ip test
am pretty sure you are correct in this assesment anon
dayshift in full swing
90% bots
kek
>This weekend workfag's are in the house crowd has been very receptive to the Tripcode "Q" isn't the Real Q sauce.
tend to agree with this
I have been here all morning, kek
and
not that it really matters
but is 'webmanon' faggot in current bread tubbaks?
because it really seems like tubbaks
testing matlock for shits and giggles
>So the old known Q passwords still result in the same known trips...
okay I read this like 5 times and didnt understand what you were pointing out
>This PW ends in an exclamation point...
I see that
chek't
>Meaning the salt is the same as 2018...
wait
wait
wait
what the fuck?
the salt ROTATED when 8kun went live in 2019
everything pre-Nov 2019 salt rotation should beDIFFERENT NOW
your saying
that a now known password for one of Q's tripcode circa 2018 is RIGHT NOW resulting in the tripcode from 2018???
is that what I am reading?
>everything pre-Nov 2019 salt rotation should be DIFFERENT NOW
>your saying
>that a now known password for one of Q's tripcodes circa 2018 is RIGHT NOW resulting in the tripcode from 2018???
>Yes.
>sauce
uhhhhmmmmm anons
how the fuck is that possible
if the salt DID actually rotate in November 2019
sorry everyone
I give zero fucks
didnt even spoiler it
if your next door
you will figure it out soon enough
what are they going to do
ban another one of my IP's?
>they know we know the canary is dead and that's all that matters.
5:5 on that
still curious about this post
this should be a dead canary
and salt has been rotated since it died
so it shouldt even exist in the ether anymore
so how is THAT happening?
either someone has broken the salt crpytography so completely that they can reverse engineer the password required for any given tripcode, regardless of salt conditions
or there is a hard-coded bypass
>in other words, the site has been comped since day one. and q knew it from the start.
this makes the most sense to me
there is no such thing as a "trusted" website
>Surely that PHP is not accessible at the BO level....
I would think not
dont think we can blame that post on OSS
kek
deleted the babyfist digs bun
must have been hivemind spam
>Means the person who posted had the password Q used
no
that is an old trip
its based on an OLD salt that has been rotated away from
the password Q used to generate that tripcode with the OLD salt would result in a NEW never-before-seen tripcode now that we have NEW salt
>Why would [site admin] hard-code an old Q trip that shouldn't even be possible since the salt rotation of 2019
it seems likely this 1 post in bread poster in our current bread isNOTJcrew
and thusly
likelyNOT8kun site admin(s)
and thusly
well there are not many options beyond that other than our favorite anon
>Shouldnt this be a smoking gun
it is
>for those in QR?
starting to look like what is left there is among the 4-6%
>Did Ron actually rotate the salt, or did he just say he was going to rotate the salt?
Q got a new tripcode if I recall correctly
that can be checked easily in the drop archives
>So are you saying someone did a hardcode for the Q post in here that has the old trip code?
correct
we are saying
Either:
-
[someone] performed a hardcoded salt bypass tripcode post that displays an old Q tripcode
or
-
[someone] brute forced the new salt (circa Nov 2019) in order to generate an old Q tripcode with the current salt conditions
>or someone has q's old password
we do anon
that is how we have been testing
anonHAS THE OLD PASSWORD THAT IS SUPPOSED TO GENERATE THAT TRIP
it doesnt anymore
see: >>24087
>Nope. I tested that. The salt was rotated in 2019.
>Old Q passwords do not result in old Q trips.
if that anon is still here
they can demonstrate it again
>Who ever it is seems to be giving us a clue as to what is going on
exactly so
we wouldnt be having this conversation
or discovering the Truth of this "feature"
if it were not for that post
we have been discussing it previously, yes
but its been just another spitball on the wall
this post requires explanation
and I think as we figure out the explanation
we will get our "proof" for exactly how the fuckery was performed
I could also be literally retarded
so there is that
>Maybe CMZ is not a fan of Jim's LARP game.
it seems a distinct possibility
if anyone could have left themselves a backdoor into 8kun
its CM
you talking shit on numberfags bro?
kek gave you 17 in your post number
sit on time out and think about what you have said
and how it could affect the Q movement
dont you have better things you could be spending your time on?
Ohh fuck
I just became Jim
/sarc
bahahahahahahha
they deleted/banned you for that one post?
had anyone even replied to it?
for fucks sake
over the fucking target
##Matlock
#Matlock
>Unless all Q trips are hard coded????
Unless all Q trips are hard coded????
>Unless all Q trips are hard coded????
Unless all Q trips are hard coded????
>Unless all Q trips are hard coded????
Unless all Q trips are hard coded????
my mind just became gravy
>Oh I am so goddamned dumb
kek
its looked like 2 !! to me too
thats why my first Matlock test used two ##
>So the >>23860 is meaningless in regards to salt at this point.
kek
other than the fact they it got us to perform this little tripcode fest
but yeah
its not nearly as unique of a situation as orriginally considered
-anyone- with that list of publicly leaked passwords could have made that post
>It kinda confirms that Q's password is hardcoded(only the single ! tripcode ones)and not[secure]salt dependent though
^^^
agreed at this point?
>plus you asked for the technical def. not the realistic state
I meant in the context of tripcode generation anon
insecure salt tripcode (#): do these change with salt rotation?
we have already tested with all the past single # Q passwords, looks like NO they do not change with salt rotations
secure salt tripcode (##): do these change with salt rotation?
well, a whole bunch of anons noticed their tripcodes change with that fucky situation on friday
but, something else happeneing on friday that correlated with the salt "rotation"
OSS noticed it
I am pretty sure 8bit noticed
EVERY SINGLE ANON on 8kun's ip hash changed when the "salt rotated" on friday
I didnt take screenshots and I am bummed I didnt
but
it looked like this
I had 127 posts in the /qr/ META before friday salt rotation
I had not noticed the salt rotation yet
I made a few more posts in /qr/ META and noticed that my UID had changed in the bread
I am like, what the fuck?
I have been posting in this bread for days
and now I have new UID?
what gives?
(this is on a hardline cleanet connection)
I made like 4-5 posts under the new UID
24 hours goes by
I go back into the /qr/ META on saturday
ALL MY NEW UID POSTS ARE NOW BACK TO MY OLD 127 POST UID
I now have 132 posts under my orriginal UID
the 5-7 posts that I made with the "new" UID in that bread during the salt rotation BECAME THE OLD UID after the salt "rotated back"
so
should EVERYONES IP hash change when salt rotates?
is that standard practice?
IP hashes are generated based on the salt?
-obv
and the IP hashes CHANGED when the salt rotated?
-obv (we witnessed it)
so
IP address hasing uses the secure salt that actually" rotates?
>Q making fun of us?
that aint making fun anon
3 solid connections
17 second video (kek)
posted @ 7:54
Q drop 754 is a SEC_TEST
no, the kicker, anon?
check the tripcode in use for drop #754
!UW.yye1fxo
!UW.yye1fxo
!UW.yye1fxo
....I dont care how retarded I sounds
thats dasting
>What if CM just used custom_tripcode to setup q's tripcode.
that really wouldnt be secu....
>then salt rotation wouldnt matter. wouldnt be very secure but it would work.
...right...
>Maybe q's password is very long
kek
then why have salt in the first place?
to make people FEEL confident based on a system that is not actually in use?
>and if the salt is rotated
>(## + password) gives (!! and a different trip code) afterwards
exatly this
only ## generated !! trips and poster_id uses the secure_salt_trip
custom_tripcode based tripcode generation doesnt give a flying fuck about salt conditions
ergo
theonlyway to generate this!!Hs1Jq13jV6tripcode after the salt had been rotated is with custom_tripcode
(or brute force, but much less likely)
Board Volunteer Triple_A ?
>but with the reverse of the salt after the initial fake Q's were posted, it is no longer worth considering.
agreed
the salt rotation is one thing
and honestly
Jcrew should have ran with it
reverting the salt BACK AGAIN is the most comp'd thing in the fucking world
>Also in functions.php we can see that IP hashes are generated similarly to secure tripcodes.
thank you for tracking it ALL down
we confirmed poster_id used secure_salt_hashed
nice to also confirm the base IP hash is also generated with the secure_salt_hash
>Q !UW.yye1fxo - 9aa6f4 (1)
now that we have done the full round robin on this situation;
I am re-visiting this anon
clearly anon "anon" could have posted it
breaking it down:
its a reply to this text:
>Everything else is noise until a satisfactory explanation for how that happened
we need a satisfactory explaination
>that DOESN'T include the most obvious hardcoded fuckery.
meaning
we need to explain EVERY OTHER avenue possible
besides the obviously possible hardcoded exploit
>Don't hold you breath waiting for moar details about CM's nobody knows how he did it workaround for Q
true that
we couldnt it sauce it ourselves anyway that >was never mentioned in the drops before.
also true
everything we need is already in the drops
okay
so anon replys to that post
pretty fucking quickly (less than 3 minutes)
with NO TEXT
its literally an easter-egg post
and the easter-egg (once we figured it out) decoded (for lack of a better word) the anons post that it was a reply too
caused us to attempt to repeat what was accomplished in the easter-egg post
and we succefully did repeat it
and in so doing
not only did we "decode" the anon that was being replied too
we found theactual truthof the situation
that is some inception level easter-egg socratic methodism
and aHUGEamount of trust/faith that we would even find it
am I literally retarded here?
anyone else picking up what I am putting down?
>I got a LOT of legit question on the babyfist shit
not the typical hurr durr shit
more like
are you fucking serious?
prove it
>I post sauce
minutes of silence
they come back and actually ask questions about the sauce to try and fully understand what it shows
>asnwer technical questions about sauce
they come back still not quite understanding it with screencaps that they think refute the sauce
but not all hurr durr
like legitimate contextual refutation
post number wrong
timstamps dont line up
like
they dont WANT to believe
so they are trying to make sure the sauce is bad
>give further technical explanation about the sauce that clarifies their refutation
ohh fuck anon
looks like your right
got any more on that subject?
1,2,3,4,5,6 questions about all of the possible implication of what that sauce means now that it is confirmed true in their mind
I post the FULL babyfist bun
SHUTITDOWN.png
picrel
REEEEEEEEEEEEEEEEEEE
REEEEEEEEEEEEEEEE
like a godamned wiley coyote in there
and then
like it never even happened
onto the next bread
I think a solid bunch of anons digested the digs and saved them
>So who rotated the salt 3 hours prior to ##4954?
currently at the top of the brainstorming pile
Jim did it thinking it would lock Q out of posting with his secure_salt_trip##based password
Jim would rotate the salt without anyone noticing
kek
Q would no longer be able to post with !!Hs1Jq13jV6 using his ##password
Jim could post with !!Hs1Jq13jV6 using cutom_tripcode
thats my top line
but there are many other potential hypothesis
but I still lean towards this
>the recent Jim video where he and others mused nastily on what to do to Fred B.....pretty dismal portrait being painted of Jim's morality
I think this vidya was a huge turning of the tide
left a horribly bad taste in a LOT of peoples mouth
hillariously
a large percentage of the current Q social media movement isnt really familiar with everything that has happened with Freddy and Jim
quite a few anon actually still have a fondness for the little cripple
I would count myself as one
and 99% of the larger 'Great Awakening' movement has no fucking idea who Freddy is
so, they have literally NO IDEA why Jim would have any grievances
they saw that
and were like
what the fuck?
$15k to take a cripple guy out on a boat and "take care of him" ???
Jim
that was dumb as fuck bro
>How do you explain getting the same trip code as Q's last trip with a freshly rotated 3 hour salt?
its such a vanishingly small possibility
(brute force a brand new secure salt in 3 hours or less)
and now that we have discovered an "easy way" it could have been accomplished
...
ocams razor says it was the custom_tripcode method used to generate Q's trip then entire time Jim did it
>hivemind, many "synchronicities"
indeed anon
many such cases
before /hivemind/ was created
before I left after Jan 2021
I was fond of using the phrase
"the hive is alive"
when referring to synchronistic occurances on /qr/
happened so often
I used that phrase to name a series of meme caps that I would save as they happened
picrel
kek
I often wonder where the name hivemind was chosen from
strongly feel its another one of them synchonicities
to many, and too profound to mention at this point
>in the flow
absolutely this anon
'surfin
>salt, no matter which server it is on, is single-use when used correctly. secops 101
this
>you DO NOT save copies of the salt. ever. again, that is secops 101.
also this
I have not heard anyone attempt a good explaination (like it even matters, kek) for even HAVING the "old salt" to go back to
once a salt is burned
its done
finito
gone into the ether like so much dust in the wind
because, secops 101
going through your logic anon
once they realized what had happened
>2b) discard ALL hashes and start over, with a general announce.
is theONLYsecure option on the table
the fact that they took the dev instance and ported it over to the live as a clone of the salt is SO FUCKY that if they had -just done that- and not even faked a Q post
it would prove this place comp'd from the root
at least
this place would exist in a 100% security compromised state until they rotated all salt