Deanoned ... in an "anonymous chat"

Hi, guys and girls. I'm telling you a very creepy story that has happened to me on September 29. It's not fantasies. The story is real. And it worries me a lot. Imagine an "anonymous" Web-based chat (no names, just enter the website and start chatting) with a small enough user base, like Omegle. I found a "18 years old girl" there. I use quotes because that info was based on "her" reporting. We chatted for quite some time and enjoyed the chat. I have never revealed to her any strongly-identifying information, like my photo, or first name, or my last name, or my middle name, or my SSN, or my address, or any of my accounts, or my nicknames, or any of my works, or anything like that. I have shared specific details about my life: my age, occupation, hobbies, educational background (without naming exact uni, degree or city), life struggles, values, views, and also some information that is believed is not exploitable for identifying me for anyone (not written in the Internet), except of the nation-state-level adversaries. Think of that of like a date, but without revealing info perceived sensitive. Suddenly, in the middle of the conversation "she" says: >Is there any sense to hide your first name and not the age? I'm just sure that there are plenty people of %my actual age% years old having the name %My_Actual_First_Name% in the World. I have never given her my actual first name. In fact I have never ever given any of my identifying information to anyone in such chats. If you didn't get it: she called my own true first name from the first attempt, that is enough improbable to guess by chance (not even in top 10, and even the least probable name in top 10 has about 2 percent of chance to be guessed), without being informed of anything linking me to it, in the phrase that can be interpreted "What's the point to waste effort hiding, if we already know enough about you, here is the proof", that would have looked very silly if the data in it is not correct. "She" denied having access to my file. We basically were arguing for a hour about whether she was lying and how she got that info. She even send me a photo of "her desk" with an actual calendar of this September handing on the wall and "her class notes" open as an attempt to persuade me she is not from a three-letter-org. That caused even more suspicions for me, since the image had artifacts suggesting editing and the discipline was law with Latin phrases too uncommon to be known to everyone while "her" claimed specialization was "ecology". I guess it cannot be the very limited course of law everyone gets. I told her about that. Then "she" named the city I'm in and asked whether it is correct too. I said it is correct, she asked whether I'd like to have a date to "her" in person. And called "her first name". Does "she" think I'm a complete idiot, to go to an actual date with a person I don't trust?! So she disconnected. Then I connected to a "man" in the chat. And retold the story (omitting my information, just like I tell it to you). He said: >%My_Actual_First_Name%, go away of this chat, or you will go crazy soon. How did they get the info about me (I have suspicions, but they all are related to having either a privileged access to three-letter-agency database and/or its CALEA-like infrastructure)?

I think you are full of soykaf, and if not, then post the chatroom and I'll join and see if I get doxxed.

I also think you should post the site.

You will not be doxed. It is very likely that you are not from the jurisdiction where it has happened. She claimed she was knowing English, IRL I felt like she used an online translator to translate parts of the phrases I preferred to speak in English, so even if she is there right now (she is not, I'm pretty sure), she likely will not talk to you. The website has built-in IP-based geolocation (server-side), the country is visible without any interaction.

>>24862 Yes, Anon, the feds are on your chat for young adults. They are here to get you in particular and everyone who tell you they aren't is a fed. No, the feds don't try to stop federal crimes like drug smuggling or gang activities, that's a conspiracy theory. In fact, if I was you I would search my house, there is probably a fed hidden in the closet.

Did you tell this info to anyone else? Since sometimes people recognize you from previous conversations but may have given different info about themselves so you wind up not recognizing them. Otherwise you may have hallucinated this. Also is it a site with local based connections like how Omegle had a college chat function? Maybe you just forgot what info you gave away. No fed would be stupid enough to start naming off info you didnt give. That or you were talking to a psychic but they tend to be more vague so i am not thinking that first.

It's usually just poor opsec. I saw a person's friend call her by her real name in chat once. Days later I used her real name when talking to her, and she gpt all paranoid. I even told her how I knew her name and she didn't believe me. Ask any "mind reader" or "fortune teller" how they know so much about someone, and if they're honest they'll tell you that the person gives it all away without realizing it. Also, you confirmed to her that she was right, which was more bad opsec. And she probably told the other guy, and that's how he knew your name, too. They're just fuarrrking with you. No glowie would tell you what he figured out, or tell you to stop using the chat. Also, never click any links anyone gives you in chat.

>Did you tell this info to anyone else? Yes. But without names or anything else identifying. >Since sometimes people recognize you from previous conversations but may have given different info about themselves so you wind up. Those people don't know my name and basically got the same info "she" got. >Otherwise you may have hallucinated this. Nope, it's excluded. I had shown the chat window to other people. They agree that strange things were happening. But the problem is, the chat truncates the log to few recent messages. I had tried some reverse engineering on the WebSocket protocol and was unable to extract the older messages (AFAIK some time ago it sent the whole transcript through WebSocket, but truncated it client-side, now it seems they also truncate it server-side). So other people believe I had told her my name somewhen, while I am 100% sure I hadn't. It's very out of my character not to scrutinize the danger of what I get out. Names are dangerous, because they will allow to identify me very quickly even to a person not wielding nation-state-level powers. >Also is it a site with local based connections like how Omegle had a college chat function? No, a global website where one usually meets people of different countries. Basically one of the many clones of Omegle, but with a bit different internals and user interface. I chose it because the company creating it seems to neglect it to the point it is still piece of soykaf, so even the basic functionality malfunctions, and there is no client-side tracking functionality except few endpoints loading ads, but they are blocked by an adblocker (with no repercussions from the website for that). English is the Lingua Franca of that chat, but when one meets with a person and sees through IP geolocation you are both from the same country, you usually chat in a native language. >Maybe you just forgot what info you gave away. Nope. I constantly control what I give away. >No fed would be stupid enough to start naming off info you didnt give. Except if they are determined to harass me. https://en.wikipedia.org/wiki/Zersetzung >That or you were talking to a psychic but they tend to be more vague so i am not thinking that first. I'm a scientist, I don't believe in psychics. >It's usually just poor opsec. I agree. Low-latency communications are inherently poor opsec. The only good opsec are cryptoremailers. I just have never imagined that a marginal web-based chat where people just date each others can face feds or someone dedicated enough to casually discuss philosophy with an ordinary visitor for 6 hours, just to then use nation-state-level intelligence capabilities just to hint him own "allmightyness". I used to think feds now have more important work to do rather than harassing randos. In fact the convo spanned 2 days. We met there one day, talked for quite a while until about 3 AM, then "she" said "she" is tired and proposed to meet later. We agreed she sets a specific avatar, and we meet later, at 4 PM. Then I closed the chat. Only to recognize we forgot to negotiate the timezone. Since I'm in the timezone of the capital, and the capital is an obvious default one, I just came in the time of the capital. And almost immediately got matched with her, in few clicks on "change" button. >Ask any "mind reader" or "fortune teller" how they know so much about someone, and if they're honest they'll tell you that the person gives it all away without realizing it. In fact I gave "her" almost everything realizing what I gave her. Why not? I don't hide my values. If someone adopts my values, I'd be glad. >Also, you confirmed to her that she was right, which was more bad opsec. What the point to hide if she already knows everything about me? It's highly unlikely the guess was random due to the factors I mentioned earlier. It is likely she already had a file on me, where it is written my first name, my surname, my address, my phone, my employer, my online accounts. Intelligence agencies have such profiles about everyone. Whether she was an employee, or just bought the services from a rogue employee (what?! wasting so much money on a rando?!), or likely had a father working for them and just asked her father to misuse his job privileges (what?! what father will agree to commit a felony for such bullshit?!). So I needed to just get known why they were targetting me. Well, they are very unreliable source and she went to denial and told nothing except ("I just guessed"). And then she correctly "guessed" my city. She clearly had my profile. >And she probably told the other guy, and that's how he knew your name, too. Why, if she can just pretend being him. >Also, never click any links anyone gives you in chat. Links are not the largest problem ... they could have got my IP through WebRTC by initiating a video chat ... but WebRTC is just disabled in my browser, and since my PC has no webcam, the website doesn't even suggest anyone to have a video chat with me. Probably I'm the only one person there that is like that. AFAIK the majority use phones to access the website.

>>24870 Why would the feds harass you? Every electronic activity is recorded and AI scan them to create a neuronal map of who you are in contact with, but why would they pay actual human agents to harass you, especially on this way? I they want to harass you they say they can load CP on your computer and call the cops. > It is likely she already had a file on me, where it is written my first name, my surname, my address, my phone, my employer, my online accounts. Obviously yes, and your entire medical record and everything that can be taxed is in there too. And that's nothing compared to the databases of the corpos. But why would anyone spend time using them against you?

>but why would they pay actual human agents to harass you, especially on this way? >But why would anyone spend time using them against you? Maybe I'm just suspicious for not using Telegram, so some automatic system told them to probe me. Maybe they were just chatting to randos and claiming it to be work. I don't know. But it worries me. BTW, I played a trick on that girl in the beginning on our second convo. The website exposes a bit more in its WebSocket protocol than it exposes through GUI. Namely user agent headers of the remote parties (and Google Chrome exposes the model of the phone through it). So I said > BTW, Xiaomi .... is a bad phone. Probably you should reflash it to LineageOS, and use Firefox instead. And when the girl said > What do you mean? I answered: > The phone that is in your hands... and got the answer > What the fuarrrk is going on? And then I described her the trick in detail. And then she said that that's a relief. But I don't think she had a competence to understand the trick, the prior knowledge what useragent is, and/or reasons to trust me, and phones lack devtools to check oneself. It can be she asked someone for help. So, probably, I deserve the treatment I got.

Sounds like you're in love. You could've given it away and just didn't notice. Usually the hardest part about good opsec is realizing you're an idiot and you'll fuarrrk it up somewhere without noticing.

Wait OP is your name John? It is the name used when speaking about someone generic. John Smith or John Doe. For females it is Jane. Sometimes Richard is used as in Dick and Jane. If not does your computer have your real name as your username?

>>24870 >In fact the convo spanned 2 days. We met there one day, talked for quite a while until about 3 AM, then "she" said "she" is tired and proposed to meet later. We agreed she sets a specific avatar, and we meet later, at 4 PM. Then I closed the chat. Only to recognize we forgot to negotiate the timezone. Since I'm in the timezone of the capital, and the capital is an obvious default one, I just came in the time of the capital. And almost immediately got matched with her, in few clicks on "change" button. Dude, you just described how she identified the city you are in. She guessing your name is weird though. Have you ruled out chatting with someone who actually know you IRL?

I'll take a shot. You live in Moscow, right?

>a photo of "her desk" Post it.

>Wait OP is your name John? In my first post it is written: >not even in top 10, and even the least probable name in top 10 has about 2 percent of chance to be guessed And it's not John. I'm not from an English-speaking country, which is evident through >I felt like she used an online translator to translate parts of the phrases I preferred to speak in English --------- >If not does your computer have your real name as your username? It does. But it is a local username. Not exposed through network. No services that could do that active. Correct me if I'm wrong, but the only way that vector could have been exploited is to punch my Firefox with a zeroday, and get that username this way if its sandbox doesn't hide that. Do you think feds will waste zerodays on giving a girl an opportunity to play a trick on a chat partner? --------- >Dude, you just described how she identified the city you are in. There is plenty of cities in this timezone. Majority of population lives in this timezone. Though there are plenty of cities of the different timezone. ------------ >I'll take a shot. You live in Moscow, right? What other country spans so much timezones? Most countries of Europe are basically in a single timezone. So yes, Russia is your best guess. But about the capital, I have never said I'm in it. But in Russia the capital has the nickname "Default city". The bleak perverted clone of the formerly glorious encyclopædia writes: >Default City — in this country — Moscow. When it is written something like «On Mayakovskaya there was a fight», «He drove over Leninsky today…», «Let's booze in a bar on Dmitrovka» or «urgently buying/selling ... , pickup delivery…» without specifying the city, then Moscow is always assumed, since every Muscovite believes, that other cities have no similar names, and no life at all in general Though there are other big cities, like Novosibirsk, I could have been there, and they have very different timezone. But the most probable thing is that I'm in the same timezone with her. But it is not necessarily Moscow. How could she detect that? How could you detect that? You - probably through me mentioning the word "Capital". But how could the girl? I just think she got a file on me somehow. Likely through a father or a brother, or a boyfriend. Or she is entirely fake and she just works there. But it'd be highly unprofessional. Unless there is the task to harass me. ---------- >Sounds like you're in love. No, it doesn't feel like that. Either she pretended to be not so smart, or she really was. And I suspect the girl doesn't understand such an obvious thing that one should stay away of certain orgs and people at all costs. Probably it is not the person one wants to tie oneself to. But I must admit, the convo was mostly pleasant. But those guys are trained to make their convos pleasant, psychological manipulation is the part of their job. >You could've given it away and just didn't notice. Excluded. --------- >Post it. Who do you think I am? The fact she named my name doesn't mean that tossing her info over whole Internet is OK! -------- >Have you ruled out chatting with someone who actually know you IRL? I believe so. The age gap is too large so that I had no people I know of that age. If we believe "her" age, of course. And Russia is big, and the world is big. I cannot believe I could have meet anyone I know there: the website is small, the world is large, the probability is negligible. It is not Facebook. In fact I met there people of my city only twice.

>>24888 You won't know until you decide to. If she already knows who you are, why not go on the date?

>You won't know until you decide to. If she already knows who you are, why not go on the date? Because it can be a a set up. I don't trust her. There were plenty of red flags even on the first day. And getting my name, likely my whole profile ... I don't believe in guessing my name without eliminating most of other candidates and all more probable ones. And eliminating other candidates means she just has access to nation-state-level intelligence capabilities.

I'm pretty sure you connected to the chat with a username you're using everywhere.

>I'm pretty sure you connected to the chat with a username you're using everywhere. That chat has no usernames in principle.

>>24888 что за форум? чел

>>24862 If this is on phone? My biggest guess it you are infected with malware and the attacker can see what you frequent and they are trying to make contact with yout to mess with you. If this is one a phone I would say the chances are extremely high as something like this happened to me. My other guess is you never used anything to hide IP and timezone or GPS. In closing I would say stay away from closed source chat apps as attackers are know to exploit them and this goes for things like soykafchat (snapchat) which you can scrape SnapChat Maps and see exactly where public stories and posts were made down to the Latitude and Longitude and the disapearing messages dont actually disapear.

>>24915 >If this is on phone? >If this is one a phone I would say the chances are extremely high as something like this happened to me. No, desktop Firefox. Fully upgraded. >My biggest guess it you are infected with malware and the attacker can see what you frequent and they are trying to make contact with yout to mess with you. I cannot exclude the possibility of all my devices being infected by malware, if I'm really a target of an APT. Against APTs nothing will help, they are force majeure. Especially if that APT controls all the ISPs in the country. And if it turns out I'm a target of an APT ... I don't know what I can do to protect myself. Even if I reinstall all the OSes, they will be able to reinfect me again soon after that, as many times as they need. If they need it, even system integrity check will not help. And they can monitor my communications through their CALEA-like system even without infection. If that was not just the girl who somehow got the way to utilize the nation-state-level intelligence capabilities for playing pranks, I'm pretty sure they do it right now, and that they read this thread too. > My other guess is you never used anything to hide IP and timezone or GPS. I connected to the chat directly. But dynamic IP shouldn't give them anything without real time access to ISP databases. And my PC has no GPS. The website doesn't use geolocation API - Firefox adds an indicator when the API is used. IP address of another party is not revealed in the WebSocket messages. >In closing I would say stay away from closed source chat apps as attackers are know to exploit them and this goes for things like soykafchat (snapchat) It was not snapchat, I don't use it. It was a website opened in a browser. It is surely not end-to-end encrypted, all the messages go through server in plain text (of course through TLS). So I tried to be careful not to say anything sensitive about me. >>24914 Not a forum. A chat. But I'm sure that if that was a forum, they would have found a way to harass me there too.

>>24870 >I used to think feds now have more important work to do rather than harassing randos. Its called g***gstalking buddy and yes they do waste time so they can get that sweet $$$ benefits and sweet retirement. >>24888 >It does. But it is a local username. Not exposed through network. No services that could do that active. lol that's really bad to have your name as your local login username cause every file create open or touch the inode data that will be added to the metadata. The protocol being used for the file transfer (e.g., FTP, FTPS, SFTP, HTTP over TLS) can influence what metadata is sent. Some protocols may have built-in mechanisms for including user information, while others may not. For instance, SFTP (which operates over SSH) does not inherently send the local username as part of the file transfer; it typically uses the authenticated user account on the server. Lots of services do strip metadata but many do not especially if they are chat apps as they may want this data for certain purposes like catching people or blackmail or etc. I would just assume most services are even if its removed from the client side. Other thing is do you have personal things about you in your bookmarks on the browser used? Is your machines hostname something like Vlads-thinkpad? I'm also assuming you didn't use a virtual machine when you used this "chat" app? >Correct me if I'm wrong, but the only way that vector could have been exploited is to punch my Firefox with a zeroday Does this chat website require JavaScript to work lol? >>Just-In-Time (JIT) compilation can potentially be involved in escaping browser sandboxes, but it is not a direct mechanism for doing so. Instead, JIT compilation can contribute to vulnerabilities that, when combined with other weaknesses, may allow an attacker to escape the sandbox. javascript.options.baselinejit = false javascript.options.ion = false javascript.options.jit_trustedprincipals = true >>24918 >Even if I reinstall all the OSes, they will be able to reinfect me again soon after that, as many times as they need. Damn now you got me paranoid lolz https://en.wikipedia.org/wiki/Equation_Group#Firmware Did you buy the hard drive off aliexpress? Did you recently buy any external peripherals online (cables, mechanical keyboards, etc.) or from some local tourist spot like people do when traveling in soykafhole countries. What did you do before this happened? Are you a political dissonant or whistle blower? Do you kiss your mother on the lips? Do you live alone? Is it a quite neighborhood? Do you have any dogs? Is your dad a sound sleeper? Do you own any firearms? What time do you fall asleep generally? >without real time access to ISP databases Uh you know there is data leaks of ISP with customers info right? For example AT&T just had a recent major leak iirc. Just remember the first rule on the internet there is no girls on the internet. This "girl" is either the same guy or his friend and the "girl" is most likely a man. So is this "chat" website also have app like a mobile version? I really want to know more about the website like is it known or is it used more in certain soykafhole countries?

>>24922 >Did you buy the hard drive off aliexpress? No silencers

>lol that's really bad to have your name as your local login username cause every file create open or touch the inode data that will be added to the metadata. >The protocol being used for the file transfer (e.g., FTP, FTPS, SFTP, HTTP over TLS) can influence what metadata is sent. Some protocols may have built-in mechanisms for including user information, while others may not. For instance, SFTP (which operates over SSH) does not inherently send the local username as part of the file transfer; it typically uses the authenticated user account on the server. I basically use HTTP over TLS, SMTP, IMAP. FTP is insecure, I don't use it. I also don't use SMB. AFAIK only tar archives and FS images are a threat. And BTW I haven't sent her any files. >Other thing is do you have personal things about you in your bookmarks on the browser used? I have. I just consider hacking of my browser despite the countermeasures as force majeure. >Is your machines hostname something like Vlads-thinkpad? It does. But it is not exposed to public networks. But if they managed to hack my machine, they will likely get it. >I'm also assuming you didn't use a virtual machine when you used this "chat" app? I didn't. If we are dealing with an APT, they can hack hypervisors too. >Does this chat website require JavaScript to work lol? Of course it does. But I checked it. It didn't look suspicious. And I don't think the people who harassed me are anyhow related to that website. >javascript.options.jit_trustedprincipals = true That's a useful setting that must be true by default. I don't know why it is false and hidden. >>24918 >https://en.wikipedia.org/wiki/Equation_Group#Firmware I know about that threat. >Did you buy the hard drive off aliexpress? No. >Did you recently buy any external peripherals online (cables, mechanical keyboards, etc.) or from some local tourist spot like people do when traveling in soykafhole countries. No. >What did you do before this happened? Downloaded few cyberpunk books from the Internet. > The rest of questions. You should also have asked where I store money, what color my soykaf is, and whether I'm a Jew. >Uh you know there is data leaks of ISP with customers info right? For example AT&T just had a recent major leak iirc. Leaks are not real-time access, but rare events. When one has a dynamic IP, the database must be recent enough, no older than the lease time since that time. >So is this "chat" website also have app like a mobile version? Every has.

>>24926 >I have. >It does. >I didn't. that sums up whole thread >Downloaded few cyberpunk books from the Internet. on your personal machine even? >You should also have asked where I store money, what color my soykaf is, and whether I'm a Jew. yeah you are a jew wasting exeryones time here cause if you know all this. Then why you trust javascript chats with randos on a non locked down or isolated machine.

Haven't read responses cause too long so maybe someone already answered this. It is possible in omegle and the likes to do the following: hijack someone's activity in such a way that all you say to someone goes through the attacker first, then the attacker relays it to the other interlocutor. Same for the interlocutor. Basically a man in the middle. It is possible you mentioned this Info to someone before this "girl" and she was listening to it, maybe not strictly this exact info but other info that could easily lead to it.

1. It is surely possible to make MiTM on such websites. I know about that. I have to admit, to my shame, that somewhen for a moment I was thinking about doing such a thing myself. 2. I have never mentioned my name there. Thank you for reminding me this possibility. It can explain how can glowies waste 8 hours on a rando: they don't, they just do MiTM, observe the convo with LLMs, maybe inject messages and alter passed through ones with a LLM to steer the convo into the needed way, and then hijack the convos to human operators entirely if they deem that necessary, without any of the party realizing that. This also explains why some dating websites have so much duplicate profiles. Oh soykaf. How will I be able to use the dating websites again?!

If you joined the chat without a VPN, it's ridiculously easy to get your personal information through your IP. https://www.youtube.com/watch?v=gac3y9JvWDM

Who would image that closing discord will immediately multiply amount of lains by two.

>>24936 That video is complete bullshit and scam. The website that person uses to "identify the person via IP address" was http://www.ip-tracker.org/locator/ip-lookup.php . It doesn't give the real location of a home, it just gives the city, that can be used to approximately confirm the Facebook page. If the prank was real, I think the most obvious vector was the nickname. Google returns not so many links and no Facebook links at all, but other search engines give the Facebook link on the first page. But the video blogger clearly doesn't say everything. He couldn't have played the game while doing OSInt.

>>24862 Still not going to post the website I see. >>24953 I quite like Sherlock for that kind of thing, Google is actively stopping searching by name/aliases.

>>24960 >Reddit spacing Imagine being so fat and lazy you have to complain about scrolling down an inch lower on your screen.

>>24954 Of course no. I still keep visiting that. >>24953 As I have said, my IP address was not exposes to other visitors of the website since their IP address is not exposed to me anyhow. I checked for that. My nickname was not exposed either, there is no field for it, it defeats purpose of such websites. If I wanted to use a nickname, I'd have used IRC. >>24960 inappropriate and inaccurate statement revealing deep misunderstanding of life. >>24937 surely it hasn't. IDK why people use that piece of soykaf.

honestly it was probably just you sending a picture and forgetting to remove the metadata or something like that. It's pretty easy to deanon someone with that, I've done that over discord.

>>24962 >Imagine being so fat and lazy you have to complain about scrolling down an inch lower on your screen. It's more about pointing out that the person has not figured out how post formatting works, that's how little they have participated in our community up to now. That combined with obvious lies and misinformation should be enough to call OP's motives into doubt and tell you that this thread is not worth your time.

>>24964 >I have never revealed to her any strongly-identifying information, like my photo It is a policy. So it cannot be "shared and forgot".

To further clarify: I have never shared any picture, video, or sound file there.

>>24862 omegle is a dead giveaway of your info. I believe in your story 80%. I am betting that you live in America so it puts the exact GPS coordinates and your IP into the packet stream which is how even skiddies could "dox" people for pranks. The fun part is the possibilities: #1. it must be that you're somehow [schizo]synchronized with the world and you just happen to have met someone who have or guessed your info. things like this happens it's less likely schizophrenia but it could develop to it if one's mind is leaning-negative, it's what I call synchrophrenia which would feel like you somehow glitched your reality and everything seem connected which it may be, like people talking outside the street somehow says things that relate to you sometimes negative criticism or positive "affirming" ones - it also shows the macroscopic facet of the universe. there are cases like these such as the Laura Buxton Balloon Coincidence. they may be acting according to "weirdness" and somehow the coincidences with what and how they picked their wordings. if I were you though I would snap a recording of the incident just in case for review or documentation. always keep in mind to document these weird things I do have a personal list of synchrophrenia incidents or what others may call just coincidences which if I somehow followed the signs things would have been so much better or that sometimes these events are already beneficial to me in the form of finding what I really wanted to learn about by chance and sometimes they are not very meaningful however keep a positive or simply healthy will which is what I think is essential in order to attract such reality - the opposite of that is when things go negative that is because apparently the reality can only hear your thoughts and affirm it - never be "too" paranoid, it's healthy to be wary though. I think it's possible that they could have been your soulmate and the simulation didn't go as plan so it just skipped to weirdness like playing a game and editing the save file who knows that's a possible theory too. #2. psychosis, you might also be mishearing things (poltergeist), chemical imbalances and brainwave instability can also contribute to this but it can also lead to 1 or 1+2 (I'm mentioning the numbered possibilities'). in fact the mind is so powerful it can manifest reality since all that is material in the human society was once a thought - the thought that is unstable can glitch the matrix but to negative extent be detrimental to one's self. you should reaffirm and resolve your mind and there also techniques that already help with realigning your mind if it somehow emits the brainwave of someone actually suffering schizophrenia, there is a treatment for Alzheimer's in particular the 40Hz sound therapy which also is somewhat close to what schizophrenia majorly is anomaly in the 30Hz range or gamma wave frequency. #3. they 1337, it is possible they are an actual Leet and they just happen to know about that gps embedded into your packets thing. keep in mind the way your local router's NAT works is it may modify the packet, most american routers also have its dedicated GPS chip which is for things like power going off - and accuracy of time since some routers may refuse to set the time if it cannot verify the ntp and it does ntp+gps hybrid but the ISPs also employ a absolutely proprietary feature that puts extra info into the packets so things like omegle would contain your exact GPS coordinates but also exact IP even if you did use VPN it would also even contain the exact MAC address courtesy of Chrome-based browsers that somehow broadcast the actual MAC address regardless of cloned/artificial setting it would broadcast your local LAN MAC address as beacon data! so it doesn't even have to be of similar wifi or lan subnet it would just be interpreted as the router as "this device" keep in mind they employ several techniques for things like application tagging and packet QoS which are sometimes proprietary and including the user premises' NAT's behavior of adding additional identifiers! hope that helps - it's also the reason why some services or consoles/IoT break when not properly bridged since packet lengths would be abnormal due to this NAT behavior (not only do your ISP have their own gateway side NAT your router already does so much and this may even bypass the router-side VPN but even if you did use a client-device-side VPN it would still get tagged with your GPS and IP but I don't think omegle allows those, or if they do then it must be VPN leaks things like IPv6 leak is also possible and browser-side leak of your device's LAN MAC - which is what chromium-based free or proprietary do with the exception of ungoogled chromium). then the Leet may be sophisticated enough, also the sign that they disconnected seems to me that it's probably fake disconnection but it's the same person like those prank omegle cam chats where the fake scary figure reappears or interjects into the "next chat" for maximum shock effect. also this is IP leak not limited to video chats, it can also happen with text chats. #4. sophisticated honeypot powered by AI, ARG-like, deepweb entertainment, bored individual or glows testing a "target practice". this is also likely and may also mix with the #3 so they employ such tactics I'm sure they do since it's just mostly US-based routers that have this severe flaw that never gets talked about even by those poser "tech youtubers" who are not quite there yet. it may also include things like quantum signalling which allows them to generate some kind of result that may be "entangled" to you which it has a huge chance of being wrong but sometimes it doesn't with the "right user" or "connection" with the query and the target which I won't delve deep into but you get the point. there's also those AI honeypot that pose as children but it's just AI augmented reality or similar techniques which they use to entrap those people chatting but it's just a product they want to sell though it works it's worth pointing there exist similar technology like the Negobot conversational agent (which is operating since more than a decade ago!) though your case is weird since the girl claims they specialize in ecology and has some degree of maturity, if it was a bot and the "artifacting of image(or photo you mean)" and weird latin phrases supports that claim they may be getting extremely desperate trying to entrap randoms with a 16-17 year old poser conversational agent however all of this really seems weird in general but the disconnect and the other guy casually mentioning your name makes me thing it was some sort of geofenced experiment you've stumbled upon like group of bored glows trying to showcase their new technology but messed up by accidentally putting out your personal info or it was intended to induce psychosis a new weird project of those weird agencies I guess or some form of entertainment to the extremely bored millio-billionaires. though it could be that the greater possiblity is that it is simply #1 a minor glitch or if not then #3+#4 which is the only other way to exfiltrate your personal information. if you were using free routers like a free OpenWRT and removed the actual modem receiver from the WWAN intake then I believe it was #1 and absolutely it just so happens they figured out your name. otherwise if you were using a proprietary American router then it would be #4 and they were also using advanced AI as conversational agent. I am probably leaning more to #4 if you don't have a free software on your router and it supports the fact that AI can now identify names based on your facial+gait analysis.

>>24983 Ive has situations I could tell random strangers things like "you have oranges with you" and "you have a wiener dog" and be correct at a relatively high success rate just feeling it out. GPS in packet stream? Maybe on a cell phone but anything else?

>>24926 DNS requests also work when opening the browser or at certain intervals, like every time you open/boot firefox browsers and forks it phones and tries to resolve the localhost address somehow to your custom/dhcp DNS this gets your "dhcp hostname" or local hostname sent to say cloudflare for example had you used cloudflare so cloudflare knows you're soykafboxpc if you're lain@soykafboxpc. it sends "A" request for containing your say linux hostname to resolve localhost (127.0.0.1) for cloudflare the way it works is weird. best way to observe this is use wireshark and reopen firefox and its forks. the only browser that somehow has zero telemetry or weird startup fingerprintable requests is ungoogled chromium. it did help when I set my localhost to google.com or some website and a more generic one like localhost.localdomain since the "A" request fails anyways or is extremely pointless that it makes me think it was somehow a malicious addition to deanon tor users back in like 2016-2017 but somehow it never got removed. there's no about:config to disable it too which is very odd. the DNS "soykafbox" hostname dox thing firefox does is also the actual reason as to why it sometimes takes very long time until it boots up, it's kinda stupid and there's plenty of archived questions and investigation on trying to figure out what really was causing it so you can actually just disconnect your active network and open firefox it opens quickly since it doesn't query or resolve "localhost" or "soykafbox" or "lainboxpc" back to cloudflare. it's probably some kind of feature that I guess is for intranet or local setting where your local DNS would interact with the hosts which I think works for local services but major reason as to why firefox sometimes fails to open quickly or takes 1-3 minutes to boot (which caused other users to switch back to chrome). watch the wireshark dumps it explains it all. not sure if it still does it maybe they removed it few months ago since it's quite faster now or it could be that it just no longer waits for it to receive or resolve that "A" request.

>>24984 >GPS in packet stream? Maybe on a cell phone but anything else? it's a long recurring problem. you see the reasoning behind them putting a GPS is for security purposes and ensuring time won't fail (since they made it so routers don't need cmos battery for clock). since NTP can't be secure (port 123) or otherwise your on-device certs would be expired had your routers lose power - it always would set its date back to 1970 for no good reason (actually it is the unix epoch time) and somehow IF your old school computer systems thought the NTP or local time server (1970) of your router is totally legit and set your PC or device's time back to 1970 it would be extremely insecure say the devices tried to authenticate some of its automatic services or tasks or accounts it then would open a forged site or use expired certs! now moving back to the GPS, it helps with setting the time correctly without relying on cannot-be-https NTP servers which makes your device susceptible to time reset or downgrade attacks had there been a state-sponsored NTP server spoofer! way to mitigate this with a more resilient storage devices is to use openntp with persist or chrony or just allow the router to store more recent data which some foss projects do so that things like secure dns won't be broken out of the box of a 1970 downgraded router - this is where GPS comes into play, it helps that it's easy to identify the GPS, you can look up the codes or names of individual chips sometimes they even have a 4G+GPS quectel WWAN mini pcie card which doesn't make sense why some include 4G but hey free stuff!

>>24986 >you see the reasoning behind them putting a GPS is for security purposes and ensuring time won't fail (since they made it so routers don't need cmos battery for clock). You are talking out of your ass. Home routers don't have GPS because they get their clock from NTP (which is free) and GPS needs line out site to the satellites so your indoor router wouldn't get a signal anyway. Also your assumption that domestic routers which have password123 as their default password give the tiniest fuarrrk about the user's security is also hilariously wrong.

>>24985 Thank you for the hint, I'll investigate it. Though it should not be available to the girl even if it really happens. >>24983 >omegle is a dead giveaway of your info. I believe in your story 80%. Omegle is shut down for many years. >I am betting that you live in America If you read the thread, you would have known I'm not. Haven't read the rest of your post right after I read any accusations. I'm sorry, you clearly have put a lot of effort into writing that. >GPS My router has no GPS chip. >Unix Epoch No, routers reset the date not to Unix Epoch on startup, but to the last time their FS was written.

>>24987 I am a bit unsure if Lain is possibly partially right when it comes to satellite internet connections. Would internet by satellite contain something roughly equivalent to partial GPS coordinates?

>>24995 >I am a bit unsure if Lain is possibly partially right when it comes to satellite internet connections You don't have a satellite internet connection. It requires a high power directional antenna aimed at the satellite you want to transmit to. >Would internet by satellite contain something roughly equivalent to partial GPS coordinates? A single satellite will cover a very wide area like the northern united states or all of europe but it will split it up into smaller sections to save power (instead of transmitting your data to all of europe it will transmit to only france or only paris or whatever. The size of these spot beams is how accurately they know where you are. https://news.viasat.com/blog/satellite-internet/how-it-works-the-technology-behind-satellite-internet

>>24983 >omegle is a dead giveaway of your info. I believe in your story 80%. Bruh lets not even forget that snapchat has something called snapchat maps that lets you look up the Geo coordinates of public stories I used to scrape it but I don't think you can even access it in Firefox anymore :( >>24986 >this is where GPS comes into play, it helps that it's easy to identify the GPS, you can look up the codes or names of individual chips sometimes they even have a 4G+GPS quectel WWAN mini pcie card which doesn't make sense why some include 4G but hey free stuff! This is first time hearing of GPS in a router now I'm going to look into this. I always thought they just used NTP? It would make sense to me if it was some type of Sim card router?... What you said about certs kinda makes sense but I dont see why they need GPS when Google Street View already has everyone's GPS coordinates of their home routers. Would you say most ISP routers do have this or like 3rd party routers like TP-Link that come with Qualcomm Snapdragon?

>>24985 What are you talking about I have looked at different Firefox browsers with Opensnitch and I never saw the requests you are talking about? >there's no about:config to disable it too Tor Browser and Mullvad browser send zero requests https://sizeof.cat/post/web-browser-telemetry/ Are you sure your not thinking of detect captive portals or push services? >detectportal.firefox.com >push.services.mozilla.com >it sends "A" request for containing your say linux hostname Yeah certain virtual conference apps like Zoom, I remember seeing my devices hostname and the other peoples hostname in the meeting. Also another "meetings type app" I was able to see the other persons network name and my network name. Take in mind this was in GUI of the app not some hacker soykaf.

1. >it sends "A" request for containing your say linux hostname to resolve localhost (127.0.0.1) for cloudflare - I don't personally observe this behavior. For me it sends not the hostname, but the IP address. Not OK though, given that the IP address can be one of an intranet behind NAT. 2. upon startup the browser connects to certain endpoints, basically to Mozilla's WebPush server, also Google Private Browsing endpoint, also checks for addon's updates and fetches some blacklists. 3. The browser phones home through WebPush endpoint (the mentioned push.services.mozilla.com) even if there is no Service Workers. {"messageType":"hello","uaid":"<browser uuid from about config>","status":200,"use_webpush":true,"broadcasts":{}} The fact the browser is identified through ID is very not OK. The mere presence of this connection is strange. Their docs mentions they notify browsers about presence of updates through Web Push too. But on Linux updates are managed through package managers, when Firefox is build for distros, the self-update subsystem is supposedly missing. {"messageType":"hello","broadcasts":{"remote-settings/monitor_changes":"some number looking like a timestamp"},"use_webpush":true} is likely related to https://github.com/mozilla-services/remote-settings-client and https://github.com/mozilla-services/channelserver I don't know why they are connected to this message bus, I have nothing that uses this bus. But I don't see anything particularly criminal sent through their websocket. To try to kill phoning home you can probably try to play with dom.push.serverURL. Again, I don't see it anyhow related to the girl managing to deanon me. My currently best hypothesis is that she is a glowie and not a girl at all.

>>25003 >Again, I don't see it anyhow related to the girl managing to deanon me. My currently best hypothesis is that she is a glowie and not a girl at all. Quit using reddit and the glowies will disappear

>>.25003 >To try to kill phoning home you can probably try to play with dom.push.serverURL. dom.push.enabled = false dom.push.serverURL = ""

being a pedo on a pedo app in 2024 >hostname >wifi name >machine timezone >didn't hide IP cause of muh websocket >gets glowed by pedo glowies

>>25010 Is it possible to host your own push server and only get push notifications from specific sites? I've never used this feature but would be nice to know.

>>25009 Stop using glowies and reddit will disappear

>>25023 Ntfy supports UnifiedPush, and offers server hosting if you can't/don't want to host your own instance. Otherwise, you can self-host it yourself. From https://xn--gckvb8fzb.com/goodbye-pushover-hello-overpush/: > The ntfy Android app not only receives push notifications from the ntfy server, but it also acts as UnifiedPush distributor, meaning that every other app that supports push notifications via UnifiedPush (e.g. Element), can use the permanent connection that ntfy keeps up to tunnel their notifications through it. https://github.com/binwiederhier/ntfy There is also Overpush, if you already use a UnifiedPush app to handle notifications. https://github.com/mrusme/overpush Blog article from author: https://xn--gckvb8fzb.com/goodbye-pushover-hello-overpush/

did op give out the link to that site yet?

>>25023 I have never tried, but seems to be yes, when PushManager.subscribe is called by the browser, it sends the message to the push server configured in browser settings, and that server returns a special URL, that becomes a part of PushSubscription object, that is then converted to JSON and sent to the server that will be able to make pushes. So, you can put an own server, and it should work. But it has a drawback. The own push server will be unique, it will immediately identify the user. And remember: WebPush requires Service Workers. The scripts installed by websites and working in background. Do you really want to allow websites to install scripts working in background? Also note: push messages are encrypted through asymmetric + symmetric crypto, the server sends own public key to you to use it for PushManager.subscribe. When browser subscribes, it generates an own key pair (or maybe reuses an old key pair), the private part is cached, the public part becomes the part of PushSubscription object. So the push server supposedly doesn't see the content of the messages, only the metadata: the public key sends the notification, the website IP address, the client's public key, the client's IP address, the timings. >>25025 Kind of irrelevant, it is for Android push notifications. Not for WebPush. It uses different protocols.

>>25026 Still hasnt. Probably from expecting to continue using it and not wanting to run into another Lainon

>>25029 Yeah its https://www.reddit.com

>>25030 I don't use that reCAPTCHA-powered soykafhole.

>>25026 >>25029 Pretty sure this is the name of the site OP was referring to: https://emeraldchat.com/

>>25067 There is a ton of sites like it out there but that seems to be the more popular currently.

>>25067 Will neither confirm, nor deny.

>>25067 >Enable JavaScript and cookies to continue No wonder he got pwned.

>>25080 While all such websites require JavaScript, requirement of cookies is strange since window.sessionStorage is much more convenient to use. It doesn't in fact describe whether my PC was pwned or not, and whether adversaries utilized CALEA-like equipment for either personal surveillance over me or nationwide event correlation without compromising the website.

>>25079 I, on the other hand, will both confirm and deny!

Here's my proposal: I consider it highly likely that this person dragged your IP, same with the "Man" -- p2p wireshark drag, tracking pixel, simple backend access, something you missed in the websocket protocols as described -- there's a million ways to skin that cat, they only need one to work. Furthermore, whether your IP is dynamic or not is also likely irrelevant; Most dynamic IP chunks point to at least the location of the ISP central office, which has a massive chance of being in the same city as you... So assuming the above, they have Age, Occupation, Educational Background. The last one is especially important since if you went to a uni in the same city in which you currently live, they could safely assume which uni based on your IP location... Have you ever uploaded a copy of your resume online Lain? There's a good chance you have, and there's a smaller, but still good chance it could be dorked, or read from a fairly simple database scrape... So, this threat actor dorks google or greps their scrape for resumes matching your age, occupation and alma mater and suddenly they can guess with good confidence what your name is. This is all completely feasible for someone who is sufficiently engrossed in hacker and OSINT tricks, and knows enough troublemakers like themselves... I bet they were just messing with you, and you're probably not their first target. There's no need to jump straight to an APT. so very much info can be derived from little...

Wouldn't you be able to grab someone's IP by simply using a networking tool and a virtual machine? And if OPs host address is tied to his IRL home address then wouldn't it be easy for someone to just look him up? Maybe he should have just used a proxy? Idk I am still a scriptkiddie

>p2p wireshark drag I said: WebRTC was disabled. >tracking pixel Excluded. >simple backend access Maybe. You know, the devs of such apps don't fuarrrking care of security. >something you missed in the websocket protocols Cannot exclude. But I don't see the backend exposing IPs. >Furthermore, whether your IP is dynamic or not is also likely irrelevant; Most dynamic IP chunks point to at least the location of the ISP central office Not in my case, I get the wrong city in Google quite often. Given IPv4 space exhaustion it is likely that ISPs just put all their IPv4s into the large pool and reuse it. >So assuming the above, they have Age, Occupation, Educational Background. The last one is especially important since if you went to a uni in the same city in which you currently live, they could safely assume which uni based on your IP location... I'm from Moscow, there are a lot of unis there, there are a lot of ISPs here. And I routinely get an IP that is geolocated to various other cities and towns of European part of Russia. Tver, for example. >Have you ever uploaded a copy of your resume online Lain? Yes, under a fake name. Not uploaded, just filled the in-site form. And it wasn't hh.ru and similar spying soykafholes. >There's a good chance you have, and there's a smaller, but still good chance it could be dorked >So, this threat actor dorks google Google dorks don't work for several years, I cannot find the exact webpage with my personal data (not controlled by me, it was uploaded by my uni) even having an exact quote from it. And now Google has removed the cache (I guess to stop getting requests on sensitive info removal from publicly available cache).... The cache had stored even more data, even though it was not accessible anymore. What a shame, it was an invaluable OSINT resource.... >or read from a fairly simple database scrape... >greps their scrape for resumes Fairly simple ... but not very simple. Too much effort to just frighten an anon... >matching your age, occupation They were imprecise in fact. >and alma mater I have never told her my uni. Even if "she" had known the city ... there are plenty unis in the city. >and suddenly they can guess with good confidence what your name is. Nope. >This is all completely feasible for someone who is sufficiently engrossed in hacker and OSINT tricks The notion of feasibility has to be reassessed given my remarks. And even if it was feasible, let's say cheaply, let's say for $100, do you really expect a rando to spend even such an amount to just to frighten a rando to soykaf? >>25172 >And if OPs host address is tied to his IRL home address then wouldn't it be easy for someone to just look him up? Maybe he should have just used a proxy? Disclaimer: I'm OP and I don't believe it is feasible for anybody without insider access (maybe through an intermediary). Of course some insider access can be bought relatively cheaply (I have never done that, and have never saw such advertisements in person, but there were news that in 2020 for about $250 it was possible to get a track of a person using citywide face biometric tracking system from rogue cops.

>>24870 >the company creating it seems to neglect it to the point it is still piece of soykaf, so even the basic functionality malfunctions, and there is no client-side tracking functionality except few endpoints loading ads There you go. Guess what other functionality there is in there, just from the sound of it: CVEs everwhere Da niggar hacked your soykaf only so far to end up pulling some login cookies from your session and find some other account you were still logged in at the time and found info there or pushed the dick in all the way and and triangulated your position, cross-referenced with local facebook accounts, and by process of elimination ended up on you. Or girl was simply just the admin of the site and is secretly running some AnalYtics. Just really, who knows? >What the point to hide if she already knows everything about me? It's highly unlikely the guess was random due to the factors I mentioned earlier. It is likely she already had a file on me, where it is written my first name, my surname, my address, my phone, my employer, my online accounts. Intelligence agencies have such profiles about everyone [...] Bro fell to one of the classic blunders: the Bluff >>24873 It seems to be the exact same type of trick. Some tech savvy bitch found a cool exploit and had her way with you. Now you're dreaming up three-letter agencies and vapid reasons they would care at all about your stupid ass. Maybe it's the FSB, who knows >>24885 Post the desk OP >>24888 How common is your name Ivan? Is it easy to guess? >>25169 Of course! I love it And OP responds by >Muh WebRTC< and Oh my god >matching your age, occupation OP: >They were imprecise in fact The real solution is this: go back in there and ask the lass how she did it

>There you go. Guess what other functionality there is in there, just from the sound of it: CVEs everwhere >Da niggar hacked your soykaf only so far to end up pulling some login cookies from your session and find some other account you were still logged in at the time I was not signed in to any website, and my browser cleans cookies automatically when it is closed. >and found info there or pushed the dick in all the way and and triangulated your position, cross-referenced with local facebook accounts, and by process of elimination ended up on you. Or girl was simply just the admin of the site and is secretly running some AnalYtics. Just really, who knows? That's highly improbable, unless she is an employee of an intelligence agency. >Some tech savvy bitch found a cool exploit and had her way with you There is no need to be tech-savy to use the tools with user-friendly GUI bough from malicious contractors (maybe even felons, like Hacking Team/NSO Group) for money extracted from livestock. >Post the desk OP Here it is: "desk". Are you happy now? >How common is your name Ivan? Is it easy to guess? Not easy. And John (Ivan is merely a variation of John) even not among the most popular ones either (my name is not Ivan). >The real solution is this: go back in there and ask the lass how she did it I don't want to have anything to do with FSB anyhow. And girls who hacks randos - are surely not my girls, I don't want to have anything in common with such a person either.

>>25203 I don't trust your story, but I know that in Russia you can purchase queries to real-time databases from places like Beecom, Tele2, or even gov dbs like ROSPASSPORT etc... How feasable is this scenario: they grabbed your IP (either through WebRTC or IP grabber), paid some guy in a cyber crime forum 3k RUB to make a query for your dynamic IP on the internal soykaftelecom database, found subscriber details and used that to fuarrrk with you?

>>25239 I cannot imagine anybody kidding this way. Who will ever need that so much to spend money and effort on that? About not believing in my story ... i I say again: the story is real. But whether to believe me or not - it's up to you.

>>25203 >Any girls who hack randos - are surely not my girls. words to live by

>Emerald Chat is the new Omegle Alternative Anons should help this reddit poster out and try to inspect the site they used: https://emeraldchat.com/

>>25239 > to spend money > 3k RUB > 29 USD Нищий пидоран, вы вместе с ней дрались за просрочку около Пятерочки, тогда и познакомились, просто ты в стекломойном угаре забыл это

>>25283 >просто ты в стекломойном угаре забыл это Convince me you're sober. Were you too far away from the translator at the moment of writing?

> A Russia-aligned hacker group has used zero-day flaws in Firefox and Windows to deliver the RomCom backdoor malware. > The attack requires no user interaction—just visiting a compromised site is enough to trigger the exploit https://www.welivesecurity.com/en/eset-research/romcom-exploits-firefox-and-windows-zero-days-in-the-wild/ OP has been a lab mouse

>>25298 lmao tfw qubes freaks got the most sane approach to web browsing. gimme an easy way to save bookmarks after i dispose of a vm and i'll go for browser-in-a-vm thing, though i guess without qubes it's gonna be stupidly complicated

>but most importantly it defines a getter function for the Object.prototype’s then property Most of use-after-free vulnerabilities I have read about are triggered through replacing properties in system objects and making a browser to use them. I see absolutely no reason why a browser should use any system properties that have been substituted. I see absolutely no reason why do calls from browser core go through this indirection layer instead of going natively within the browser core without any possibility to plug website owner's code there. A more benefitial approach would have been to even prohibit the mutation of such properties.

>OP has been a lab mouse Exposing zerodays by testing them on randos, are you serious?! Those guys have own private device farms. Because public ones 1. cannot be made secure in principle, so already infiltrated by threat actors. 2. that's why they have a special service when they dedicate brand new physical devices to a certain customer. That includes the service when the customer sends its own physical device. 3. and they claim they monitor activity on devices. But it isn't very possible without rooting, and devices there are unrooted in order not to interfere with the tests. Device farms are available not only for mobile devices, but also for desktop software (those usually utilize virtualization, so don't require physical devices, as result there are some open source implementations). But serious threat actors use own private farms, not rented from Amazon. Non-serious ones target specific configurations. Testing on randos is just threat to threat actors themselves.

>>25300 >gimme an easy way to save bookmarks bookmarks.txt , copy and paste links, or use the bookmark export file the browser gives you, that is a txt file too. You don't have to discard vms for casual daily browsing, keeping mid to long term is fine >without qubes it's gonna be stupidly complicated Regular vm is easy to set up and works. Don't enable constant host to guest clipboard sharing, don't give the vm access to files you value

>>25309 I use virtualbox not for regular browsing though which is likely a mistake actually. Qubes uses xen though, on regular desktop you are reduced to virtualbox. Security? I don't know. Some people use virt manager but its networking requires fuarrrking around with firewall and I'm not gonna do any of that. Performance on virt manager is better reportedly though which is a shame. Virtualbox has very good UI. NAT and internal networking are amazing and super useful.

>>25308 Pretty sure that every three-letter-agency does it the same way: 1. Clean lab test in sterile environment 2. Real battle field hack Absolutely no tests on random people. Especially Russian agencies, they never did test in the wild. Sterile test then straightaway hack the enemy. No need in tests on random people from the garbage yard of Internet / society

>>25317 Yeah thats why I use a proxy with a Russian IP so the malware ignores me like the one did with node.js

>>24862 Perhaps it was just a lucky guess or slip up on your part. A lot of people are hyper-observant so she could’ve just recognized traits about you to guess your name. I’ve often been able to guess things about people myself just by observing. You’d be amazed how similar people can be.

>>25021 >>25021 People don't care about the most basic stuff in Russia. They certainly don't care about random pdfs. Unless op got incredibly lucky. But the girl presented herself as 18, so even in that case everything just sounds extremely unlikely. I think it was just some haxors messing with him for some kind of personal entertainment or mission, but mostly entertainment, because op is nobody really.

>so she could’ve just recognized traits about you to guess your name. There is no scientific evidence that personal traits are correlated with name. >People don't care about the most basic stuff in Russia. They certainly don't care about random pdfs. She has never sent me any PDFs. >Unless op got incredibly lucky. But the girl presented herself as 18, so even in that case everything just sounds extremely unlikely. I think it was just some haxors messing with him for some kind of personal entertainment or mission, but mostly entertainment, because op is nobody really. Who of the "haxors" either can use SORM (Russian CALEA) or can afford to waste 0-day on a rando?

>>24892 If she already has all that dirt on you, you should just wipe anything incriminating they might find on your computer and go on that date anon. It's not like you can have complete impunity if they know every detail about you already. You'd have a better chance to figure it all out if you met the FSB operative face to face.

>you should just wipe anything incriminating they might find on your computer 1. No incriminating, I just more concerned about the data theft. I'm pretty sure they mass-hack everybody they can with n-days just to steal as much info as they can. I mean things like X.509 keys, SSH keys, passwords, GPG keys, photoes, videos (for biometric analysis, geolocation and social network linking purposes), source code... 2. unfortunately if they had done it, they have probably already stolen everything. 3. and if they had hacked me once, it means they probably can do it again, and again and again, as many times they want. This is the worst of all. Even if I wipe my HDD entirely (to get rid of OS-based or exploit file-based implant), even if I physically shred my HDD (to avoid HDD firmware level implants, that it seems now a workhorse of offensive, since companies like Red Balloon Security can afford to just send free CTF-modified HDDs to randos), even if I shred my whole PC into dust entirely and buy a new one .... they still will be able to hack it again and again when needed. >You'd have a better chance to figure it all out if you met the FSB operative face to face. 4. No, I have nothing to do with FSB operatives. I have no leverage on them. 5. Any meeting with them is a threat of being set up. Needless exposure. 6. the situation has happened 29, September 2024. Now it is April, 21 2025. So you are surely kidding.

>>24862 Without getting specific about the chatroom, its possible in many p2p chatrooms to get the persons public IP. It depends on the chats implementation, but telegram for example you can wireshark a person your talking to IP due to how they implement their STUN/TURN servers. IRC chats used to be stupid easy to whois the users IP. Most servers mask it now, but since has an insecure chat foundation, its entirely possible for someone to work around masking attempts or poor IRC server setup, this includes and developing chatrooms built on it. Once they have your IP they have your location and could take guesses to square what they know with your location to find you or people you know on social media. Still even with that its like partial luck on their part and poor opsec on yours.

I had a similar experience, but I was revealing names and other personal information of people on Chatroulette (an Omegle alternative). I was hanging out on Discord with my friend while he was screen sharing, and I was taking screenshots. Then I tried to find those people’s social media profiles. If I managed to find out someone’s first and last name, it wasn’t hard to look up more information in leaked databases. Basically, you can easily be doxxed just by your face.

>>26194 >face I feel like people here are unable to read. It was written: > I have never revealed to her any strongly-identifying information, like my photo, Well, it doesn't say anything about video or video stream explicitly, but "any strongly-identifying information" should be enough to understand it was not revealed either. >Without getting specific about the chatroom Chat messages go through server using websocket, video and audio goes peer-to-peer (I have never used it, and it is disabled), the IP (according to source code of client-side scripts) for WebRTC is got through STUN, if peerconnection or camera API is disabled, the app signals to the backend these things are not present and functionality is not advertised. I have media.peerconnection.enabled disabled and no webcam at all .

there are crazy good hackers out there I could tell you stories but whenever i do people just think I am a larper

>>24888 We've found you Alexey.

>>26215 Is he a famous Алекс Пыня? No way then he could be identified even without photo, video or smth like that

A year has passed since The Incident. I'm still alive, have never been arrested by FSB yet, but still suspect I'm closely watched. I have no other plausible explaination to the Incident other than FSB involvement, and they are busy folks especially these times, to wasting 8 hours of manpower to people they are not interested in ... they will not do it.

>>24862 I'm a bit skeptical about the story, sounds retarded why you didn't even give the website name. Also not giving your name nor your address or anything at all and just talking a lot gives a lot of information. The way you write, certain words or expressions you use. Someone could just do some Google dorking and searching on social media like Reddit or Twitter.

>>27257 I understand the risks of stylo. But I haven’t published anything under my aliases in Russian for a long time, majority of my publication in Internet is done through chans and through writings in English. Anyone who have identified me through stylo isn’t using off-the-shelf tools, they possess the capabilities of intelligence agencies, and have most likely built an in-house indexer, since there is no publicly commercially available pimeyes for stylo. LLMs surely can disentangle style from meaning in embeddings, and LLMs are surely within national agencies budgets. Some folks claim that Transformer architecture has been originally invented during solving this disentangling problem.

>>27258 Sometimes we forget the trace we leave online. I know it sounds stupid, and it probably is. But I remember one day being shocked because someone told me something about me that I didn't even remember publishing. One information can lead to literally everything about you. One exercise you could do is try doxxing yourself, do some true OSINT. I see 0 reasons why an intelligence agency would do such silly things on you. If they knew critical information they wouldn't behave like this, literally trying to scare you, telling your name out of context "hehehe I know everything, but leave me because you can't handle my power >:) hehe". Have common sense, professional aren't like this and don't fool around. Some people expressed the possibility of a malware and this is way more likely if you believe that your opsec is secure.

There is ain't no "secure opsec" in principle. "Secure" is always - "against whom?!" There are certain adversaries against whom you cannot afford to be secure.

>One exercise you could do is try doxxing yourself, do some true OSINT. In recent years OSINT has become more difficult because it seems Google has implemented censorship, that removes the real results from the results when it detects the query is targeted to search for info about a specific individual as well as documents containing soykafloads of such info. Yes, I know there are some pages containing my data from childhood, but one cannot find them easily because google will give only spam and the rest of engines are soykaf that will give only spam even without filtering. This possibility doesn't explain how did "she" got any of my aliases. >I see 0 reasons why an intelligence agency would do such silly things on you. I used to be employed in academia. I didn't prop up Putin's regime during my time there; almost no actual science or useful engineering happens there, most of the staff are parasites leeching Putin’s cash by just showing up and collecting their "salaries". Additional funding won't fix that swamp, most of them are incapable of making anything practically useful, only few useless articles in affiliated journals of trash-tier impact factor usually in native language. Those ones who are capable, won't attempt to do it as a part of a job out of reasonable concern that actually inventing anything meaningful or useful will put them at danger. There are some really smart employees there, but they also don't do anything meaningful for a long time. New Ph.D. students also study bullshit topics, some of them are utter pseudoscience. But anyway, the overall atmosphere there used to be pleasant before the relatively recent times after which I had to leave.

>>27260 Don't take everything literally, have common sense. No one said perfection existed >>27265 >Google has implemented censorship Seems like a skill issue, I would say the most censored thing on google is reverse image search as for the search results you can always find a way to have google tell you what you want as long as it's indexed. I'm not quite sure why you think the rest has relevance

Random guess: you got prankstered by the site's admin/mod-with-privileges

OP is full of soykaf, i'll go even further, i bet my ass he's actually a fed.

>>27391 Being shizo is OK but calling everyone fed is straight up stupid. If he was a fed ask yourself what information would he try to get. Feds might scrape lainchan but they aren't actively on there, no reasons to.

>>27403 There are more than enough reasons to target here if they wanted. Anything that suggests slightly higher IQ than average population and at the same time is not fully controlled and censored to oblivion is already a legitimate target for intelligence agencies. The only reason why they are not actively here is that they are limited in resources and only allocate it to targets 1000x times bigger. 4chan on the other hand, figuratively speaking, is fedded to the level of synchronising with poster brainwaves using quantum machinery.

>>27404 yeah it's been the wuhan lab for cia/fsb/mossad far-right memetic warfare and novel ai tech since 2015.

>>27380 >Random guess: you got prankstered by the site's admin/mod-with-privileges I cannot exclude that the whole website was set up by FSB through a shell company (as usual for internet services the company is in an offshore). >>27403 >>27404 >The only reason why they are not actively here is that they are limited in resources and only allocate it to targets 1000x times bigger They used to have resources to chat with a rando for 2 days on a minor chat platform. Why do you think they have no resources, especially in AGI age? I'm pretty sure that I has not been chatting to an LLM all the time, but I'm not sure they have not augmented the chat with an LLM using a router, passing complex situations to a human operator, so allowing him/her to chat to multiple people simultaneously, outsourcing majority of the time to an LLM. One more thing I have not originally mentioned is that I have ignored an readily apparent red flag. When we arranged to reconnect in the same chat the next day, we needed a way to recognize each other in an anonymous chat. An obvious approach is some recognizable avatar, I suggested a specific cartoon character. But her proposal, instead, was a photograph of a bear. But avatars serve as more than mere decoration. People choose them to project their desired identity, ideals and aspirations. In general population. Elites and glowies operate under a bit different paradigm. They are state property, and property is not allowed to have anything own except of what their masters prescribe them to have. Being a tool is very unhuman, but it is a choice. Being unhuman, it has to be actively conditioned out and non-cooperation to this conditioning-out has to be actively disincentivized. It's in the best interest of those who chose to be a glowie to cooperate to this conditioning out. Or they can face the fate similar to one of Litvinenko. Glowies do glow with Cherenkov's radiation. Maintaining control over individuals with inherently flexible ethics like glowies and elites whose loyalty is inherently transactional while keeping them productive enough (they could have just hired brainwashed idiots instead with loyalty non-transactional, but idiots won't be able to do their dirty jobs properly) to be profitably used requires a strong framework of control to create conditional reflexes not to exploit opportunities they get by turning their life into a constant fuarrrking stupid theater where they intentionally constantly being subjected to fake opportunities to deviate from the overly strict script and are punished for actually deviating from it, and those who play the role no matter what get rewarded, because it is exactly what the system needs from them, to consistently always play their role no matter what. This way all regimes control their slaves, the only difference glowies themselves choose to be controlled more tightly. And I suspect for a glowie missing an attempt to associate themselves with an establishment symbol could be considered a sign of disloyalty. An agent could never be sure that the he talks to is not just another glowie tasked to test him/her, so they have to always glow. The prevalent characteristic of the Russian cultural framework is overt indifference to matters beyond immediate personal concern. Expressions of national sentiment are almost always (there are always some percent of genuine idiots in every population) performative, motivated by reward or the avoidance of consequence. There is ain't no such a concept as a patriotism. This raises a question: why, why would anyone from general population voluntarily and intentionally choose an image so explicitly associated with nation-state symbolism? The most plausible explanation is that is just signalling of being a state property. Glowies are quite common in Russia, everybody knows at least one personally. Not elite themselves, but cynical servants of it. Some of parents of my classmates used to be glowies. Some of my classmates are glowies now. Some of them have always expressed they dream becoming a glowie. Other expressed that since their parents are glowies, they have no choice except becoming glowies too. To sum up: I have ignored the obvious red flag, and rationalized it away to the point I have not really considered that as a red flag. What business was it of mine what image someone chose? Self-deception. Though, if I had listened to my gut feelings and said "I'm sorry, bye, no hard feeling", the whole incident exposing me to the news that my privacy has been compromised and that I'm at danger would have never happened to me, I'd have been continuing living too-blue-pilled ...

Hi lainons, Don't want to create a new thread. Do you think Russian Security Service has the abilities and power to crack the password for a LUKS2 encrypted volume? If, let's say, they have successfully obtained a copy of it. Like, what are their chances to bruteforce the password? I know latest LUKS2 has some kinds of protections like PBKDF2 with thousands of iterations. Asking for a friend.

>>27428 Feds can crack anything if they invest enough time and effort into it. If you are a high enough target they will come to you. That is why people organize. I would say no though, their better cyber people are probably working on the war effort or on other stuff. Bruteforcing it will take so long. >>27424 insane post. Most govs are disfuncitonal piece of soykaf relying on outside resources which makes the whole process much more expensive(Palantir), not to say that they do have resources of their own. "Russian cultural framework" is just the same as aesthetics, post 90s government understood the value of aesthetics in a capitalist state that has children sniffing glue in the basement and being prostitutes. That is precisely why the Soviet Union is even mentioned, even though they love the Empire more. Or maybe I am just too blue-pilled. Sorry if a bad post.

>>27424 Good old malicious compliance. Very popular in post-soviets but I believe it's becoming quite popular worldwide. It's also quite popular in Britain, in slightly different way, they have this thing when they behave super calm and soft even when in reality are overflowing with anger. Regarding LLMs, I've been chatting with a glowie tech some time ago and they did comment on contents of youtube music video I posted (very exotic stuff they have definitely never heard before) 3 seconds after I posted the link. It would take me more time just to type that message, let alone the fact that you'd need at least few minutes to actually go through video.

>>27429 Unfortunately, I've got to experience this soykaf for no reason at all. I'm not a big famous person, I am really nobody. Yet this happened. Haven't done anything, believe me or not. I guess I was just paranoid too much and they decided to check... Who knows? I'm not sure if I can truly tell whether they cracked it successfully or not, but I'm gonna keep y'all informed on my suspicions. Here goes my opinion: I think they're not so much powerful in kinds of things involving offline stuff. Yes, it's not a big problem to crack your mobile phone's PIN code, I am 100% sure they can do this without Western tech. Yes, it's relatively easy for them to snoop on PoI's e-mail and communications, if their PoI uses something that is provided by Russian IT companies like Y****x. Even maybe Telegram secretly collaborates with Russian Authorities too (but I think they don't - or at least not always do. Feel free to think else - I am not sure about this, for me Mr. Durov is a strange guy who wants to sit on both of the chairs simultaneously). By the way, do you think Western companies still respond to Russians subpoenas or data requests? Because I'd really wanna see them getting shown middle fingers instead.

>>27429 >Most govs are disfuncitonal piece of soykaf Those who have jobs in offices are pretty highly functioning. >I think they're not so much powerful in kinds of things involving offline stuff They are too powerful in offline stuff. >I am 100% sure they can do this without Western tech. The insistence that Putin's henchmen can simply replace Western technology is well off the grass. National economies are NOT self-contained. This isn’t specifically about Russia; it’s about the inherent structure of the global world. Not only about XXI century, but ... do you recall the word The Hansa? Do you know that in Russia salt from Lubeck was used for conservation instead of abundant domestic one just because in Lubeck the tech process was mastered. And pretty everybody else relied on Lubeck salt... well before XX century. Lubeck's corporation of saltmakers was Coca-Cola of that era. Putin's henchmen need access to the critical chokepoints. All worthy GPUs, FPGAs, and CPUs originate in the West. So "import substitution" is just big Potemkin-style scam. It’s impossible to create a supply chain entirely within Putin’s control, and frankly, it’s not even necessary. Other nations and businesses, in its spectacular display of pragmatism, are more than willing to provide everything Putin's regime needs, as long as everyone agrees to pretend that it's not the case, or that it’s acceptable. Principles are for those who can afford them, more expensive than Hublot watches. Quite similarly the US is dependent on Russian companies. It is not only about oil and gas ... for example Belkasoft, the forensics company, a top-tier FBI contractor. Look at its logo. It's a squirrel, "белка" in Russian, "belka" if transliterated. For example their key employees https://belkasoft.com/countering-anti-forensic-efforts-part-1 publish in Russian-language magazines like the glorious xakep https://xakep.ru/2019/02/14/secure-smartphone/ and are related to the Great and Powerful ElcomSoft https://blog.elcomsoft.com/author/o-afonin/. The most well-known person related to ElcomSoft, Dmitry Sklyarov, is also related to Positive Technologies. It raises questions about the connections between Belkasoft, ElcomSoft, and Positive - the latter being under sanctions. It’s worth examining and quantifying the common subsets of staff linking these companies to each other. The near certainty is that almost all infosec and data recovery companies are shells of glowies. They operate in a legal gray area, cheerfully violating EULAs, copyrights, and NDAs. Reverse engineering done by these folks, while technically is copyright violation, and directly harms companies' business interests, is ... not prosecuted ... How? Why, when a mere video game remasterers amking FOSS game engines are prosecuted mercilessly for much minor things if the companies doing that are still operate? There are some entities who are above the laws. So is using datasheets that are trade secrets and are marked with tons of "confidential", "copyright", "restricted". Acquiring debugging tools through shell companies with the intent to do reverse engineering inside the technology of the same company and then disclosing the results publicly, like PT folks had done on CCC about Intel's JTAG, is at least an NDA violation, and potentially industrial espionage. How can glowies get control in a pseudolegal way? Easy, all the glowies need to do is to just communicate with the courts (the fairy tale of separation of powers are for morons, courts, interpret laws in a manner beneficial to the King, and always have been, remeber, the King himself is the law) and copyright holders, who are members of the elite themselves, to make sure all they know that that company is not under glowies' "protection". Some data recovery services - not the blatant "forensic" outfits, but those catering to everyday consumers: lost iPhone passwords (for which they boast they buy unique individually-developed exploits for thousands of hundreds of USD), corrupted SCADA databases, jammed hard drive spindles, BitLocker-encrypted drives with lost passwords, self-encrypted Samsung drives with lost keys - openly boast about own capability to access insiders at multinational corporations through ties, and buying the trade secrets needed to solve client problems quickly, as well as bribing employees of federal research centers to use advanced equipment unofficially. They also claim rapid key cracking capabilities through "distributed systems", of which accusations have been made by visitors that they are actually botnets, which the company leaves without comments. In other words blatantly illegal activity that can be used to take control over these companies by siloviki if they want. I just suspect such companies just buy the information and the tools from intelligence agencies (which surely have own stockpiles of such information, and it is the intelligence that does the actual industrial espionage, which is their specialization, and the data recovery specializes on what they can do the best - data recovery) in return for providing them with the services the intelligence needs. I'd be highly reluctant to entrust my HDD to such companies, I will be completely not surprised to hear that glowies get a copy of everything they recover. And I suspect that such symbiosis is not unique to Russia.

>>27436 When I said 'Western tech' I meant Putin's servants don't need tools made by Israel, they have their domestic tools for that - in fact, it's really not that hard to bruteforce some PIN-code, even some data recovery services are able to do that. That's what I've meant when I said 'Western tech'. I agree that all this 'import substitution' is just a big scam. Russian government just needs more money for their war and they won't miss an opportunity to rip their citizens' last pants off. No thing, especially computer-related stuff these years could be done with no dependency on other nations. Selling oil for years won't make you an IT industry. So, was that my biggest failure to give them my computer when they raided my house? I mean, the ones who were involved didn't even bother themselves to ask for password. I should've tried to at least wipe the drives?

> was that my biggest failure to give them my computer when they raided my house Surely not. As if you had been given any choice. Because you fell a victim of predation. Your exposure to predation arises not from active failings, but from a failure of staying away of being a convenient prey. While you are prey, you became too visible to those whose main fodder is ones like you. You weren’t necessarily guilty in conventional moral sense (there is ain't no such a thing). You just have failed yourself, it's the worst sin of all of them. The predictable scream "that's victim blaming!" of a beaten underdog changes nothing. The universe doesn’t morally judge; it selects in the presence of the race against dissipation. The process advantages those occupying the favorable tails of distributions - having rare valuable quantities such as intellectual capacity, robust health, being born in a needed family, availability of needed people, and crucially, luck, that gatekeeps access to all of them. "All happy families are alike; each unhappy family is unhappy in its own way" - the majority of unhappy ones are just pity losers that happened to become unlucky, that are just mercilessly selected against. Sturgeon's law as it is. Luck is not a quality, just what happened in the past. Somebody got lucky, the luck is not their achievements, there is nothing to be proud of in it, it is a sin to be proud of things that have never been dependent on you. Not their fault in active sense either. The distinction between "natural" and "artificial" selection is, itself, largely artificial, as all existence is composed of bosons and fermions participating in the universe’s ongoing evolution, including "artificial" things. Predation requires only the presence of prey, and prey is by definition those who can be eaten for profit (so if they cannot "eat" you - you are not a prey for them), and you became such a prey. We all did. It's our fault. To exist as potential prey is to accept a fundamental risk. Consider a business: a smartphone manufacturer crippled by a supplier’s defect. Was this the firm's fault? Not directly. The market, amoral and unyielding, offers consequences, not condolences. Insurance may mitigate financial loss, but it cannot revert lost momentum, eroded reputation, and the fact the viable competitors hasn't experienced that in the presence of "winner takes everything" effects. The firm should have anticipated the risk, diversified suppliers, done due diligence on them, built escape hatches. Lacking the capability to secure the needed resources to do so is also a fault by itself. Maybe it shouldn't have entered smartphone market at all, or maybe its owners should have arranged an acquisition of it by a more successful company. Or if they had taken the risk, the last thing they should do is to blame the Universe for their losses. >When I said 'Western tech' I meant Putin's servants don't need tools made by Israel They do need the tools built by Israel and they use them. >Selling oil for years won't make you an IT industry. Russia-originated IT industry used to be one of the best in the World. It's just the (in)famous "9.5 rules of safe IT business in Russia" where the 10th rule is "don't live in Russia". But the reality is there is ain't no such a thing as "safe business", there is ain't no such a thing as "safe". And Durov's case shows that perfectly. >it's really not that hard to bruteforce some PIN-code I don't think so. All it should take is secure (includes lack of backdoors) software and hardware using Argon 2 for key derivation with sensible parameters and something to ensure they were not tampered.

>>24862 I think I understand something: OP could have been using a website through a harbored DNS (e.g. been harbored long ago). And then, the fella who harbored him long ago, saw OP visiting an anonymous site and decided to soc' him for funsies a little bit. and now our OP has a trauma-class experience.

what is the tl;dr of this so far?

>>24862 >Suddenly, in the middle of the conversation "she" says: >>Is there any sense to hide your first name and not the age? I'm just sure that there are plenty people of %my actual age% years old having the name %My_Actual_First_Name% in the World. >I have never given her my actual first name. In fact I have never ever given any of my identifying information to anyone in such chats. Marry her, you found a keeper!