@mintcel@mint@sneeden I am actively working on a turnstile for API endpoints related to the Fediverse. I have discovered in the process the Fediverse uses the modern Signature/Authorization headers for these requests which presents opportunities for smarter approaches and provider reputation.
He has been addicted to Percocets since his penis mutilation surgery. He had to get his breast implants removed at 25. He now has phantom breast implant pain. He takes drugs to cope. He started shooting heroin and detoxed through Canadian public methadone clinics.
After his father died from cancer, he binged on his leftover percs. He stopped doing them cold turkey after running out.
In 2022, after #DropKiwiFarms failed, he started binge drinking because everyone online hated him. After his fiancé broke up with him around New Years, he started doing coke, which also happened to be laced with meth.
He flew to Ireland and allegedly checked into a rehab clinic.
So if you're wondering what CA$100k can get you, it's one hell of a party.
Embed this noticeJosh (josh@kiwifarms.cc)'s status on Monday, 01-May-2023 00:01:44 JST
JoshKiwi Farms, [4/30/2023 12:22 PM] The file server which stores attachments was compromised and all live version of files have been replaced with a 3kb file of some kid on Twitter taking credit for it. I'm closing the site to audit the attack. I'll update this message as I learn more.
12:43pm - The impact is much smaller than I expected. I am now revaluating what has happened. It does not appear the fileserver itself is compromised.
1:00pm - I've only found two video files that have been changed to the corrupted file. I'm not sure how the trick is being done yet.
1:45pm - I believe I have an idea of how it was done and I'm attempted to recreate it.
Kiwi Farms, [4/30/2023 4:17 PM] I have confirmed the attack vector, have applied patches to secure the attack, verified the patches individually, and am now working on undoing the damage.
The attack did not have direct access to the file server but did find a way to replace existing files. No accounts were compromised and the actual damage is relatively small. It was video files in 2 threads, my avatar, and one other video that's used on the registration page.
I reached out to the attacker and he's not politically motivated, it's just something he did for fun. I opted to give him 5 XMR for confirming my theories of what the vector was.
I think that we should resurrect the Mongol empire and learn horseback. We can then invade Canada and recreate Finland by pillaging. Mongols also used swastikas so it's still based.
Just some fucking guy.Ooperator of kiwifarms.net.Mad at the Internet and on the online."I'm the richest I'll ever be; I embrace the world I have all around me."jcmoon@pm.me:manjaro: :debian: :freebsd: