Disaster 8Chan Refugees Blow Their Anonymity - An unofficial new version of the hate-filled forum isn’t as anonymous as its users might hope.

https://www.thedailybeast.com/8chan...et-are-accidentally-revealing-their-locations

1565368345914.png
Refugees from the anonymous 8chan forum are flooding into a new censorship-resistant home on the dark web, and inadvertently giving up their anonymity along the way.

A reincarnated version of the hate-filled forum, now linked to three mass shootings, appeared Monday when the original 8chan lost its hosting service. The new site, called 08chan (with a leading zero), has no affiliation with the original and it’s not entirely clear who set it up, but 8chan’s diaspora have been flooding in as word of the site spreads through right-wing social media.

The distinguishing feature of the new site is that it lives on ZeroNet, a peer-to-peer network designed by information activists to allow for uncensorable websites immune from government or corporate intervention. Instead of relying on a central server, a ZeroNet site is hosted in bits and pieces by everyone browsing it, making it virtually impossible to shut down.

“Hard as they try, they will never stop us,” enthused one poster to the white supremacist “/pol/” board on 08chan. “We are smarter and more innovative.”

“The old 8chan site may be ashes, but this is the phoenix egg buried beneath,” another wrote.

There’s just one catch. Peer-to-peer networks expose a user’s internet address to anyone who cares to look. That’s how copyright lawyers catch people trading movies, music and software, and it’s how police and FBI agents arrest pedophiles trading child porn online.

ZeroNet works the same way, a fact that’s been much-discussed on the new site. For that reason, ZeroNet integrates tightly with Tor, an anonymity system that places layers of cut-out addresses between a user and the websites they visit. But only 41 percent of 08chan’s users’ are using Tor, based on our analysis of the peer-to-peer traffic at the site.

Users on 08chan have been complaining that the site is buggy and slow over Tor, and the site’s own administrator initially encouraged anons to just connect directly. “Feel free to post without Tor,” he wrote in a welcome message. “Even as the admin I have no power to identify anyone.”

A Twitter user called “AcidOverlord”, a self-described veteran of the misogynistic gamergate harassment campaign, has taken credit for creating 08chan. He didn’t respond to inquiries for this story and has since deleted his tweets on the subject.

The Daily Beast captured 819 IP addresses for 08chan users connecting from 62 different countries. Most users in our sample, 437 of them, are in the U.S., with Canada (46 users), and the U.K. (37), a distant second and third place. Ordered by states, California, Texas, Washington, and Florida top the list.
1565368306110.png

Some users connected over VPNs, shielding them from our analysis, but hundreds logged in directly from cable TV broadband networks and other residential services.

Though an IP address alone doesn’t identify the person behind it, it can nonetheless be telling, particularly when a user is running websites or other services off the same IP, as dozens in our sample were. One anon in Georgia runs an open file-sharing server from home. The server’s banner message: “Hitler did nothing wrong.”
1565368261960.png
 
Última edición por un moderador:
I messed around with ZeroNet, it seems pretty soydev based on the UI being entirely browser based, with a heavy reliance on JavaScript. It also doesn't work with Tor without actually going into your config file and editing some stuff, which you can only find if you read their GitHub instructions.
I didn't bother reading their kindergarten Python but looking at the protocol spec it seems to me that they use Tor to spin up an onion service and that's how peers can connect to you without knowing your IP address. That's probably what the config changes were about. They're so popular I wouldn't be surprised if they made it easier now.

I never really took ZeroNet seriously just because every single problem with privacy, anonymity and censorship resistance was solved by adding Tor integration, making ZeroNet itself just fluffy memeware.

Is using Linux, VPN, Firefox with privacy addons, Tor (maybe constantly tor + vpn?), keeping identities separate good enough for day to day? Is it good enough for cases like NZ jailing people sharing the chch vid or avoiding hatespeech enforcement? It's my impression that as long as you're not dealing with alphabet bois, it is.
Circling back to my original question, I'm referring specifically to the combination of a VPN + TOR.
It's important to use Tor browser. Using Tor with a regular browser will have a unique fingerprint based on browser/addon configuration, OS and hardware. So the moment you turn off Tor or open a non-Tor browser instance then your Tor activity and real identity are linked together through that unique fingerprint.
The point of Tor browser is that all Tor browsers are configured the same and block other ways the websites can fingerprint you. And you use a completely different browser for non-Tor stuff so you can't be singled out and there's no link to your real identity.

Putting a VPN after Tor is good for accessing websites that ban all Tor exit nodes but you can achieve the same thing with proxychains and a free socks5/https proxy.
 
Doing TOR right is hard and I wouldn't trust the zoomer webdev's who made ZeroNet not to have fucked it up.
The only easy way to do TOR right is to run the stock Tor browser and keep it up to date. Don't resize it. Don't ad plug ins. Use it for stuff other then sensitive shit so ON/OFF times can't be correlated.

If you dig in to all the known cases of Tor users getting busted for illegal shit you will find they all fucked up some way along the line. Tor isn't magic that can protect you from dumb mistakes.

I think the video Shoggoth linked is very much worth the time to watch.
 
Última edición:
Atrás
Top Abajo