r9zgWUN7WS3k6i 1y agoIt seems that you're thinking about the SWF content in terms of playback, which is not what they were doing. They were looking inside the bundles for ZIP files and malware (4chan users to shove horrible things into the files they upload), and extracting metadata from the SWF. We'll never know the exact details unless they share the source code. It is possible to write a secure SWF parser, but I think they decided to stop supporting this relic instead. > Ruffle Yes, they used that. Take a look at the board.
- torben-friis 1y agoDoes 4chan contain anything worth checking nowadays? I remember visiting the site as a teenager to check rage comics, and even for the abrasion of the internet of the time it was too shocking for anything beyond an occasional look - random gore, pictures of underage girls, racist tirades and the like. I know some people enjoy that Wild West, lack of rules environment for some reason, but is there any content that’s worth it for those who don’t?
- deleted 1y ago[deleted]
- wetpaws 1y ago[dead]
- reginald78 1y agoI've heard there's a lot of local AI discussions there that don't really occur anywhere else.
- clarionbell 1y agoOne of those things (the one that's definitely illegal) is gone for long time now. I think more than a decade. The rest is very much still there.
- bob1029 1y agoSince when has 4chan had an official blog?
- giancarlostoro 1y agoI wonder if 4chan would benefit from open sourcing their website. Reddit used to be this way. Outsource the dev work to the open web.
- deleted 1y ago[deleted]