Reverse Email Authentication

[Stephanie Bustcakes]

this will just inevitably be bypassed

This is how these things work. It's an arms race. Any temporary measure allows Null time to come up with the next thing.

 

[Raven of the Burning God]

Why that in particular?

18 U.S.C. § 2258A

 

[Theongogablogian]

Anybody with pictures of children being abused is a pedophile who needs to be put down like a rabid dog. You don't get a large collection of CSAM unless you're jacking off to it. Are they intelligent? Almost certainly. A lot of intelligent people are pedophiles and they should be killed all the same. No quarter for the diddlers.

Is it actually CSAM, or just some weird cartoon stuff? Because the only time I’d take the cartoon shit seriously is if it’s something really degenerate, like when Shadman was drawing child actors.

 

[Dunkin DoNUT]

Shit. Would this affect users that used forwarding email aliases, I wonder. At least the email provider I used still send out email, but addy.io is limiting so I ought to switch out, right?

 

[The Connected Nose]

I'm admittedly retarded when it comes to email back-end stuff, but what's stopping them from merely spamming the incoming address with nonsense to overload it?

 

[pink cupcake frosting]

I'm not giving anyone benefit of the doubt who has large hoards of child porn to "troll" with.

Law enforcement

Why that in particular? They could use anything else.

Because it's illegal and can potentially result in site being taken down

Why would anyone but a pedophile risk having their lives completely destroyed by even having that shit, much less spamming it?

They're not risking it because they're feds themselves or protected by them.

Even if somehow there is some non-pedo out there doing this, shoot them anyway.

 

[Harvey Danger]

The registration page says to send an email to hello@register.kiwifarms.net to verify the account. Presumably, the gay pedophile will try to automate this. Would it make the system stronger to generate a few dozen receiving aliases, assign a specific one to each registration, and require it to match on the incoming verification email?

Ideally, you could auto-generate a new alias for each new registration. But that'd probably burn a lot of your dev time and server resources. Having 50-100 static ones and assigning randomly, maybe re-generating them each day, would be enough that the paid pajeets can't just guess. (You'd also have to make the address an image to prevent scraping.)

Also I got this while testing, lol

 

[BBQ Nugs]

Does mozilla's email mask thing let you send emails with the masks or just receive? I could see this being a minor issue for people who use things like that.

Email alias enjoyers can use DuckDuckGo's service. They allow cold sending even for free users but it's a bit tricky, since you have to construct the reverse alias address yourself: https://duckduckgo.com/duckduckgo-h...n/duck-addresses/how-do-i-compose-a-new-email

With Proton and Addy.io, only paid users can send messages to new addresses that haven't emailed first.

https://proton.me/support/pass-send-email-alias

https://addy.io/help/sending-email-from-an-alias/

With Firefox Relay, it's not possible at all as far as I know. You can only reply.

 

[Caesar]

Interesting concept. Annoying but doesn't matter to me I already have an account. But very innovative and a system ive not seen before and could see working. Kudos.

 

[Autistic Joe]

Fuck it, the only way to interact with the website should be via hand-written HTTP requests sent by snail mail.

I have an even better idea, but most people would probably say it's for the birds.

IP over Avian Carriers - Wikipedia

en.wikipedia.org

 

[REEEEEEEEEEEEEEEEEEEEEEE!]

The Kiwi Farms is a special place that people have to make an effort to find, even on the clear net. Making the process slightly obtuse will probably only increase the quality of newfags. You're supposed to lurk more before joining. This only encourages that.

 

[2in1]

The registration page says to send an email to hello@register.kiwifarms.net to verify the account. Presumably, the gay pedophile will try to automate this. Would it make the system stronger to generate a few dozen receiving aliases, assign a specific one to each registration, and require it to match on the incoming verification email?

Automating the creation of thousands of new email adresses for reputable servers and keeping them reputable while sending out emails would be the hard part. That's the exact problem Null faced: the reputation of his mail server going down for "spamming".
While still not bad ideas, circumventing your measures would be quite easy compared to what I described above.

 

[Seymour Duncan]

The registration page says to send an email to hello@register.kiwifarms.net to verify the account. Presumably, the gay pedophile will try to automate this. Would it make the system stronger to generate a few dozen receiving aliases, assign a specific one to each registration, and require it to match on the incoming verification email?

Ideally, you could auto-generate a new alias for each new registration. But that'd probably burn a lot of your dev time and server resources. Having 50-100 static ones and assigning randomly, maybe re-generating them each day, would be enough that the paid pajeets can't just guess. (You'd also have to make the address an image to prevent scraping.)

Also I got this while testing, lol
Ver archivo adjunto 8383739

I don't see rotating the receiving address really achieving anything though. If someone's automating it, they can just dynamically scrape the correct address from the registration form anyway.

 

[Ike Barinholtz]

Thanks, homie.

 

[dummy01299915]

Thanks, homie.

 

[2in1]

I don't see rotating the receiving address really achieving anything though. If someone's automating it, they can just dynamically scrape the correct address from the registration form anyway.

Maybe detecting multiple registrations coming from the same domain name (excluding those which are widely known and used) and not sending out replies after some threshold could provide an extra layer of protection?

If he thinks of something that would only fuck up the process temporarily for it to be relatively quickly fixed he could save it for a moment frustrating the registration process would do more damage, e.g. a big happening.

 

[Waifuwars]

Make a new captcha but instead it makes the Jeets type offensive things about their cow-gods. Hook it up to an LLM and have it generate constantly new and increasingly insulting captchas.

 

[MadStan]

Null is the borg. He adapts. And he’s just as ugly. .

 

[General Zigger]

Thanks nigga, been waiting for a long time to make an account, glad you got something working.

 

[SirThomasMaloryII]

Thank you, now I can comfortably make a new account where I play as a BBC loving furfag that gets mad at Republicans.

I am taking notes from that Lemur guy that got arrested for threatening ICE btw.