4Chan was hacked and has been down for 4 days

(pcworld.com)

11 points | by Magi604 6 hours ago

7 comments

  • jmclnx 6 hours ago
    >According to BleepingComputer, the attack was made possible by 4chan’s extremely outdated version of PHP from 2016

    Interesting, you would think the 4chan people would know better. My guess they are gone for good, not that is a huge loss.

    • clipsy 1 hour ago
      > you would think the 4chan people would know better

      I would, in fact, not.

    • captn3m0 6 hours ago
      https://news.ycombinator.com/item?id=43698267 Says it was a validation bug that let poscript files be processed by Ghostscript assuming they were PDFs.
    • ValveFan6969 5 hours ago
      Uncensored speech scares you like that, huh?
      • thomassmith65 3 hours ago
        Uncensored speech didn't scare me 25 years ago. It does now. Maybe it's old age that changed my mind; maybe it's living in a dystopia.
      • quickslowdown 5 hours ago
        What a mature response that invites further discussion.
  • IlikeKitties 6 hours ago
    > Be me

    > Run Image Board

    > Never update dependencies

    > Get pwned by a 12yo exploit

    > Jannies use real name gmail adresses

    > Board down for days

    Oh the lack of humanity

    • Magi604 5 hours ago
      Aside from 4Chan offshoots, I wonder if the "green text" format of posting messages is used anywhere else.
      • IlikeKitties 5 hours ago
        Afaik only in reference to green texts, i.e. /r/greentexts
        • Magi604 5 hours ago
          That's strange to me. It's a pretty unique and interesting way of posting messages. You would think it would have been adopted by one of the many other platforms out there.
  • comrade1234 3 hours ago
    I don’t understand why they can’t just put up a simple landing page. It makes me wonder how bad it was - like the server was completely nuked.

    But as long as there is money to be made it will come back.

  • shortrounddev2 6 hours ago
    I assume they're rewriting the site from scratch since their source was leaked. A common entry level /g/wdg/ exercise is to write your own 4chan clone, so perhaps they could just find an open source option available
    • ranger_danger 6 hours ago
      They said it depended on whether or not the janitors stuck around.

      https://0x0.st/8O16.png

      • poincaredisk 6 hours ago
        "Comprehensive legal action", sure. They need to find the offenders first.

        If I was a janitor I would seek legal action, but against the site owners. Not updating their website (that every script kiddie this century would love to hack) for 13 years is clearly a gross negligence.

        • majorchord 5 hours ago
          > clearly a gross negligence

          If we can't prove this for billion dollar corporations that leak nationwide user data, I don't see how a judge will find 4chan grossly negligent.

          Typically you need to show a "conscious and deliberate disregard" for the rights or safety of others, for it to be considered gross negligence. We could argue six ways to Sunday whether or not that's the case, but the only opinion that matters legally is a judge's.

      • shortrounddev2 5 hours ago
        They're incapable of moderating the site because they're afraid they'll recruit moderators who abuse their power? This is true of literally any community and you can audit mod logs or remove the ability to delete entire threads (just posts). It seems like their technical issues are turning into community management issues
        • ranger_danger 5 hours ago
          They have a legal obligation to moderate content that is against US law and probably against their own rules if they want to keep Section 230 protections. And everyone knows they have a problem with very frequent rule-breaking posts and large bots posting such content.

          If there's not enough trustworthy janitors right from the start, it's increasingly likely they could get in trouble too quickly. I think that's what they're worried about.

  • underseacables 3 hours ago
    How could you tell?
  • ranger_danger 6 hours ago
    Previous discussion (971 comments): https://news.ycombinator.com/item?id=43691334