Reverse Email Authentication

[Quandaries Sage]

Once again jord null's genius is proven, as based ooperator.

 

[Butter]

Once again jord null's genius is proven, as based ooperator.

Yo, help me send Null money. I am in Germany, and I don't think I can get cash to him.

 

[Many are saying this.]

I used an alias email address to register here (like the registration page still tells you to do) which means if I had to re-verify by sending an email I could not do so. It's an email forwarder, not a functional address. It only receives email. Since I'm currently verified I could change this email to a shittier one that isn't an email forwarder but I'd rather not do this, as those sites either require identification (phone numbers) or have no two-factor security whatsoever.

@Null Does the Registration page have any honeypot fields? If you fill that page with 20 fields invisible to a human user that share a name field with a legitimate Registration field, the bots might try to fill them out and flag themselves.

 

[Null]

@Null Does the Registration page have any honeypot fields? If you fill that page with 20 fields invisible to a human user that share a name field with a legitimate Registration field, the bots might try to fill them out and flag themselves.

The gay pedophile uses a completely headless browser that functions identically to a human and tricks like this do not work. I know this from the Quote (SJP) and RapeApe (4chan).

The ProtonMail aliases can send mail btw.

 

[Null]

Yo, help me send Null money. I am in Germany, and I don't think I can get cash to him.

https://monero.com/trade

I have never tried this but someone suggested it:
Go to "Buy Crypto" -> EUR -> USDT (ETH) and send it to the Ethereum address in this:

Tema 'Supporting the Kiwi Farms'

29 de Dic, 2016

Donating to the Kiwi Farms​

We need 600 users donating $20 a month to make the site sustainable. This is less than 5% of users who sign in every day. With 600 users donating $20 a month, we get the following:

• The ability to reinvest into hardware and custom software.
• Legal financing to deal with our outrageous liability.
• Security for sudden expenses like hard drive failures.
• Flexibility in dealing with threats, i.e. DDoS protection.

For $20 a month, you get:

• Access to the supporter forum.
• Gilded border and badge (optional).
• Special rating stickers...

• Null
• Respuestas: 5,251
• Foro: Forum Discussion

Reacciones: x 128 x 81 x 69 x 15 x 20 x 15 x 2 x 3 x 3 x 3 x 2 x 8 x 5 x 1 x 1 x 1

 

[It's Cold Outside]

If they register accounts with real email addresses and automate the verification process, I will just continue to ban those accounts by the thousands and they will have to burn real email accounts to continue doing it.

Good luck when he inevitably moves on to that tactic, assuming he doesn't finally get bored or find some other way to waste your time. I have no idea how you come up with an idea like this in just a couple hours of thinking and actually successfully implement it. Mad respect, though.

 

[blackshirt]

Interesting idea, definitely better to inconvenience the user a bit rather than having no ability for registration be available.

 

[Slav Power]

Ape RapeApe and make an IQ test captcha. It won't stop the gay furry pedophile, but it will filter actual retards from registering, so still a net positive.

 

[StacticShock]

quote from the upper right-hand side of the page

welp.

Odd how pedos are the only ones trying to stop people from signing up to KF...

when you remember that, cognet and cloudflare tried to blackhole the farms for not breaking any laws and internet archive deleted all of the hroofs self admitted by the scum. that's more than enough for you to figure out that a silly bird site is a massive threat to either them or their friends just because they remember to archive things, most of the time....

 

[Cold Creek]

Posted without comment.

 

[Weird Glitched]

Thank you for letting me join.

 

[Unknown God]

Half of this thread is fags making extremely low effort jokes like "lol make them say cows suck because they are pajeets or mohammed is a pedo because they are roaches".

@Null, you mention developing these things as part of USIPS. Have you considered starting such projects in open repositories (like github or similar, out of your control, but maybe self hosted ones to protect yourself from ordinary censorship) so that forum members and sympathizers can contribute work towards your goals, and if not, why not?

 

[mango_reseller]

If they register accounts with real email addresses and automate the verification process, I will just continue to ban those accounts by the thousands and they will have to burn real email accounts to continue doing it.

Dear ooperator, this is a great solution and you can definitely color me impressed. I would like to raise one issue, which I am sure you have already considered yourself, but I felt like I should mention regardless. DKIM, SPF, DMARC to prevent spoofing (hell even MTA-STS) otherwise you would probably end up with the same existing issue (and you probably do this already but some spamhaus reputation thing to block shitty spammy email servers altogether).

Edit:
Also, what would make this better even is:
register on website -> get back an unpredictable hash or something (ideally with some other unpredictable characteristics involved so can't be reliably scraped w/ selenium etc) -> need to include it in the email the user sends (body, header whatever).

I think that would strongly slow down anyone trying to spam mass registrations no matter what, and it should be basically zero effort for a one-time sign-up by regular users.

 

[Null]

Dear ooperator, this is a great solution and you can definitely color me impressed. I would like to raise one issue, which I am sure you have already considered yourself, but I felt like I should mention regardless. DKIM, SPF, DMARC to prevent spoofing (hell even MTA-STS) otherwise you would probably end up with the same existing issue (and you probably do this already but some spamhaus reputation thing to block shitty spammy email servers altogether).

we're using a real email provider that verifies these things.

 

[Blue Screen of Death]

Cool approach to verifying your email address. This was a good reminder to swap off of the Mozilla alias I had set up when I very first joined.

 

[Quandaries Sage]

Yo, help me send Null money. I am in Germany, and I don't think I can get cash to him.

Sorry chief, that's a bit too personal for a KF thing

 

[Butter]

Sorry chief, that's a bit too personal for a KF thing

I managed to do it on my own, because I am a grown up now. As of yesterday.

 

[LOWERCASE LETTERS]

Half of this thread is fags making extremely low effort jokes like "lol make them say cows suck because they are pajeets or mohammed is a pedo because they are roaches".

@Null, you mention developing these things as part of USIPS. Have you considered starting such projects in open repositories (like github or similar, out of your control, but maybe self hosted ones to protect yourself from ordinary censorship) so that forum members and sympathizers can contribute work towards your goals, and if not, why not?

Any public facing projects have to be resistant to troons screeching at the hosts

 

[Quandaries Sage]

I managed to do it on my own, because I am a grown up now. As of yesterday.

Good shit my gamer,

 

[Boggy B]

Once again, email, the sending of email, has proven its supremacy.

You VILL see a PBEM resurgence in my lifetime. You VILL pay $2.00 a week to have your Diplomacy turn adjudicated. You VILL pay $12.00 a turn for your Legends character.