Kiwifarms Hacked

[BoomerSperg]

I wonder how many retards used a real email for it.

Yeah I'm scared they have my ip, a cop might come to my door and ask me if I called a failed insurance salesman from Wisconsin a "retarded fat fuck."

I'm literally shaking.

 

[Mitch Weaver]

If he deletes system32 will that fix it?

First you need to hit ALT CTRL DLT at the same time then look for task manager.

 

[Caverlock]

I'm really gonna eat shit on here when people find out about all my abandoned daughters.

 

[guest]

kf already had this same level data leak in 2019, this isn't even anything new.

 

[Pringle Can Lothario]

Niggers. Fucking niggers. And Jews.

 

[LockedHDD__Pot]

You should all assume your information here is constantly being stolen.

I was 1st to confirm that... hackerz been even messin' with the rizla papers I wrote my password on

 

[FranksWirecutters]

I used a proton mail burner and don’t care if they have my IP address so whatever

Exactly. He's already proved he can't even do anything with a DL except get suspended from Twitter.

I have no idea what you just said.

Nobody understands bollywood. Just picture him singing and dancing while trying to sell you dick pills from a shady pharmacy website.

 

[Bin_The_Blacks]

https://kiwifarms.net/

 

[Sink Inspector]

I'll need to see if he explains what happens but if the proxy is just a passthrough I don't see how you can do a session based attack.

My understanding is that its a man in the middle exploit. If tls terminated at the host then it shouldn't be possible. For you bovine retards


Your browser --> proxy --> backend host

If your connection is https then your traffic is encrypted with tls. If the proxy server contains the private key it can decrypt https/tls traffic and forward along http or plaintext. Now I don't know what he's dealing with on the ddos side so there may be reasons for that.


Typically though, the proxy just forwards the encrypted traffic and the private key is stored on the backend server and decrypted there. This is pretty much what cloudflare does.

So if the proxy was comprised I think it would need to have had the private key and thus be terminating ssl there. But I'm a retard so who knows.

Yeah apparently it wasn't the proxy, he initially thought the vulenrability was there because they got a breach yesterday but it's just coincidental. It's script injection from his chat plugin.

Null is generally insane, but his ambition to make a XenForo replacement is particularly wild. Hoping this doesn't kill it because it'd be cool even if it takes years.

 

[Doctor Coom]

Anyone who uses their real info, in any capacity, to dabble in "lolcow culture" deserves whatever happens to them when shit like this happens. I'm a KF sympathizer but anyone who uses their real email to sign up for a retard torture forum deserves a raping.

 

[DeadWithoutMyDavid]

Great. It's gonna be hilarious to learn which KF users were pat posting from the white house, or pat's family members even.

Like a decade ago there was an adultfriendfinder leak and it was a few months of learning which low level congressmen we're trying to fuck dumpy white trash 50 year olds on the side.

 

[guest]

The script was uploaded to XenForo directly (as XenForo does not validate media), but injected by my custom Rust-based chat program that interacts with XenForo and borrows sessions.

Nothing good ever comes from that fucking chat. He should have nuked it years ago. Just a bunch of attention whores and retards causing drama.

 

[Beavis]

Nothing good ever comes from that fucking chat. He should have nuked it years ago. Just a bunch of attention whores and retards causing drama.

Chat is is by far the worst thing on KF, but null insists on having it. Dude is so frustratingly stubborn sometimes. Also, hope they don’t go after username Beavis for pat posting.

 

[guest]

Chat is is by far the worst thing on KF, but null insists on having it. Dude is so frustratingly stubborn sometimes. Also, hope they don’t go after username Beavis for pat posting.

#DLTIW

 

[BudDickman]

The fact that Null doesn't know if his website is susceptible to a MITM attack from whatever CDN he's using this week makes him look like an inept retard.

 

[Brooke Shields]

You should all assume your information here is constantly being stolen.

the real brooke shields is gonna be pissed...

 

[NigelCumia]

I never had an account, just lurked in the Pat thread for the laughs. I guess I'll get my affairs in order before I do my time.

 

[Doctor Coom]

The fact that Null doesn't know if his website is susceptible to a MITM attack from whatever CDN he's using this week makes him look like an inept retard.

I've never known him to be a particularly adept webmaster, just a notoriously bullheaded one.

 

[Upton Baby Sinclair]

Post more bible quotes on your header, stupid.

Then God said, “Take your NPS podcast host, your only Patrick S Tomlinson themed podcast host, whom you love -SomervilleDan- and go to the region of Kiwi Farms. Doxx him there.”

 

[Jims_Maroon_Pants]

What is kiwi farms current website?