b9c469 No.8057875
as an anon brought up in this thread: >>8053522
"
WARNING
THIS IS A HONEYPOT THREAD.
Someone has likely figured out how to escape code on a web page from the archive.is crawler script, and instead write a modified html page and script to archive.is.
PIC RELATED is the code being served by the link in OP's post. It is made to LOOK like a failed page load, but is loading an image from another server, thus giving them the user's IP.
Archive.is is likely NOT compromised by its owners/creators, but is likely subject to XSS, SQL, or other code-escaping exploit at this time.
STAY FROSTY.
"
someone has found a way to exploit archive.is and honeypot our IPs. break all archive.is links and report in threads if you notice an archive that doesn't load properly
fe119f No.8057907
Who /tech/ here. Fucking help
abf2e3 No.8057944
>>8057907
look at pic related
game over, anon, game over
457607 No.8057965
Anyone contacted the owner yet?
caa000 No.8057977
This is why you use Noscript.
703ac7 No.8057981
Goddammit OP, I wanted to make this post.
b9c469 No.8057983
>>8057965
here's some contact people
b52b22 No.8057986
There was a thread here about two weeks ago from an anon claiming there was something fishy about archive.is. He had completed a ton of research on the owner / creator and it turns out he was a spook. I wish I had screen capped it.
17d877 No.8057989
What server are you being sent to and which archived sites are doing this?
waybackmachine may still work also
522869 No.8057990
Has someone tried contacting the owner to tell him his shit's fucked?
https://twitter.com/archiveis
[email protected]
webmaster at archive dot fo in case cuckflare shits on the address.
b52b22 No.8057997
There was a thread here about two weeks ago from an anon claiming there was something fishy about archive.is. He had completed a ton of research on the owner / creator and it turns out he was a spook.
I wish I had screen capped it.
703ac7 No.8058006
>>8057977
Noscript does not protect against this.
It's a simple img src tag loading the image; thus the embedded image does not rely on a script.
The exploit used to put it onto archive on the first place may have required a script, but that doesn't matter once it's up.
476b8e No.8058008
>>8057986
Always screencap, anon. ALWAYS.
657a04 No.8058010
Fuck fuck fuck does this only happen if you've opened an archive link or do you just need to open a thread with one? I haven't really clicked any.
I'm on my phone so I have no idea if that makes it better or worse.
703ac7 No.8058014
>>8057986
Saw it, blocked the domain immediately.
c71545 No.8058031
703ac7 No.8058037
>>8058010
if you click an archive.is link, and get a spinning loady thingy. That's the point at which your browser has requested the image from their server.
b9c469 No.8058039
>>8057989
>What server are you being sent to and which archived sites are doing this?
the tracking image is www.henley-putnam.edu/Portals/_default/Skins/henley/images/loading.gif
the archive from the post referenced in OP is one. i noticed it earlier too
>>8057981
sorry, I didn't want to wait and let other anons fall for it
idea: anyone know of sites where we can post this image from their server and get some bad info in their logs?
cb208d No.8058042
>>8058010
Only if you click the affected link.
522869 No.8058053
>>8058042
Trying to make a new one gets it too. Tried with a twitter post.
a854a6 No.8058063
>>8057944
https://archive is/osfU4
This link does that.
703ac7 No.8058072
>>8058039
No problem.
I'm the guy from the other thread who found the issue.
I wanted to put a few lines of
CONDUCTOR WE HAVE A PROBLEM
CONDUCTOR WE HAVE A PROBLEM
CONDUCTOR WE HAVE A PROBLEM
at the top of the post to make it stand out.
Missed opportunity.
67142c No.8058075
>>8058008
Fuck. Archive was our best way to prove that something was the way it was. Now shit can get memory hole'd.
703ac7 No.8058098
>>8058063
checked, and confirmed.
c06580 No.8058101
>>8058039
le reddit Use a fucking VPN next time
b52b22 No.8058112
>>8057986
If I recall correctly from the anon's old thread. The creator works for or is associated with Henley-Putnam in some way.
b9c469 No.8058116
>>8058072
dang, maybe we can get it pinned. seems pretty important
>>8057875
here's some of the people we're dealing with:
Founder
Nirmalya Bhowmick, PhD. (h.c.), Founder and Special Advisor to the Board and CEO
Administration
James P. Killin, President
Amy DiMaio, PhD., Provost of Academics
Raymond M. Asad, MBA., Director of Finance
Nancy Reggio, Director of Admissions
Henley-Putnam University Board of Directors
G. Michael Stakias, President, Liberty Partners:
William A. Landman, Chief Investment Officer, CMS Companies:
Tim Foster, CEO, Concorde Career Colleges:
Karen P. Tandy
Michael Hillyard
Walter Burl Huffman
Richard (Tom) Ingram
Peter Bennett
a5cc91 No.8058119
Will tor browser reveal my ip too? or It will just reveal the exit node's ip?
a854a6 No.8058137
>>8058112
Should we post those links allover to give him false positives?
703ac7 No.8058141
>>8058075
Archive.is still works just fine for saving real shit.
b9c469 No.8058146
>>8058137
yes, i would say so.
a854a6 No.8058154
>>8058119
Tor should not reveal your IP but there are some java script and flash based exploits. That's why those things are disabled by default
5a828d No.8058155
I never worry about any of this stuff. Am I fucked?
703ac7 No.8058160
>>8058137
It would water down the stats that they are looking for, with useless data and normie IPs.
b52b22 No.8058161
>click archive.is links
tfw behind 7 proxies
a854a6 No.8058162
>>8058155
Do you carry? Be on your toes and watch your back.
17d877 No.8058174
>>8058155
I think it just means someone is harvesting the IP's of people who view archives of pages.
c06580 No.8058178
>>8058137
Yea, it'll help the anons who were spoofing their referrer at least
703ac7 No.8058192
I hate to ask, but can someone crosspost this to cuckchan?
I don't want to talk to cucks, SJWs, and summerfags right now.
b9c469 No.8058218
>>8058192
i guess they should know too, im banned forever for trying to dox CTR there though
703ac7 No.8058230
>>8058174
Those links are being actively posted HERE, in threads with phony news stories and fake happenings to encourage clicks.
They are harvesting lists of /pol/ users, specifically.
b52b22 No.8058235
b52b22 No.8058243
>>8058218
Change your IP and go back to cuckchan, rapefugee.
6cd06e No.8058260
a854a6 No.8058265
5325bf No.8058268
>>8057875
>>8058039
>>8058116
>>8058218
>Lack of proper capitalization and punctuation
View this poster with skepticism. There has been a rash of subhumans posting for unknown but coordinated purposes recently.
>>8058260
6cd06e No.8058275
c06580 No.8058278
>>8058230
This is the real deal, we need to spread this link to muddle the IP's
>>8058260
Yea, you good.
67142c No.8058317
703ac7 No.8058330
>>8058243
I have a feeling that 4pol is genuinely dead.
Occasionally, users from here go there to feed them info, and they don't respond to those threads.
The thread about the archive.is exploit is nearly dropped off the last page already, and not a single reply.
Meanwhile, the slide threads are full of replies.
I am convinced that cuck/pol/ is just bots talking to bots now.
I hope moot gets bone cancer.
cb208d No.8058380
>>8058278
This. Though you'd need a lot of IP addresses (not VPNs but innocent bystanders) to access these links to saturate it. You could post them on twitter and bait normalfags to click on them.
b52b22 No.8058398
No links are working currently, in fact archive.is redirects to archive.fo.
2ef06b No.8058405
This site has always been blocked in China and it's made it impossible for me to view half of the links posted here.
cb208d No.8058420
>>8058380
But to add, there's a problem, referrer data. They'll be able to focus on ones of 8chan origin. So you'd need a way to bombard it with forged referrer data.
67142c No.8058426
>>8058398
This. The entire thing must be fucked, either maliciously or not.
5325bf No.8058441
>>8058330
I scoped it out yesterday because I was curious to see how a certain event was being shilled there.
The place was filled with posts like these
>>8058288
>>8058275
>>8058260
>>8058218
>>8058039
The capitalization errors are the real key. They crop up over and over in the strangest way. They shill various angles in waves so that it is impossible to tell what the true aim of the effort is.
db8fc8 No.8058446
c06580 No.8058475
>>8058420
Maybe a script that constantly changes referrer and user agent that is always loading that gif address?
67b7b8 No.8058492
Does it still get my IP if I have uBlock Origin with all the privacy boxes checked?
703ac7 No.8058508
>>8058398
Fucking dicks. It's on the main page now.
Entire site just got pwned.
9c9f0d No.8058519
I think I've seen archive.is in this state before, months ago.
c06580 No.8058523
>>8058492
Yup, I suggest you spread the link to cober your ass.
db8fc8 No.8058530
>>8058492
If you saw the image, they got you.*
*If you saw the image, but you hide your referrer, you will be kind of hidden going forward after we dilute the links, but they got you.
b9c469 No.8058535
>>8058243
i only went there once to post dox, not really worth it. maybe its better to let them be honeypotted and get the spooks off our backs
5325bf No.8058591
>>8058535
>i only went there once to post dox, not really worth it. maybe its better to let them be honeypotted and get the spooks off our backs
If you can't type like a Nazi, you can't be a Nazi; and if you aren't a Nazi, you need to get the fuck off of /pol/.
703ac7 No.8058597
Main archive.is page is back.
Site still slow as shit.
b9c469 No.8058600
>>8058591
fucking ban me then, i made this thread asshole
f1d067 No.8058603
So this is how those fucking bastards are going to shut down archive.is and erase all the evidence of their various crimes against humanity?
ac4996 No.8058604
I think that's what happens when the website itself is overloaded or whatever.
522869 No.8058629
>>8058600
Stop niggering up your own thread cuckchanner.
cb208d No.8058630
>>8058475
Something like that, yeah.
>>8058530
Funny, I didn't see the image at all, just a blank page. Doesn't mean I wasn't affected though as the very act of requesting would have been enough.
b9c469 No.8058632
>>8058604
seems odd that it would use an image hosted on an intelligence school's website
8febf8 No.8058637
>>8058037
Fuck. I got one of those. Am i fucked now?
6cd06e No.8058653
>>8058637
nah you can remove the tracking cookie by deleting system32 folder
b9c469 No.8058656
>>8058637
they're probably honeypotting to perform metrics on who's looking at what. I doubt it would get you v& or anything
703ac7 No.8058668
>>8058604
>I think that's what happens when the website itself is overloaded or whatever.
INCORRECT.
The site is likely under attack, but real archived pages still load, albeit slow as shit.
Here's one that was crawled a few months ago.
https://archive.is/Jcz88
(Also an interesting read about an ancient lulzcow from USENET in the 90's that you kids have probably never heard of)
8b558f No.8058680
Archive.is/today has been doing something weird for over six months anyways. Never heard anybody else talk about it.
Basically, if using script blockers blocking even first party, every so many months or so (maybe two months)? It will only load a blank page when trying to load an archived page, script blocker will show no scripts blocked, but if you unblock script/XHR for first party then reload then the page will load. You can then block first party again for whatever amount of time it is until it triggers again and archived pages will still load
b9c469 No.8058702
>>8058680
tfw archive.is has been a honeypot all this time
8b558f No.8058709
>>8058680
Like, you have to allow scripts even though scripts don't necessarily show as even being there. At least once every few months or so run the script to "whitelist" yourself. That's my take
b52b22 No.8058714
archive.is is already registered*
% This is the ISNIC Whois server.
%
% Rights restricted by copyright.
% See https://www.isnic.is/en/about/copyright
domain: archive.is
registrant: DP1659-IS
admin-c: DP36-IS
tech-c: DP36-IS
zone-c: CN25-IS
billing-c: DP36-IS
nserver: anna.ns.cloudflare.com
nserver: ben.ns.cloudflare.com
dnssec: unsigned delegation
created: May 16 2012
expires: May 16 2017
source: ISNIC
person: Denis Petrov
nic-hdl: DP1659-IS
address: B?lkova 16
address: CZ-11000 Prague
phone: +420 775168924
e-mail: [email protected]
created: May 16 2012
source: ISNIC
person: Denis Petrov
nic-hdl: DP36-IS
address: B?lkova 16
address: CZ-11000 Prague
phone: +420 775168924
e-mail: [email protected]
created: May 16 2012
source: ISNIC
Website is owned by a Denis Petrov from Prague, Austria. It's hosted in France. It's been serving the image from Henley-Putnam for months. We need to find out what Petrov's relationship ti Henley-Putnam is. An anon researched this two weeks ago and came to the conclusion that he's spoof, but no one screenscapped it and everyone forgot about it.
b52b22 No.8058726
>>8058714
That he's a spook I mean. Sorry for the typos.
db8fc8 No.8058735
>>8058702
how are they funded?
c06580 No.8058751
>>8058630
Just made a pajeet tier script, forgot about the captcha so it's damn near useless. Best bet is gonna be spreading the links manually.
I would not trust anything about archive .is right now, if this was a legitmate attack I doubt they would host the script on a college's server.
a854a6 No.8058755
>>8058508
I know they shill for donations. I don't know if that's there only or primary source of funding.
8b558f No.8058757
>>8058702
I don't know what really goes on here but for fucks sake due to one news story we have mods begging us to thank based stasi/FBI. This entire board is really ridiculous lately
And not that I want to give advertising money to various clickbait sites and whatnot but anybody with some working logic would wonder what is archive.today/is and what benefit it has to continue operation?
Or I guess like every other hard question, just explain it away as "magick"
601df8 No.8058768
>>8058735
It's my understanding that until recently they were funded by some sort of private funds or donor. I think recently they've been taking donations.
703ac7 No.8058794
>>8058751
It is possible that the person using the script is a student, or associate, of the university.
100a98 No.8058800
>>8057875
To what end?
I mean how many anons get no knock raids or are denied security clearance based on this stuff.
I am not saying that the government is not watching us, but this seems like data mining is going into some vault for no reason. What are the consequences for us as anons when they do this?
The suspense is killing me
95e55e No.8058805
So whoever clicked a broken archive link is fucked?
6cd06e No.8058809
so how do you make this exploit work? if i want to log IPs for everyone who visits my link to a pro-globalism/pro-communist social network, how would I go about that, friends?
703ac7 No.8058824
>>8058800
>denied security clearance
That's a real possibility, actually.
Association with certain groups is grounds for denial of a clearance.
601df8 No.8058829
>>8058809
You would just need a server in between the social network and the person clicking on the link that logged IPs. After that you'd just serve a link that redirects to wherever you wanted.
c06580 No.8058845
>>8058794
The front page of archive .is is compromised as well, if this was an "attack" it would not be condoned by a university for being illegal. And if a student/associate was responsible why would they tie it to their school for no reason?
Archive is involved somehow.
b9c469 No.8058859
>>8058800
>>8058757
>archive.today/is and what benefit it has to continue operation?
unless theyre making ad money (they aren't) the only use they have is to record information (intel). i'm not really worried about this whole thing, cause i'm probably on 6 million lists already and they haven't iced me yet. If hillary somehow gets in, we should probably be more careful
100a98 No.8058867
>>8058824
My security clearance was never denied, however I admit I have only had secret, but I still hold it.
caa000 No.8058870
>>8058006
RequestPolicy then. You should be using both anyway.
703ac7 No.8058886
>>8058809
Theoretically the attacker may have put a page up on their own webserver containing code which escapes any sanitizing functions in the archive.is webcrawler. Thus in-effect posting arbitrary data to archive.is. That data being an img-src link, and a google-analytics script.
100a98 No.8058891
>>8058859
>If Hillary somehow gets in, we should probably be more careful
I agree with that, shill be gigging for frogs as her first executive order
100a98 No.8058894
0f3b1f No.8058895
>>8058877
You do realize that the news websites can easily track you with their cookies too, right? Especially sites for kike-right like kikebart, not to mention big black cuck or cnn.
703ac7 No.8058901
>>8058877
FUCK OFF YOU KANGAROO RAPING PRISON COLONY INHABITANT!
5325bf No.8058909
>>8058800
I think there is a massive, multi-front effort to trace the patterns and pathways of nationalism rather than any single nationalist. Every individual piece of the puzzle is so sloppy that it gets found out eventually, right down to the shills that push them, but nothing that is visible compromises the entire picture.
Remember that trashy paper documenting the spread of google=nigger? That sort of intelligence operation at a more competent level.
>>8058809
>so how do you make this exploit work? if i
dc3e8a No.8058940
Somebody should warn the guy who runs the site about this. He's on Twitter.
a211d5 No.8058942
How to beat this:
spam the links everywhere you can and dilute their data pool.
703ac7 No.8058944
>>8058927
No, you slimy kike.
Any site can be hacked/compromised, and XSS is a very common vector for such assclownery.
The archive.is requirement was a good idea, but archive.is got hacked.
They need to FIX THEIR SHIT ASAP.
703ac7 No.8058960
>>8058927
The real problem here is autolinkification of URLS.
A URL posted on /pol/ should NOT automatically become a clickable link. That is a MASSIVE SECURITY RISK due to http referrals.
a854a6 No.8058971
>>8058944
Someone already did
https://twitter com/Another_Human/status/794059808605237248
b3d880 No.8058974
Dammit I had some important stuff on archive.is. Since the site is fucked, where can I archive now?
601df8 No.8058976
>>8058960
You should really be spoofing your referrer already.
b52b22 No.8058977
>>8058944
They didn't get hacked, they've been doing this since their inception. You faggots only just now noticed.
b52b22 No.8058980
>>8058974
Alternatives were posted in this thread. Does no one read the thread before replying anymore? Go back to cuckchan you fuckin' nigger.
a854a6 No.8058987
>>8058960
Highlighting and go to still sends referral. Gotta break it up so they have to copy paste then edit in a '.' or the like to stop that.
703ac7 No.8059000
>>8058974
Goddammit. How many times must I fucking say it?!?!?!?
Your archived shit STILL WORKS.
You can still archive new shit.
Certain "bad-actors" can make bad archives; that's what is going on here.
a211d5 No.8059024
tfw all my posts go through a burner phone with the GPS ripped out
70cdb2 No.8059026
b135b8 No.8059036
So what archiving site should we use instead of archive.is? And we need to make some memes to spread this shit out to our associates and minions elsewhere.
bf1c22 No.8059037
>>8058603
Nearly every media outlet has endorsed Hillary, meanwhile she's been expanding CTR after they've proven the only effective part of her staff in the recent months. I wouldn't doubt that if she wins, there will be the greatest concerted effort to dilute and destroy all records of their shilling and corruption in the history of mankind.
b52b22 No.8059050
>>8059036
Read the fuckin' thread you nigger.
703ac7 No.8059064
>>8059036
I'll fucking say it again, you fucking zika potato.
Archive.is still works and you can still use it.
The problem is that certain "bad-actors" can make bad archives.
5325bf No.8059075
Just look at how blatant some of them are. I know shilling has been bad in the past, but it now seems to be reaching some new crescendo.
>>8059026
>go to leftpol
95e55e No.8059094
So what do we use instead of Archive.is?
eedc9d No.8059100
>>8059064
which ones, like twitter?
28cce4 No.8059107
>>8059094
Wayback time machine
c06580 No.8059114
>>8059064
Don't be so quick to assume, their homepage has also been exploited. Treat Archive.is with caution, backup anything important you have on there. Something very fishy is going on.
703ac7 No.8059129
>>8059036
I'm sorry you are too fucking retarded to read the thread and determine what s going on.
Here goes:
Someone figured out how to make bad archives that try to make your browser connect to another site, and give them your IP.
Archive.is still works.
You can still archive things.
You can still look at things that have been archived.
If you still don't understand, please go here:
>>>/gaschamber/
100a98 No.8059141
>>8058909
That makes sense, see what nationalists do and act so you catch many bad eggs all at once rather then a handful wasting time and money.
Its a passive approach but I can see it a bit easier then I can much else.
95e55e No.8059149
Does anyone have a site like archive.is that isn't compromised?
703ac7 No.8059152
And I replied to the same post twice.
Now I am the retard.
Please don't gas me, einsatzgruppenführer.
635192 No.8059154
>>8057944
Is this what the "honeypot" is?
If so, it's a false alarm. This happens every time they get overburdened. I think it's a Cloudflare page. It's been doing this intermittently all day.
a211d5 No.8059182
>be me
>now somebody has my phone's
>the fucking CIA keeps posting cheese encrusted digornios
>all I wanted to do was lurk
703ac7 No.8059183
>>8059154
WRONG.
No other Cloudflare site does this.
Specific pages on archive.is ALWAYS do this.
Those specific pages are spammed here, along with stories of fake habbenings, to encourage clicks.
The link goes to an intelligence/counterterr. school.
a211d5 No.8059188
100a98 No.8059196
>>8059183
people are learning about us? In a school?
048bce No.8059203
>>8059196
>wipe a server? With a cloth?
Dont be daft.
c06580 No.8059205
a211d5 No.8059206
>>8059196
if I had to guess we're being studied to do either counterterrorism or counterpropaganda, the first will be interested in our general profile to do risk assessment, the latter will be interested in our demographics and how to prevent people from getting here
100a98 No.8059259
>>8059203
Well if its a school a paper trail exists from a to b with an outflow if information on a large scale.
many forms of learning exist other then school
048bce No.8059263
>>8059206
So we've graduated to being something above an anime shitposting site. Yay.
If they've got this much time and energy to study us, they should go investigate hillary.
eb84f8 No.8059271
>>8058891
Then we fight. What the fuck are you scared of? Death? LOL
bf1c22 No.8059306
>>8059271
ALL ANONS WILL RETURN TO THE EMPIRE UPON DEATH TO THEIR RESPECTIVE POSITIONS AS MEMETIC MONKS AND HIGH CHANCELLORS, DO NOT FEAR THE TRANSITION
a5722a No.8059313
I knew something was fucky with that page not loading, and displaying some kind of loading animation that shouldn't exist on archive.is
I don't really care if some fag has my IP address though.
944775 No.8059330
This can be prevented as follows. install https://github.com/gorhill/uMatrix (you should be using it anyway) and add the following rules:
archive.is * css block
archive.is * image block
archive.is archive.is css allow
archive.is archive.is image allow
100a98 No.8059358
>>8059271
Death is a natural thing to have, fighting that fear for the greater good is what makes a man white, but realizing that white blood must flow as little as possible for it is valuable.
Fight if you must fight, dont when you can, waist no what is precious and given.
944775 No.8059368
>>8059330
This is how your archive.is dashboard should look like in uMatrix.
Here we see that archive.is uses mail.ru's analytics service, but the ruleset from above blocks it.
a5722a No.8059414
So has anyone contacted the owner yet to see if he can fix this exploit?
8b558f No.8059418
>>8059368
In my opinion that's not how it should look, although (without studying everything in this thread) it might work for protecting from exploit this thread is about.
You should really when starting out with umatrix, switch scope to "*" and disable first party then save for scope and switch back to regular scope for the site you are on. That way first party scripts are not run by default. It's the only thing that noscript does better by default, basic configuration disallowing first party. There are many reasons why allowing first party scripts by default is a bad idea. You can always allow them for whatever sites you trust and umatrix is still about a trillion times less involved to use than noscript so I recommend it.
Although I still wonder about what I experienced twice as detailed in the below post (both times were months ago, one at least four months ago, the other at least a few)
>>8058680
TBH it may have been not an exploit but something to prevent the site from being used as a generic web host by spammers etc? But I never trusted archive.is much because what do they benefit from being used almost exclusively by "internet nazis" with no obvious revenue stream? Then again I feel the same way about the vols here for different reasons
8b558f No.8059420
Also only marginally on-topic but anybody remember the imgur exploit?
67142c No.8059429
I did a little research on some of the pages that linked to those bad archives.
>>8053522
>>8054040
>>8050244
These are the pages that clicked over to that. They look like they could have been made by one of us. Nice work CIA.
944775 No.8059444
>>8059418
>You should really when starting out with umatrix, switch scope to "*" and disable first party then save for scope and switch back to regular scope for the site you are on. That way first party scripts are not run by default.
Correct. this is only a patch over the default behavior (first party everything enabled / all images and CSS enabled). But this is likely what you'll end up using: manually enabling all content requires too many clicks for casual browsing.
It does make sense to do so in a specialized profile, though (one you'd create solely for 8ch/archive.is/maybe some social media), but expect that any sites outside that will break.
9b6cba No.8059445
>>8058800
>>8057875
They are looking for the FBI informant, or any other federal agent that's "with us" perhaps?
944775 No.8059451
>>8059420
>anybody remember the imgur exploit?
can you remind us about it?
000000 No.8059457
>>8059330
Privoxy rules to do this?
Still wish we use something else more hidden, and run by us, than archive.is to archive shit
a5722a No.8059466
>>8059451
Someone injected code into imgur that caused every page view (millions) to ping 8chan and 4chan.
4fd3d4 No.8059478
>>8059445
>mfw this Bhutanese prayer scroll enthusiasts community becomes the battleground between the top intelligence agencies in the US
8b558f No.8059480
>>8059444
I've personally found that with umatrix even with first party scripts disabled by default, that I only have to take manual action for about two days of normal surfing until I've hit all of my regular sites and enabled first party (and in particular cases, other scripts/frames) and then it's nearly hands-off. I frankly love umatrix and think it's ingenious, and categorizes scripts and threats and objects etc much better than noscript which is just a fuckhuge list with no order that makes sense. I mean, you don't know with noscript which scripts depend upon which ones etc etc so it's a crapshoot enabling them to get some specific functionality.
>>8059451
It wasn't the same thing except it was targeted at us, it was interesting though
944775 No.8059482
>>8059457
>Privoxy rules to do this?
Privoxy doesn't filter HTTPS, so would be useless for remote images. (You could install a CA and MITM everything, but I would not advise that.)
944775 No.8059506
>>8059480
I guess I'll have to give block everything mode a try. Thanks for the field report, anon.
It might be true that some connections still escape, notably WebRTC and Websockets. What do we do about those? There's uBlock Origin Websockets extension but it is not supported by uMatrix. I'm also using "WebRTC Network Limiter", but not sure how effective that is.
Which extensions do you use?
My go to list is: uBlock origin (+ websockets plugin), uMatrix, WebRTC Network Limiter, and HTTPS Everywhere (+ a few userscripts via TamperMonkey). Should I be using anything more?
8b558f No.8059536
>>8059506
I couldn't even start to list everything, ublock has something to disable webrtc, https everywhere is good. Then I have hundreds of about:config changes that were important but frankly I'd have to research all over again to give a report worth a damn.
I'm practically stuck on firefox now due to the huge amounts of configuration put in.
SSleuth is also nice for a quick rundown of problems with TLS on sites you visit.
For a long time you couldn't let firefox update without having some new fuckery that needed to be disabled, "pocket" etc
944775 No.8059559
>>8059536
I'm using Chromium here mostly because its sandboxing is top notch. I doubt anyone would waste a 0day here, but Firefox is the go to browser for claiming pwn2owns (https://en.wikipedia.org/wiki/Pwn2Own)
I really wish it wasn't so: we need a secure browser that's not backed by an ad company.
8b558f No.8059561
Also if using firefox I recommend running wireshark, setting your homepage to about:blank beforehand, starting firefox and seeing what connections it makes. There's no reason for it to announce that you just started a browsing session to the sjws at mozilla.
I have about:config changes relevant to stopping this, but fuck it would take some work to find it. If you really care you need to do your own looking at your network traffic.
I expect my OS and browser to not make traffic or activity when doing nothing. I need to revisit this myself
39207f No.8059573
>>8058714
archive.is is fishy as fuck. The owner doesn't say shit, answers few questions on tumblr and says that they are paying the hosting costs out of pocket. They were going to release what are their hosting costs, but didnt.
Not to be trusted but we are fucked they are not based archive services out there. So far archive.is hasn't deleted anything, that we know of, but, they are for sure scraping ips.
>>8058755
8b558f No.8059586
>>8059559
Yeah I understand the benefits of chromium/blink but have never been able to trust it or even consider switching after the amount of effort I've put into my own stuff.
There are sandboxing options for firefox (firejail) or even whole OS like Qubes that I've wanted to play with (especially since I finally have a system capable) but haven't gotten around to it
944775 No.8059606
>>8059573
>Not to be trusted but we are fucked they are not based archive services out there
what are the legal issues in setting up one?
There is web.archive.org, but they honor robots.txt. Bookmarklet:
javascript:void(open('https://web.archive.org/save/'+document.location))
39207f No.8059615
>>8057875
It is clever, since that loading gif, goes by so fast. I can confirm that I pull that image as well.
fb4991 No.8059626
>>8058230
>tfw my IP goes to the nearby city, not my house for some reason
000000 No.8059635
>>8059482
That sucks… I wounder if i could get some anons to fork off privoxy and setup blacklisted CAs to install, to replace the defaults. Because really have you seen the default CAs and who it lets in on your tls/ssl? I mean just looking under my /usr/share/ca-certificates/ is giving me spooks right now.
39207f No.8059638
>>8059606
>javascript:void(open('https://web.archive.org/save/'+document.location))
Legal issues are not the problem just the high server costs. An anon tried to make an archive of 8chan a while back and it cost him too much. That was only 1 site imagine a global archive service.
8b558f No.8059639
>>8059626
That's normal, you're seeing the location for the office or whatever that the IP block was registered to. It doesn't stop law enforcement from knowing which address the IP was actually assigned to, given warrant or extralegal access to that info
8b558f No.8059652
>>8059626
Like, because you have a dynamic IP you're seeing the physical address that your ISP registered the block of IPs that your IP was temporarily assigned to
fb4991 No.8059667
>>8059652
Makes sense, alright
3f4ce9 No.8059704
block scripts by default everywhere
203f41 No.8059710
>>8059444 (checked)
Thanks for the script. Just started using uMatrix recently and it rocks. Is there any value to using uBlock at the same time, or do yall use uMatrix alone?
8b558f No.8059713
>>8059667
I even failed to explain it properly there, although it would be close if you replaced the final "to" with "from"
Anyways, for the average home user with dynamic IP (basically most people with DSL or cable etc) when visiting a site, assuming no other fuckery, the site can't determine your home address. They will get an address registered to the ISP. If you did something that got the attention of LEOs, the LEO would contact the ISP with your IP address at the time, a description of your crime (or just the implication of it), a warrant request if needed, and the time of the offense. The ISP would reply back giving the account information associated with the IP at that time. Because when your DSL or cable modem gets the lease for that IP address, it is associated with a username and password (saved on your modem box) that is tied to your account. The ISP must store this associated info. So blah blah anyways with the information your ISP has your activity can be correlated with your physical address (although there are still several caveats).
Hence why people recommend VPN in non-cooperating nations, because then you're hiding your specific internet traffic from your ISP and only cooperation from the VPN company (which may not have legal obligation or even desire to cooperate with requests) could reveal more info. And even then would probably not be able to get down to specific customer/address. Although it can get way way more complicated for a number of technical reasons and it's hard for even full-paranoid anon to deal with all of it.
39207f No.8059722
>>8059713
Anoonymoose, and others recommend private internet access for vpn. Mullvad considering how cucked sweden is. I don't think they can be trusted, and well when I used their service, the reliability was bad. Do you vouch for privateinternetaccess? Or should we just stick with some Russian VPN provider?
63e9f5 No.8059724
I've seen that loading shit before, but I'm connecting from a university dorm so the IP they get doesn't really matter as at least 500 other people use it.
I wouldn't worry too much about it anyway, I doubt they can do anything with the IP except collect metrics as other people in this thread have mentioned. IPs change all the time and sometimes if you use a shitty VPN, someone can use you as an exit node.
For that reason, IPs are not a very reliable method of tracking people as they can be easily spoofed, hijacked or muddled.
8b558f No.8059732
>>8059722
I can't really say, I don't even bother with that level of paranoia. Don't take my advice about VPN etc because I have what may be a naive view that I still have freedom of speech and if somebody has a problem they can take it up with me at my door.
944775 No.8059742
>>8059710
I use both. uBlock lets you traverse the last mile of the blocking: removing crap that is served under the same domain as the site itself. uMatrix lets either everything from a domain pass or nothing, uBlock will filter by URL/apply cosmetic filters/etc.
For example, some Wikipedia sites benefit from uMatrix passing through requests to meta.wikimedia.org, but I still don't want to see their shilling for donations, so I have:
||meta.wikimedia.org/w/index.php?title=Special:BannerLoader&*
944775 No.8059744
>>8059742
(have that in my uBlock, that is)
b9c469 No.8059760
>>8059129
see:
>>8059114
>>8059263
>If they've got this much time and energy to study us, they should go investigate hillary.
they're privately run aka bad guys
>>8059445
>They are looking for the FBI informant, or any other federal agent that's "with us" perhaps?
that is a likely scenario
>>8059429
>I did a little research on some of the pages that linked to those bad archives.
thanks, so we know those threads are probably bullshit
337cec No.8059787
>>8058714
>Website is owned by a Denis Petrov from Prague, Austria.
>Prague, Austria
>Prague
>Austria
u wot
e79793 No.8059801
Could this have something to do the pedos saving 8chan cp threads/boards on archive last year? If so why would they target /pol/, unless it's an attempt to harvest 8anons IPs. Have we found any of the affected URLs posted to sites other than 8ch?
188458 No.8059824
>some guy post a thread and says archive.is is honeypot bullshit
>he gets banned (i think)
>now this
46ac24 No.8059829
>>8058155
Why hasn't this been shooped to read "Racism… It's always acceptable"
8b558f No.8059842
>>8058116
It's almost pointless to look any further than Henley-Putnam. What else is there to find? They are closely associated with every alphabet and there are many papers to be found about domestic extremists, every kind of buzzword used to describe the userbse here, etc etc.
Interesting considering all of the pinned "based FBI" threads lately.
188458 No.8059843
>>8059829
attempt has been made
8b558f No.8059845
>>8059801
If the Henley-Putnam link is correct it's just data collection regarding "potential domestic extremists" blah blah
0a9583 No.8059856
>>8058629
>>8058591
>>8058243
how bout you fuckers stop derailing this thread?
46ac24 No.8059872
>>8059843
not bad, thanks m8
5325bf No.8059878
>>8059856
Why would I not point out the subhuman shills in a thread started by a subhuman shill? Or any thread really, but in this case it isn't even derailing from the OP as he is among the guilty.
67142c No.8059882
>>8059845
"Potential domestic extremists"
Because if you're interested in articles that claim that anthony (((penis))) is raping kids, that bernis might hate clinton, or that the bitches that lie about Trump groping them recanted, you're clearly a "potential domestic extremist".
000000 No.8059892
henley-putnam.edu/Portals/_default/Skins/henley/images/loading.gif
They're using dotnetnuke like a skids.
Microsoft-IIS/7.5
ASP.NET 4.0.30319
Login page: http:// www.hen ley-putnam.edu/login.aspx
Mail server: 247501781.mail.outlook.com
Do anybody want to look for credentials in databases?
ae06b9 No.8059938
The code for the .gif is gone now. Did the website owner revert the changes, or did the attacker remove it because they found out what they needed to know?
000000 No.8059944
Also if we say that a large botnet is to visit the links it will ruin their information and data. They can try to hide links but I am now watching.
67142c No.8059952
>>8059938
They found out. They're watching.
8b558f No.8059957
It's kind of interesting if you search for the full URL for the loading image, you get a result from reddit from 2015 with a person noting "Oddly enough, the Loading image Isn't on archive.is."
Also some poo-in-loo tutorials for infinite scrolling page coding that just use the url for the loading gif in the tutorials because it's basically a free hotlinkable image.
d69f49 No.8059985
Well, 8chan is already on cloudfare, so your IP is already sent to a third party.
5fe050 No.8060004
>>8059760
>>>8059445
>>They are looking for the FBI informant, or any other federal agent that's "with us" perhaps?
>that is a likely scenario
Nah, I think the likely scenario is that this is just some more HBGary type shit where some dumbass thinks they can find info on pol users and package it up for some sweet sweet gov contract money.
000000 No.8060006
>>8059957
XCritcs on fling.com database (related info?)
bi tcoin.stackexchange.com/users/4532/xcritics
http://www.h ackinguniversity.in/2013/02/infinite-scroll-blogger-1.html
Is it shitty copy paste or real code?
926a79 No.8060013
>>8059845
I got news for those idiots. We are the majority bub, Trump is going to get 70+% of the vote
>>8059938
They or (((they))) keep /pol/ under surveillance and they found out we know.
3e7cd0 No.8060023
>>8060013
Which also suggests we're their main focus of the attack.
b3d880 No.8060034
>>8058751
>>8058161
>>8058230
Would making a script where all links you click go through a redirector like anonym.to, help?
c67bf2 No.8060035
This why folks everyone should have a VPN and use NoScript while blocking webRTC for good measure.
5325bf No.8060066
>>8060023
It's a multi-pronged, ongoing probe. Any link discussed by posters using improper grammar and capitalization is suspect.
For a quick and dirty operation, it doesn't even matter if you say, "This link is compromised," Because just by posting it, a few people will click it. It's a way to maximize short term exposure at the cost of long term efficacy.
d04d80 No.8060094
>>8058098
>>8058063
>https://archive is/osfU4
The page loaded fine for me. I will have to agree with the anon that said it must be some cloud fire thingy.
Either that or Archive.is is compromised and they rolled back once people started to notice
ebf0e3 No.8060099
God what a fucking asshole.
>>8057907
techfag here, basically besides needing to noscript archive.is now, all we can really do is wait for the archive.is owner to fix this
cc67fc No.8060113
>>8058668
>Hates being 'embarrassed' but repeatedly puts himself in situations were his sexual activities with dogs were made very clear (such as phoning his vet to ask if swallowing dog semen is dangerous).
lol
also that link doesn't appear to have the compromised code
e5cfec No.8060125
Shit, does noone here know what "escape text" is?
EASY BREAKDOWN FOR THE TECH-ILLITERATE
Whenever you type text in a field of a website, that field may or may not be a possible vector of attack. To prevent shit like that, developers write "sanitization" code. To turn shit like "/" into some other text, like "&64" for instance.
This is because frequently, what you wrote will be posted and be part of the webpage returned to you. What would happen if you posted actual code instead of just text?
This is what we call "escape". By using using an escape character (or expression) the text you write in a form starts by declaring "all right, the text ends HERE. The rest is code" and you do all sorts of funny shit.
So what is happening here?
Whenever you archive.is something, imagine there's a fuck huge text box. And everything in the site you're archiving is automatically typed in it.
Now, someone found out that text-field doesn't have proper sanitization and is vulnerable.
So you make your site. You post something about "multiculturalism" or "Hillary killing niggers live". And then, you write a bit of code. The escape code. Followed by whatever payload you want in your attack.
For now, that payload is a simple image tag to log your IP. In the future, it might be a full blown keylogger or something worse.
It's not archive.is doing this anons although the guy running it is weird.
It's people writing sites with this shit, archiving them on purpose and linking them here.
Wouldn't surprise me if this catches on and becomes an anti-archive defense for newssites in the future.
e5cfec No.8060130
Now if some other motherfuckers keep posting instead of reading the thread, remind them that the source of the attacks ISN'T on the archive.is.
It's on the actual sites being archived.
I'm seeing a lot of (1)'s asking for alternatives, and it seems a lot like someone wants us to ditch archive.is for another service. One that may already be compromised and controlled.
fd1239 No.8060144
>>8060125
That actually cleared it up, so in response to >>8060130 is there any defense against this and alternative to it?
9c0311 No.8060162
>>8060144 (checked)
Ctrl+F and read all the posts above about uBlock Origin and uMatrix and learn how to set them up. If you're really concerned about it, be as paranoid as possible and deal with the fact it's a little extra work.
784e06 No.8060222
>>8059466
I remember that. They even wrote "Sorry Hotwheelz :(" in the code.
248d79 No.8060227
>>8058230
Couldn't we just share those links outside to drown out the IPs they are looking for?
1054ce No.8060249
>>8057875
S H U T
H
U
T
I T
T
D O W N
O
W
N
bc18b3 No.8060253
>>8060222
Forgot all about that.
Nice trips btw
e79793 No.8060265
>>8060227
They would just ignore the loads of new IPs and any future ones that link catches, while keeping the old IPs.
321a3f No.8060286
>>8058155
how the fuck is that racism? i never understood that
bf1c22 No.8060306
>>8059845
>>8059713
Why are you using these cali girl phrases? 'blah blah', 'anyways', 'like'. Are you just a shitskin foreigner that picked up language from rom-coms, a cunt, a preteen, a shill, or a fucking fool. Which one is it? Fuck off back to cuckchan and plebbit with your shitty advice.
0a6780 No.8060324
>>8060306
Looks like a reddit goy.
8b558f No.8060328
>>8060306
Maybe I am a cali girl? Maybe it's just late.
Got a specific problem with the content of my posts rather than the style?
000000 No.8060340
>there are still people on 8chan who have not installed requestpolicy continued
8a5a45 No.8060347
>>8060328
Get the fuck out of here.
000000 No.8060359
>there are still people on 8chan who have not installed requestpolicy continued
7c9868 No.8060360
>>8058278
> spread this link to muddle the IP's
There's no point doing that if they're collecting the referrer info too. They just filter out the IPs from dud referrals (i.e. links clicked from outside /pol).
5ea061 No.8060368
>>8059429
>>8059760
>>8060094
For what it's worth, I'm the one who created the Clinton sex crimes thread and I'm most assuredly not CIA. The archive.is link was fine at first, but a few hours into the thread it got corrupted and people started complaining. That doesn't mean the TruePundit story is necessarily true, but it does mean that someone from the outside took a perfectly functional archive.is link and fucked it up. I apologize to anyone I may have unwittingly led into a honeypot.
95ca64 No.8060372
>>8057875
I SAY THAT YESTERDAY !
6716b5 No.8060374
even some sjw subreddits use archive.is don't panic ,just inform the owners of the site on their twitter
>h ttps://twitter.com/archiveis
>webmaster @archive.fo
e5cfec No.8060394
>>8060144
Don't listen to the other idiots about uMatrix and uBlock.
They're well intended (and you should indeed use those things) but they they don't protect against this.
The only solution is not clicking it. We're back to warez days of shady "jenna_jameson_nude.mpeg.exe" links. You click it, you're fucked.
For a more complicated answer, (and uMatrix might give you that option) it's possible to block conections to certain sites/servers/pages.
So if that image tag remains the same, we can block it once, post the "blocklist" here for other anons and stay safe. And if all else fails, editing your hosts file is a last resort that cuts the problem by the root.
The main issue though, is that they can generate new articles, put another server/another image in the tag. They'll archive it, post it here and in the time it takes us to figure out it's a new attempt, some anons will end up clicking it.
We can always jihad it up anyway. Some of us are already on lists. Those can click on archive.is links and screenshot it/confirm it's legit.
Some anons are writing an archive.is extension though. The main purpose was diferent, but we could ask them to put a "verify" link feature. If there's an archive link in a page and it leads to a broken page, it simply warns you or outright refuses to open it.
It's time to call upon /g/, install Gentoo and cross our fingers. We're close, we're winning, and this half-assed attempt to round us up in FEMA camps is a clear display of desperation. Well done anons.
Like I give a shit eitherway, I'm portuguese, they can't do jackshit in here, nor do they care about us.
7a9511 No.8060439
Is there any active threads with those links?
0335a1 No.8060440
>>8058155
I'm a broken down wizard with a bad back, let them come. I'm ready.
eddb22 No.8060444
>>8060394
>>8060394
10/10 assume everything is compromised and work backwards depending on your operational needs
dynamic *chan operations pfsense firewall filter when ?
577a5e No.8060446
>>8057875
It wouldn't be surprising if the person doing this had a direct connection to Hillary. They already modeled memetic spread on cuckchan to some extent in the UN (((study))) done earlier. (((George Soros))) probably wants some statistics on what he's dealing with when it comes to communities of people that don't want his pinko commie jew bullshit.
7a9511 No.8060449
>>8060446
/pol/ack persecution if she becomes president?
577a5e No.8060462
>>8060449
>implying she even needs to do that directly
As long as the rapefugees flood in then they will do all of the violence and dirty work for her.
443236 No.8060477
>>8057875
>>backdoor.win32.ursap
2f0a09 No.8060492
So who do we have to meme out of reality over this?
dd9a45 No.8060538
Since everyone pretty much agrees this was an isolated incident, can we just ask the admins to forbid the posting of the affected archive links?
c71ac1 No.8060556
>>8057875
That putnam address always shows up when archive is down and then vanishes when the site is back up. I don't know what's the deal with it but it's nothing new.
Also stop falling for the honeypot meme and wait for some more info instead of falling into obvious bait like you did with Freech's "reddit spacing" crap.
f4df1a No.8060583
Seems to be up and working this morning. Just archived some stuff.
7f0fa6 No.8060586
>>8058886
>>8058809
So this is basically a man in the middle attack kf you click a bad link?
Is it strictly just IP harvesting or could it be used to load malicious code into your browser? What would that even do; most modern browsers stop you from going to bad domains or downloading without permission? Also, arent IP addresses considered semi public? Does this exploit let them have a live page that will always differ from the archive? (I've seen that you need to rearchive it to update the page)
Asking because i dont know shit, and this seems minor from my point of view
577a5e No.8060647
d6f8e5 No.8060661
>>8057875
>posts on an image board which harvests IPs by design
>makes a thread on said image board about another site doing the same
never change /pol/, endless giver of cringe
1f561f No.8060676
>>8058768
Let me correct that for you.
a456e8 No.8060700
/tech/ here
First of all you guys are overreacting. Whenever a Youtube video is embedded here the exact same thing happens. The thumbnail is loaded from google's servers. That's why you can't embed on our board.
Is someone posting malicious links archive links to track users here? Probably but this is sort of tracking is easily defeated without using an addon.
Second NoScript tracks you as well with the WAN IP protection that's enabled by default, most well known security addons track their users and sell the data. >>>/tech/674876 If you're not analyzing your web traffic don't pretend to know what you're doing, most technical sites giving advice are full of shit and paid to lie. And on top of all this NoScript wouldn't stop that picture from loading giving away your IP.
Protecting yourself from this attack is as simple as going into your browser preferences and selecting that only images from the originating server be loaded. By browsing this way most of the web will appear broken thanks to sites using CDNs to reduced bandwidth costs. You'll get used to it.
e57f5a No.8060710
>>8057875
>thus giving them the user's IP.
>>8057944
Well done, you just found my proxy's IP!
Seriously.. use proxies guys. I barely browse 8chan without one.
e57f5a No.8060728
>>8060700
>If you're not analyzing your web traffic
You mean TCP UDP connections?
I do that, but what should I look out for? When I started observing I found many google and apple connections without even having their programs installed. They tend to throw some shit in hidden file paths like AppData, or leave files in program files.
Block all connections.. but if things don't connect properly - try to figure out what connection is required.
I've learned A LOT about the files on my computer from doing that.
e31033 No.8060731
>>8060700
>The thumbnail is loaded from google's servers. That's why you can't embed on our board.
wouldn't it be pretty simple to have 8ch download the thumbnail and host it as the embed's thumbnail?
e57f5a No.8060737
>>8060661
People need to use an "all sites are data mining" approach.
I do whatever I can to limit their tracing abilities.
e3d626 No.8060742
>>8057875
>I dont know what a honeypot is
>I dont know what XSS is
>I dont know what SQL is
>I dont know what escaping is.
>I'm going to use a bunch of terms I dont understand to sound smart.
e57f5a No.8060753
>>8060742
He said he didn't know.
And /pol/ tech threads are a good idea. Assange's '1984' warning warned us it's going to be harder to use /pol/ etc without putting yourself at risk.
Clearly the corporatocracy is trying to assert it's dominance. Which is funny.. all we do is observe accessible information and shitpost.
79b3c8 No.8060759
>>8058230
Maybe it's Trump, trying to find qualified RWDS members.
b5362f No.8060760
>>8057875
wow it's google analytics. it's fucking nothing. also that gif doesn't exist, and that page load error is real because the gif doesn't exist.
calm down faggot
2f0a09 No.8060781
>>8060760
Better safe than sorry.
Train stations are expensive.
5c0be4 No.8060793
Okay reading through this thread, none of it makes sense. Other links to random archived shit also have the spinning thing. The main site is fucked as well. Plus worried about IPs? Seriously this thread is overreaction and misinfo
ed9a4a No.8060803
>>8060793
You have to ask yourself who get's benefited by demonizing archive.is and making /pol/ (as well as others) to drop it entirely
3a4b37 No.8060814
>>8060760
>wow it's google analytics. it's fucking nothing.
Actually, it raises concerns about Google.
Google is evil it seems. Why are they exploiting client-side scripting to obtain data?
Yes they say the application requires the client to execute the program - but why is that necessary or allowable?
t. technical puppy
5c0be4 No.8060819
>>8060803
This is ultimate unwarranted self importance. Archives that are innocuous and have never even been posted here are also broken.
b5362f No.8060821
>>8060760
actually i take that back the gif exists, but the rest is still google analytics so still nothing.
>>8060814
because it gives the site owner's more data about their users. sometimes that is useful even if you don't like it.
2f0a09 No.8060833
>>8060819
He's got a point, though.
it should at least be looked into.
047485 No.8060843
>>8057875
I have the QuickJava add-on for Firefox + uBlock Origin and I started to see a loading screen on some Archive.is links a few days ago. I've never seen that before so it's a fresh trick / exploit. A page on Archive.is shouldn't have any JavaScript trying to load.
If your browsers don't have an add-on that enables you to completely disable JavaScript & Java go get one today and only turn on JavaScript when necessary.
Also: people shouldn't only post an Archive.is link. The original link should also be posted.
047485 No.8060863
>>8060843
It seems Archive.is has been slow to load these past few days. Maybe there's too many people using it? Yesterday evening I couldn't load any of these pages:
https://archive.is/http://www.wsj.com/articles/secret-recordings-fueled-fbi-feud-in-clinton-probe-1478135518
But this morning I can without any problem.
c4523a No.8060883
>>8060803
>You have to ask yourself who get's benefited by demonizing archive.is and making /pol/ (as well as others) to drop it entirely
Fuck off.
I use /pol/ and archive.is in a 'business' deal like fashion - aware of their potential conflicts of interest and scrutinizing them to make those conflicts are visible to me.
I largely trust /pol/, but not entirely. You should never trust anything on the internet without scrutinizing who you're dealing with.
Otherwise they'd potentially fuck you over or mislead.
I doubt /pol/ would do that, they've done a lot of good work. So has archive.is.. just making a point about mindless trust on the internet.
>>8060863
.. don't they usually have different URLs than that?
00985b No.8060884
claiming ID ed9a4a, I got disconnected
>>8060819
when the site is having issues and that henley-putnam thing shows up none of the links work, it doesn't affect specific archived links.
>>8060843
>Also: people shouldn't only post an Archive.is link. The original link should also be posted.
there's no reason to post direct links, you can still use archive.org as an emergency alternative
c4523a No.8060890
>>8060884
>claiming ID ed9a4a, I got disconnected
Me too, what was that?
b1a121 No.8060893
>>8057875
Not requesting from that website anymore?
Cant see anything with RequestPolicy
00985b No.8060910
>>8060890
Maybe just a coincidence, I get dc often because my internet is worse than Zimbabwe's. Their gorillas have better connection than me
>>8060893
It only requests stuff from that site when archives is having problems.
b1a121 No.8060917
>>8060910
What do you mean by problems?
c4523a No.8060919
>>8060910
>I get dc often because my internet is worse than Zimbabwe's. Their gorillas have better connection than me
Straya?
Fucking hell I hate our internet.
8f0987 No.8060920
047485 No.8060924
>>8060863
What's that? it's in the source code in those links, at the very bottom:
//top-fwz1.mail.ru/js/code.js
&
img src="//top-fwz1.mail.ru/counter?id=2825109;js=na" style="border:0;" height="1" width="1"
it looks like it's in every Archive.is page
5c0be4 No.8060932
>>8060884
So if no links work and sites fucked and "loading" forever, why would it be tracking on every archive link and innocuous stuff? I'm confused here.
45488f No.8060936
>>8058260
Just to be sure, connect to your VPN and look online for an IPV6 leak tester. Always important to know you're not leaking your real IP.
321f43 No.8060946
>>8058265
>Posting from your ISP, IP range, or country has been blocked due to abuse. [More Info]
>4chan Pass users can bypass this block. [Learn More]
Ebin.
a456e8 No.8060950
>>8060728
Just install a firewall and check the logs regularly, you seem to be on the right track asides for using Windows. If something doesn't look right investigate it. That's how I found out NoScript was contacting a server in Italy. The deeper you go the more you realize that major browsers spy on users by default.
Every URL you access in Firefox or Chrome is sent to Google under their 'Safe Browsing' initiative. There's also telemetry data to be concerned about.
>>8060731
No, it's technically possible but violates their API. They could block 8ch like they did NicoNico. Tracking where their videos get embedded and how many people see it and either watch or don't watch it is worth money to them. They're not allowing sites to embed as a public service or to promote their brand.
00985b No.8060952
>>8060917
>What do you mean by problems?
Like when it gets stuck with the spinning thing and prevents you from archiving or reading archived links. I have uMatrix so I noticed every time archive goes tits up that spinning-thing requesting scripts from henley-putnam shows up
047485 No.8060953
>>8060884
>there's no reason to post direct links, you can still use archive.org as an emergency alternative
I didn't mean posting a direct link to the original source but at least we should know what the source is before we click on an Archive.is link which means posting a broken link to the original source next to the Archive.is link is a good idea. And sometimes people here mask their shitty source / click bait website by just posting the Archive.is link.
00985b No.8060967
>>8060932
I don't know why, maybe some fallback page with leftover script? Maybe used to track how many people where trying to access it when the site goes down?
c4523a No.8060979
>>8060950
>The deeper you go the more you realize that major browsers spy on users by default.
Most OSs including free OSs are apparently backdoored.
I treat my computer use with more care nowadays. I avoid connecting wireless connectors to my desktop computers and disconnect the internet when doing something important that can't be seen. If it's extremely important and doesn't need a computer - hand-write it.
That being said, I don't really have anything of that level. yet.
>not browsing in an undisclosed location in somalia while wearing latex gloves and balaclava
e3d626 No.8060985
>>8060753
>And /pol/ tech threads are a good idea.
No they're not. All it is will be autists spurging out trying to sound smart when they dont understand a god damn thing they're saying. The dunning kruger effect here is massive. Case in point is this very thread.
0c7eab No.8060987
I always hated clicking on archive.is links, there's no fucking way of knowing what's on the other side.
0c7eab No.8060996
ISN'T THIS JUST PEOPLE ARCHIVING MALWARE/SPYWARE SITES AND LINKING IT?
c4523a No.8060998
>>8060985
>All it is will be autists spurging out trying to sound smart when they dont understand a god damn thing they're saying
Exactly.
It's where real tech nerds tear them to shreds. I take any tech knowledge inaccuracy on the chin. It really helps learning how computers and the internet works.
b1a121 No.8061003
>>8060952
>>8060950
I suggest the "Privacy Settings" addon for Firefox.
>>8060952
Haven't seen that. Only seen this https://top-fwz1.mail.ru/js/code.js
which is a shitty tracking script
The loading gif just seems to be a loading gif.
Nothing strange about it, just that it is hosted on another website
t. sysadmin
e01396 No.8061011
>>8057977
>NoScript
Not only will that not help, but it's worse.
https://liltinkerer.surge.sh/noscript.html
c4523a No.8061012
>>8060950
>Every URL you access in Firefox or Chrome is sent to Google under their 'Safe Browsing' initiative
So.. Tor is compromised?
2f0a09 No.8061015
>>8061012
Why… would you use either of those browsers over tor?
b1a121 No.8061017
>>8061012
No.
There are settings in Firefox in about:config that you can use to disable this.
Tor Browser disables it
c4523a No.8061018
>>8061003
>Nothing strange about it, just that it is hosted on another website
>hosted on another website
That sounds strange to me anon.
047485 No.8061024
>>8057875
I just checked the source code of that Archive.is page >>8053522 that OP is talking about and I don't see any henley-putnam.edu image or any Google analytics script.
Is it because I have JavaScript disabled by default?
cb13fd No.8061028
>>8057875
What do we use now?
b1a121 No.8061041
>>8061018
Go load any news website
I guarantee 5+ tracks scripts and dozens of instances of content loaded from other websites
I rest my case
b1a121 No.8061058
>>8061011
Bullshit
The code is open source
The malware thing seems to be bs as when I load up the website with a Windows computer, nothing different happens, no banners
The AdBlockPlus thing is inter fighting over competition, nothing particularly super bad about it
7c95a3 No.8061069
Does it not seem strange to anybody that archive.is offers (so far as I can tell) unlimited storage space to document virtually any requested web page, and with no visible ad support? And with how heavily we use it to archive articles, threads, and twitter posts…
c4523a No.8061070
>>8061041
>Go load any news website
>I guarantee 5+ tracks scripts and dozens of instances of content loaded from other websites
If that's correct then we have a far bigger problem than we thought. I doubt those sites simply link to a gif file. Clearly there's something in it for them - that's why they get sites to load data from their site.
Either the masses need to learn about this or it needs to be better regulated.
c4523a No.8061077
>>8061069
>Does it not seem strange to anybody that archive.is offers (so far as I can tell) unlimited storage space to document virtually any requested web page, and with no visible ad support?
Not quite, because I bet the person who started it did so with the intention of 'digger's' storing the data. Why would he want that? Because they dig into the tyranny of governments.
That said, unless the guy is wealthy - he aint doing it for free.
b1a121 No.8061080
d387e3 No.8061081
Everyone should be running NoScript at all times.
e3d626 No.8061085
>>8061070
>I think analytics is something new
>I dont understand how google got to be where it is
c4523a No.8061086
>>8061077
>That said, unless the guy is wealthy - he aint doing it for free.
I take that back, I'm not wealthy and I dig into emails for free as part of a hobby and a stupid sense of duty.
But the guy that made archive.is needs at least a half decent wage to support that site - or many donators.
00985b No.8061087
>>8061070
>If that's correct
this is what you get when you visit time dot com (there's probably even more, I have other addons blocking stuff)
c4523a No.8061093
>>8061085
>implying I think it's new
I know they've been a tyrant for a long time. Mainly because a lot of politicians are blind to what they do.
b1a121 No.8061094
>>8061070
most of is used for analytics/user data to sell to advertisers, etc
So yeah, it is a problem
Wonder why these kinds of privacy/security software are created? To stop them, but of course the average user is not aware and does not care
d387e3 No.8061097
>>8061080
Top comment explains why that's bullshit.
000000 No.8061099
b1a121 No.8061101
b1a121 No.8061111
>>8061101
Also found this:
https://news.ycombinator.com/item?id=12624000
not malware but unwanted software which takes 6 clicks from the original ad on noscript
00985b No.8061112
>>8061087
actually there are plenty more scripts but since no$script blocks most of them they don't show up on umatrix, here's cnn for example
c4523a No.8061141
>>8061094
>Wonder why these kinds of privacy/security software are created?
You mean the privacy/security software on our computers?
>>8061099
The issue is if a site requires an application to be open on the client's side.
Wouldn't that potentially render it useless?
b1a121 No.8061145
>>8061141
Yes, browser addons included
b456f8 No.8061146
>this entire thread filled with enlightened, fedora-tipping "redpills" who don't have the basic real-life skill of how to use the fucking internet
d-daddy spoonfeed me more what does this mean? f-fucking joos!
c4523a No.8061152
>>8061112
>>8061111
This is where you really need to know how these scripts are structured and how they work.
And that means studying programming and languages.
00985b No.8061154
>>8061041
btw there's an addon that helps minimizing tracking through cdns
https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/
https://github.com/Synzvato/decentraleyes
this way you don't have to connect to google and the like on 80% of sites, since most of them use cdns to keep down hosting costs
b1a121 No.8061157
>>8061152
You can already get a basic knowledge of how they work without needing programming skills
522869 No.8061158
Posted the thread on /tech/, but that board is completely compromised. Later posts in this thread that look extra shilly, that's where it's coming from. They used to just be normal autism.
>>>/tech/675465
>>8059000
>>8059064
Stop lying, kike. Go ahead, try to make a new archive, even of a twitter post.
>>8059856
>contribute to thread
>make one post telling OP to stop being a faggot
>"derailing"
>>>/reddit/
>>8060985
The only sperging is from /tech/ shills like you.
c4523a No.8061173
>>8061146
Why don't you make like a banana and fuck off?
Most of us never learnt to the necessary level in high school because boomer teachers are fucking retarded.
b1a121 No.8061177
>>8061154
I know.
I use:
uBlock Origin
DecentralEyes
NoScript
RequestPolicy Continued
Privacy Settings
Self-Destructing Cookies
Random Agent Spoofer
and sometimes uMatrix
pretty good list tbh
b456f8 No.8061181
>>8061173
So fucking teach yourself, cuck.
c4523a No.8061184
>>8061157
>You can already get a basic knowledge
That's my point. I don't think that's good enough and our education system needs another overhaul.
After we eliminate the subversion.
522869 No.8061188
>>8061173
(((b456f8))) is one of the goon shills from /tech/, filter it and move on.
b5362f No.8061189
>>8061177
>NoScript
>and sometimes uMatrix
nigger wtf are you doing
c4523a No.8061191
>>8061181
What do you think I'm here for?
Asking questions is part of learning.
I'm not just using what anons are posting, I'm looking up various sources about the programs mentioned. I find /pol/ helpful in steering the ship - but sometimes I need to check the map just in case.
c4523a No.8061212
>>8061188
I know, but sometimes replying to shills helps your own thinking. Otherwise they inadvertently condition you by ignoring what they say.
Sure, take it with a pinch of salt, but don't simply ignore it. I've had some good arguments with what seemed to be CTR believe it or not.
They stopped responding when they started to realize something though - that's conditioning for ya!
00985b No.8061215
>>8061158
/tech/ got overrun by freech and butthurt Null drones last time I checked it
>>8061177
>RequestPolicy Continued
I used to get memory leaks with that until I swapped with umatrix
b456f8 No.8061216
>>8061188
I came here from front page, lmao. Are your fee-fees being hurt?
Who am I being paid by, pray tell?
>>8061191
A free-thinking, enlightened individual such as yourself should already know this. If you don't know what XSS means, you deserve to suffer the consequences. Not like you're not already vulnerable and being tracked.
It's so funny to see you fucking retards being brought down to earth for once by the realization that no, you can't lift for shit. No, you're not that fucking smart. Sorry, most of you aren't worth more to society than a sandnigger immigrant.
b5362f No.8061222
>>8060924
here is //top-fwz1.mail.ru/js/code.js
http://pastebin.com/g8VkiXjQ
53f22e No.8061227
Question anons, was this happening way before the fibby twatter page drop, or does this coincide in anyway?
ca4a20 No.8061229
>>8060394
>The main issue though, is that they can generate new articles, put another server/another image in the tag. They'll archive it, post it here and in the time it takes us to figure out it's a new attempt, some anons will end up clicking it.
So you just block any third party connections for archive.is, right?
Swiss here, I don't care that much too, but injecting foreign stuff into my sides isn't pleasant. huehue.
There should be an extension with an attached DHT. I think that we could use the Bittorrent DHT and simply make a hash of each site snapshot and store it into the DHT. Futher, if any IT-fag reads this, look into ipfs and cjdns. IPFS especially could be used to store archive.is-like snapshots and make them available as long as needed. The problem is: All decentralized proposals are chatty. Right now, archive.is sees all, but we don't know who accesses what. IPFS over tor/cjdns works about the same, but each node has some knowledge. And if they set up huge nodes (like in tor today), any big actor can snoop on us.
c4523a No.8061245
>>8061216
>Not like you're not already vulnerable and being tracked.
My approach is try to lay low, reduce your footprint to what's practical, assume you're being tracked.
>It's so funny to see you fucking retards being brought down to earth for once by the realization that no, you can't lift for shit.
Clearly you didn't see the posts saying "tech pleb" or "tech puppy".
We know we suck. But we're becoming eager to get gud.
>No, you're not that fucking smart. Sorry, most of you aren't worth more to society than a sandnigger immigrant.
Now you're just being a meanie weenie.
ca4a20 No.8061248
>>8061184
Up to two years ago, before they analyzed who blocks what it was a safe bet to just block any content you did not like - and you weren't any more visible because of that. Any basic knowledge of how the Internet and the www works was sufficient. Now the only thing you can do is to mimic a blind person, because their setup filters A LOT by default. If you just dabble here and there, you are on a list somewhere. And if only as "doesn't like adverts/non-conformist".
b5362f No.8061257
>>8061222
upon closer inspection appears to be loading a Shockwave Flash object
b5362f No.8061261
oops accidental sage. polite bump
b456f8 No.8061264
>>8061229
>So you just block any third party connections for archive.is, right?
c4523a No.8061267
e5cfec No.8061273
>>8061229
>So you just block any third party connections
I don't really blame you guys, because this is shit a normal user doesn't need to know. It's more for the tech wizards and neckbeards that have sex with undefined procs.
But I just wanted to let you know that that sentence hurt to read.
It's okay anon, you didn't mean it. But it still hurt.
b456f8 No.8061274
>>8061245
Ah, yes, laying low by posting from your home over clearnet using google chrome.
>we're eager to become good
No. You're eager to be spoonfed, that's why you're lazing around in this thread. That's also why so many of you faggots are overweight and don't even know it.
You're far from the worst here, but even you believe your own shit.
726d3f No.8061288
Delete all archive.is page links here.The enemy is matching the IPs they hacked from the archive.is with the archive.is links posted here.
Dox to come soon.
Your reputations may be at risk!!!!
abf2e3 No.8061290
Do you have anything useful to write? Or even anything funny?
819d3e No.8061296
Got no time.
A few weeks ago I noticed archive.is redirecting to .fo
It triggered Firefox unsafe page
Archive.fo is bad bad bad
I am a very active archiver of pol threads but since then I stayed clear for the most part.
On archive.fo if you then go to archive.is it will not redirect back again.
b5362f No.8061300
>>8061267
maybe. FQDNs can be assigned to any non-CIDR IP address.
who owns these blocks 217.69.133.* (my DNS is resolving top-fwz1.mail.ru to .145 on that subnet)
e5cfec No.8061303
>>8061288
>(1)
Let me guess, tomorrow by this time, you're gonna tell us all about this new site that propped up and is a 10/10 alternative to archive.is, right?
Man, you're either a stupid, tech-illiterate CTR faggot, or you're just stupid and tech-illiterate
c4523a No.8061305
>>8061267
Wait a tick..
>>8060924
>it looks like it's in every Archive.is page
Hahahah Maybe Clinton might have difficulties taking out the site if it's backed up in Russia.
Not totally sure if that happens using that script - but it sure would be funny
>>8061274
>No. You're eager to be spoonfed, that's why you're lazing around in this thread.
>lazing around
What part of actively going to site and observing the thread is "lazing around"
Just because it's not an official source of information doesn't mean it's not a source of information.
This thread is like training wheels to me.
>You're far from the worst here, but even you believe your own shit.
My shit don't stink I'm perfect.
522869 No.8061315
>>8061296
Official explanation for .fo is something about https not working with .is for some shit reason, and something about having a backup domain if whoever owns .is is a faggot like whoever owns .today.
726d3f No.8061325
>>8061288
No
Just us a proxie like me for archive.is
I thought that a tech literate guy loke yourself would know this,so i left it assumed
522869 No.8061335
b5362f No.8061343
>>8061305
>backed up in Russia
well i just looked up 217.69.133.145 in a few different places and all seem to indicate it is Moscow, Russia and owned by an LLC.
There is no fucking way I'm going to enable Flash and load the obfuscated object in that javascript. Anyone got an air-gapped sandbox to test it out for us?
720568 No.8061344
>>8057875
>TFW I've always clicked the normal link
e3d626 No.8061363
>>8061093
>Access an IP address
>From an air-gapped machine
jesus christ why do you tards keep on using terminology you clearly have no understanding of
522869 No.8061369
>>8061363
>shilling for google this hard
45b430 No.8061377
WHAT DO WE DO ABOUT ALL THE THOUSANDS OF PAGE LINKS WE’VE ARCHIVED BUT NOW CAN’T GET THE ORIGINALS OF?
31cb85 No.8061383
>>8060710
I'm still pretty new. Do you have a link or an image about proxies/vpns/other steps that should be taken to aid safety & anonymity?
b456f8 No.8061386
>>8061383
>What part of actively going to site and observing the thread is "lazing around"
67db73 No.8061408
>>8061363
>From an air-gapped machine
Comcast air-gapped my machine when they suspended my account
c4523a No.8061412
>>8061288
>The enemy is matching the IPs they hacked from the archive.is with the archive.is links posted here.
So.. they linked a proxy IP to another proxy IP?
Sounds silly.
>>8061300
>FQDNs can be assigned to any non-CIDR IP address
Oooookay this is getting a bit out of reach for me. Cheers for the help in this thread.
>>8061343
Yep.. I probably should come back after I look some things up.
>>8061363
That wasn't me anon..
>>8061383
I used search engines to figure out Tor as it was reasonably straight forward. /tech/ has alot of guides. Go to catalog and search for 'infograph' or something. I also recommend reading a little bit about how IPs work.
b5362f No.8061413
>>8061363
>From an air-gapped machine
>jesus christ why do you tards keep on using terminology you clearly have no understanding of
if you're too retarded to figure out how to get the Shockwave Flash object onto an air-gapped machine to test you're too retarded to criticize my suggestion.
c4523a No.8061425
>>8061377
>WHAT DO WE DO ABOUT ALL THE THOUSANDS OF PAGE LINKS WE’VE ARCHIVED BUT NOW CAN’T GET THE ORIGINALS OF?
>not capping the obvious "shut it down" targets
Just use a public wifi and a crappy spare computer. There are more practical solutions if you need them anon.
That's why people physically destroy hard drives rather than "wipe them clean".
c4523a No.8061431
>>8061386
>>8061363
>miss-linked anons twice and quoted me
What the shit?
b456f8 No.8061447
>>8061431
Sorry, here's your (you)
I was just pointing out how astute your observation skills are :^)
cd770f No.8061449
>>8057875
>as an anon brought up in this thread: >>8053522
I call bullshit. Pic is screenshot of page with all of the data which it loads.
Where is first pic from OP from?
t russian, using jap VPN, IDK about IPs or browser fingerprint
0f3b1f No.8061468
>>8061425
They do that because you never wipe a hard drive clean unless you format your drives and replace every single byte with trash data. Even then, there are pointers that would allow access to some of your "removed" data. Destroying hard drive is the only way to destroy your data. Destroying it thoroughly, of course. You could probably still get a lot of intact pieces from a drive you dropped on the floor or drove a weak magnet through.
000000 No.8061473
>>8061141
>The issue is if a site requires an application to be open on the client's side.
>Wouldn't that potentially render it useless?
What do you mean?
000000 No.8061477
>>8061141
>The issue is if a site requires an application to be open on the client's side.
>Wouldn't that potentially render it useless?
What do you mean?