Someone found an exploit of archive.is to leak your ip to the fagots at henley-putnam.edu

Someone found an exploit of archive.is to leak your ip to the fagots at henley-putnam.edu

We should probably spread this link to water down his results with false positives.

archive.is/osfU4

www.henley-putnam.edu/Portals/_default/Skins/henley/images/loading.gif

Other urls found in this thread:

archive.is/7dstf
ricks-apps.com/osx/sitesucker/
archive.org/web/)
boards.Sup
realtruenews.org/single-post/2016/09/27/Inside-Correct-the-Record-Post-Debate-PLOT
twitter.com/NSFWRedditImage

Bump. Sup Forums users are being collected

what? how do you know? it's possible to display your own IP to you with scripting i believe. I'm not clicking it tho :)

Bumping for habbening

Just get normies to click it then, need to water down the results.

oh fug

Who cares. You can't do shit with an IP address.

Here's the code it runs, that gif image should certainly not be loaded from offsite.

bump

Another one I noticed people complained wouldn't load earlier today: archive.is/7dstf
They claimed it was an archive of an article behind a paywall. You can't archive paywalled articles. They got a few people. Probably lots of them around the board by now.

I've been having problems loading the archive site for hours now - anyone had that problem as well?

gif related

yeah me too wtf
is it getting ddosed by Sup Forums?

Given that Henley Putnam is a "security" university, it probably wouldn't be far off to assume that they would be gathering info to put individuals under a radical persons watchlist of somekind. You think they are trying to prepare for some kind of false flag event and try to implicate the chans as some radicalizing agent?

This gif is the tracking gif, view source and see its loading from off site. Its some cuck.edu that contracts services in online (((Counter terrorism))). They are balls deep in the feds a major recruiting center for really good goys.

Some fucking spooky shit man.

Bump

>not completely blocking google analytics

Considering that they tried to make kek a hate symbol to invalidate anyone who had used it as just a rayciss hick, they've painted anyone not liberal as a literal nazi, and especially considering they send crazy people in to rallies to start fights, burn down churches, fuck knows what else, then definitely we are about to get set up.

>google analytics
lel

This is not just google analytics mate. It's loading content directly from there site. And its a fucking security college site too. Like really they couldn't even load it from a random page somewhere or register a name that sounds like it's affiliated with archive.is. These people need to be shot for having terrible operational security if for no other reason.

Mate its not the google shit that's spooky, its the off site .gif.

>google analytics
yeah, I use NoScript and I've always had GA disabled

It uses the google analytics javascript to gather the data, it's fucking nothing, a bunch of rookies.

Tell Sup Forums. This is fuckin serious. For the less tech minded, the site is injecting the fake loading gif before your browser can request it from the real page. This causes your browser to ping Henley Putnam to get the image, adding your IP to their database.

Their's a good possibility that numerous people's information has already been collected. I'm gonna try to find a local, open source version of archive.is or related software for mac, windows, and Linux on GitHub or something. If you find any local open source alternatives please post them.

Same here

wget : check out its command line options
httrack

Your web browser, but it needs some scripting to be automated.

You should upload your mirrors to I2P, Tor, freenet or equivalent peer to peer networks.

This looks pretty cool; the interface reminds me of what archive.is looks like when doing its thing and really doesn't require much effort/using command line, which could be confusing for those not familiar or new to command line interfaces (or lack thereof). Although I'm not sure if it's open source or not, and I can't see whether or not it's free, I like it. People could then upload the cached webpage to a file sharing site to share it and use a URL shortner. Obviously, this is a lot more work than archive.is, but it's doable and worth it to prevent the potential logging of ip's.
Here it is:
ricks-apps.com/osx/sitesucker/

>local open source alternatives
is freezepage.com one of them??

Doesn't look like it. It's online and you have no control over the files of the websites that are saved. Here are some excerpts from their privacy policy (also don't think it's been updated since 2011):

>information about individual users, such as IP address, email address, number of visits, etc. is only used for inhouse analysis.
If, however, we receive complaints from people who have been deliberately harassed by our “Tell A Friend” function, we will let them know the IP address of the responsible person.
Furthermore, we reserve the right to disclose the IP address of users who have frozen pages related to illegal activities, such as hacking of other people’s home pages.

>When you first visit FreezePage, we send a “cookie” to your computer. A cookie is a small file that identifies you as a unique user. FreezePage uses cookies in order to store account information, such as your preferences (e.g. your time zone) and frozen pages.

This doesn't appear to have been updated in a while and also isn't in line with the ethics I'd want a provider of this service to stand to. I'll look,for other open source alternatives though, and possibly other websites

Internet Archive, or Archive.org, is popular for its "Wayback Machine" feature which allows you to see what a website looked like when it was cached. One the website (archive.org/web/) scroll to the bottom where it says "Save Page Now." Enter the link of a page, and it will be archived. Unfortunately, when I tried it with this thread, it gave me this message;
>Sorry. This URL has been excluded from the Wayback Machine.
This shows that it could be censored and that not all of the features that archive.is supports are supported by archive.org. SiteSucker is cool for mac though.

Bump

looks like it's working again

holyshit

Bumping again coz Jesus fuck you guys pay attention

It works normally for nearly all links and your old archives are fine and most of the time you won't notice anything and you'll be ok. But when someone uses particular links like those listed in this thread and trick you to click on them with a fake happening or whatever bait, they collect your IP address because for THAT link you're loading a gif from the uni. You're basically going down the path: Sup Forums -- Henley-Putnam uni -- archive.is

Bump

I got this a while back as well. Wondered why Archive.is seemed to not be working.

spooky shit here boys

Brump

Pay attention to this thread half chan.
>stupid niggers

Drumpfkins btfo shut this shit down

What exactly is the significance of this?

Someone is using this to track IPs of Sup Forums users. Spread the link so normies will click it and make their data collection useless.

bumping for justice

Bumping again.

CP POSTED IN THREAD WITH BAIT ARCHIVE LINK (safe to read. Image gone. Just Don't click on archive.is link)
Read this thread. Notice the deleted post? It was apparemtly a CP image but deleted by mods. And notice the archive.is bait link? Now they have child porn in poor bastards cache and their ip address.

Set up.

Nice find.
Oi! Pay attention to this.

wew lads. Bumping

this is spooky

keep digging

bump

Bump

Bump

just don't click on suspicious links in the first place, duh.

Bump, this is very important

rip ducko

Bump

Bump

>Sup Forums user identified by innocently clicking on archive link
>Warrant gets authorised coz participated in thread containing child porn
>ISP will fall over themselves to dox coz cp
>subsequent raid will find pic in cache and charges stick.
>sewnup.jpg

or you could.. ya know email the admins?

I already did.

why not do both?

must we babysit this thread for you cuckchan?
>pay attention
>do you want to be on a list?
>God forbid Killary wins and you're on a handy list of people who tried to keep her from getting elected
>mfw you ignored the warning

I have been babysitting this thread on half chan

I am really getting pissed off about this.

(((They))) are making slide threads to slide this such as "Was Lucifer the Good Guy?" with unironic links to reddit posts.

I am new to the chans and I have noticed there has been a change here.

I found other trackers and counters in invisible images.

See screenshot.

It passes the referrer site on, it logs from which site you are coming from.

In thise it tracked:
boards.Sup Forums.org/;st=1478166506586;

please, please, continue to fight this. This applies to both half and full.

I recommend link this thread from the generals here. Expecially ones that expose the clinton foundation

(((They))) tried to silence me

What the fuck is archive.is?

Bump because this is spooky and I refuse to let it be buried by Sikh-asking-for-jizya threads, niggerdick threads, or ITT WE ROLL 4 DUBBLES BRAISE GEG :DDD THIS IS TOTALLY NOT SPAM :DDD threads.

A once useful site that archives pages.

Basically, if it's on the internet, it's there forever

For everyone asking what the significance of this is, don't forget about this.

>mfw I realized CTR wasn't bluffing when they said they could ruin our lives.

Was this actually confirmed? I'm going to block archive for now but who knows how fucking long the exploit was on there...

I have warned them if they fuck my life up, I will get into polotics.

They really shouldn't want this to happen.

The Fink guy was on FEC records as pulling like 50 bucks a month, what the fuck is going on?

Foxacid related topics are fake. They were never given that software and if they were, they would have used it by now. The reported effects were simply that they would know about us, and since most if not all of us don't have any social media presence that doesn't do a lot.

>What you should be concerned about is google analytics if you don't have an adblocker, as that system actually IS collecting your information and giving you a global-cross-site ID for jews to sit there and mule over your information with.

It's already too late for me fir I know I am likely comprimised but I will bump this thread. I will not let others suffer my potentail fate.

Hokay, I guess that's bye-bye to archive.is
Damn shame though.

What about ones that do?

What's the fate of people who have a social media account?

You already signed your life away to the public you shouldn't give a shit if you are doxxed, if you do, you actually have an extra set of chromosomes

realtruenews.org/single-post/2016/09/27/Inside-Correct-the-Record-Post-Debate-PLOT

I'll cry at your funeral when you beat yourself up then shoot yourself in the back twice from 6 feet away

>Foxacid related topics are fake
source?

Also yes, google analytics is something we need to be careful of

>fucking normie past me ruinned my future me

well shit. I don't care then.

I was merely joking that I said that to CTR.

But it's a promise I made to myself.

God bless Putin for banning archive.is in Russia

Somebody simplify this for the non Sup Forums folk

copy paste form the 8 pol thread

Shit, does noone here know what "escape text" is?

EASY BREAKDOWN FOR THE TECH-ILLITERATE

Whenever you type text in a field of a website, that field may or may not be a possible vector of attack. To prevent shit like that, developers write "sanitization" code. To turn shit like "/" into some other text, like "&64" for instance.

This is because frequently, what you wrote will be posted and be part of the webpage returned to you. What would happen if you posted actual code instead of just text?

This is what we call "escape". By using using an escape character (or expression) the text you write in a form starts by declaring "all right, the text ends HERE. The rest is code" and you do all sorts of funny shit.

So what is happening here?

Whenever you archive.is something, imagine there's a fuck huge text box. And everything in the site you're archiving is automatically typed in it.

Now, someone found out that text-field doesn't have proper sanitization and is vulnerable.

So you make your site. You post something about "multiculturalism" or "Hillary killing niggers live". And then, you write a bit of code. The escape code. Followed by whatever payload you want in your attack.

For now, that payload is a simple image tag to log your IP. In the future, it might be a full blown keylogger or something worse.

It's not archive.is doing this anons although the guy running it is weird.

It's people writing sites with this shit, archiving them on purpose and linking them here.

Wouldn't surprise me if this catches on and becomes an anti-archive defense for newssites in the future.

retired security apparatus here
literally no fucks given

Yes, I'd recommend you also take the necessary precautions. Most importantly, tell people close to you that if you die in the coming months that it is not an accident.

I already told my love ones that if I were to get into politics, I will likely get killed for it. I will not disclose who, but there are a few people who will make sure to make a stink about it.

But hopefully I won't have to do that.

Getting into politics is a Samson option for me, if my lose everything, I'll make sure to bring the temple down with me.

It's best for them to leave me alone. I bet I am not the only normie here that thinks this way.

so basically it's specfic (((anons))) who archive pages are the ones doing this?

Does that mean my archieves are safe?

>google Seth Rich and shut up about it
>mfw ctrs gonna start killing you irl
ahahhahaahahahahhahahahaahhahahahahahahahahahahhahahahahahahhahhahahaahhaahhaha

Fuck. Make more threads on this, and span the British Article 50 threads. They're trying to contain and categorize us. This might lead to future legal action in more fucked countries like the UK and Somali--Germany.

And I bet it's fucking CTR doing this.

This. Bump.

Bump.

>CTR

You mean jews

Bump

Yes. They are made specifically for the job and posted in bait threads making you think you're clicking on an archived news article or whatever but instead you're connecting to a 3rd party.

Your old archives are fine. If I made one now for this thread it would be fine. It was only a limited number of them that were made specially for the chans.

The point is a think tank related to letter agencies who researches domestic terrorism is getting creative to dox us. This means they want to get intel or pwn us or use us for something nefarious to prove the narrative that the alt right are extreme and dangerous. Take precautions, don't click on dodgy links, especially when they don't make sense.

If you want to, click on that precious thread I linked before about CP and the dodgy archive URL being used together to learn the m.o. and see how others fell for it. It's still on Sup Forums, not archive.is. It is safe to open.

*previous

how do you guys, go back and view old threads is there an archive of everything so long as i know the number or only certain threads like how do we salvage slid threads.

Oh fuck that mean's I am fine then. I don't think I ever clicked an archive link in a bait thread. Not even on accident.

T b h. If I see an archive link. I immedately know it's real without clicking it.

>ITT: everything is as it should be
Enemies of the State are to be removed

I think there is but you have to talk to the 8 guys. I am not an expert on that

Bump

postan

What if someone were to just archive a Sup Forums thread?

See