Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

HF general security concerns

Hello!
Does anyone else find it strange that HF doesn't allow for proxies, VPNs, connections through TOR, or any other anonymity tools? Sure, arguably this prevents you from making multiple accounts (not really, because you could always use a dynamic IP or public wifi or your phone's connection to get new IPs) but it leaves you wiiiide open to HF being able to disclose your IP to the feds should they ask.
Given the nature of the forums, they almost definitely -are- going to ask, which makes HF a bizarrely hacker-unfriendly project. I know that personally, there have been more than a few projects I never posted about for fear of being caught.
Does anyone know why HF does this?
Op, you are dumb, end.

/Thread
Last I checked, a lot of the things being discussed are actually quite illegal(When used in the non-whitehat sense, and a lot of people are too stupid to pretend it's for whitehat purposes), and I'm quite surprised that people are pretending like there aren't. When it comes to computers, things become very illegal very quickly as far as federal guidelines are concerned, with broad undefined statements like "malicious intent".
This is especially obvious when you have people asking for (and are releasing tutorials and tools related to) account cracking, RAT deployment, and more. Sure, there are legitimate uses for some of these things, but a lot of users don't even attempt to hide their intentions. This is also obvious when you have people talking about boosting the broadcast power to operate outside of federal guidelines, and a million other things that are illegal even when practiced 'correctly'.

Also, all the posts saying "you're dumb":
No, I'm really not. I'm shocked that on an information security board of all places, someone would be called dumb or paranoid for wanting their personal information to not be visible. A bit paranoid? Perhaps. But there's nothing stupid about wanting to cover your ass, especially when it comes to activities of questionable legality.
(Jan 6, 2016 02:10 PM)The Watcher Wrote:  Wtf do you think this community is?
Do you see ISIS on the forum? Paedophiles? If feds are looking through this forum to raid ordinary kids that are learning shit that would enrage me.

In all the years HF has been up, have we seen one kids life ruined due to the fact his info was handed over by Omni? No. He says himself he takes privacy seriously and this isn't a Blackhat forum. So, if you're doing illegal shit to make yourself worth their time obviously you should be prepared to face the consequences.

HF is full of kids learning and trying new things... People should respect that. The feds would be better off scrolling through the lounge all day for the occasional twat that's decided to try and sell fullz here...

You have made me consider a new approach to a guide I am releasing soon though. WE ARE THE SOLUTION NOT THE ENEMY! 🤝

What are you talking about lmfao, do you have any idea what OPSEC is?

This is HF, Hackforums, first and foremost. Blackhat activity on the forum is disallowed, but selling of tools which ARE ILLEGAL is very common, so is the selling of guides which, again, use illegal methods. Breadcrumb trails are very easy to create, and I know for a fact that some of the shittier members try to DDOS people with their (illegal) botnets... that they bought here.

You know that MITMING dickbutt on someone's screen is a federal wiretapping crime, right?
(Jan 6, 2016 02:10 PM)The Watcher Wrote:  So, if you're doing illegal shit to make yourself worth their time obviously you should be prepared to face the consequences.

You realize that a large quantity of the posts here made by ignorant (and not so ignorant) users are actually incredibly illegal, right? Crimes become felonious very quickly when it comes to the interception of private data, which people post about with very high frequency.
Take a thread like
https://hackforums.net/showthread.php?ti...id49289700
where this person is very obviously trying to do something illegal. Do I see anything wrong with this? Of course not, this is hackforums. But it's still not legal.
Or
https://hackforums.net/showthread.php?ti...id49289612
where the host admits to hosting a botnet. Again, Illegal. HF is rife with threads like these and pretending they don't exist is foolish.
Quote:Most kids here are breaking the law one way or another at one point.
Yes, which is exactly why VPNs and another anonymity services shouldn't be banned.
(Jan 6, 2016 02:19 PM)The Watcher Wrote:  So what you're saying is all the kids selling their spreading ebooks etc should be raided and their lives fucked up? We don't know what people do elsewhere obviously, but you sound a lot like a prick right now. And if you're here for OPSec you're a prick.

The fed likes to fuck over people to make an example, being careful is just common sense. Pretending it isn't is just kind of ignorant.... being careful is acknowledging the government will do shitty things and preventing it

P.S., do you know what OPSEC is?
(Jan 6, 2016 02:26 PM)The Watcher Wrote:  Please read over what I said again.

I did read over what you said, and that's what stuck out to me. You acknowledge that much of the content posted here is indicative of crimes being committed. You admit that at least one person has been visited by the feds. And then, you tell us to trust the owner of the forum with personal information.
The fact of the matter is, when it comes to an infosec forum, privacy should be encouraged, not banned. Doubly so if users have been grabbed in the past.
(Jan 6, 2016 02:29 PM)The Watcher Wrote:  Yes, they like to make examples of people who do illegal things. Again read over what I said. No of course I don't.


I didn't tell you to trust anyone. You obviously have something to hide sir. Maybe you shouldn't be here.

You're basically saying that because arrests aren't that common, we should avoid taking precautions. Nice.

I really don't get what point you're arguing.
(Jan 6, 2016 02:30 PM)Bӏue Wrote:  No, Not at all.
So you are saying, VPN's and proxies should be unbanned (which will make multi-accounting and ban evading very easy) so that users can safely do illegal stuff on a public and most likely monitored forum?

Omni has stated many times that this isn't a blackhat forum, and he isn't going to protect us if shit gets legal. It's our responsibility to post within laws or face the consequences.

Plenty of stuff IS breaking laws though, and at the VERY least users can be easily linked to other stuff they've done elsewhere. Security is all this forum really is any more, I'm surprised so many users are so ignorant to why it is important.

(Jan 6, 2016 02:32 PM)The Watcher Wrote:  Is this Mr Ulbricht? I really don't see where you're going with this.

Ah, so you don't have a point.

You seem like the kind of person that would support SOPA.

Edit: you know something as simple as owning a steam item stealer could net you 10 years in jail, right?
(Jan 6, 2016 02:29 PM)The Watcher Wrote:  Yes, they like to make examples of people who do illegal things. Again read over what I said. No of course I don't.

Quote:Yes, they like to make examples of people who do illegal things

Quote:Most kids here are breaking the law one way or another at one point.

Bruh

Quote:You obviously have something to hide sir. Maybe you shouldn't be here.
It's not about whether or not I have something to hide. This is literally an infosec forum. That exact attitude- "do nothing wrong and you will have nothing to hide", is exactly what the infosec community is fighting against.
(Jan 6, 2016 02:36 PM)Bӏue Wrote:  Yeah, I agree that a lot of stuff here breaks laws, Like the majority of the vices section for a start...
But the thing is, A lot of people here don't break the rules and if VPN's were allowed all for the benefit of those who do wish to break laws, then that means everyone including those who don't break laws has to deal with the constant ban evaders, multi's, forum spammers and everyone else which the VPN ban is designed to protect against.

All I'm saying is, If you wanna be blackhat on a clearnet forum, then im afraid it's you who has to go the extra mile to hide yourself.

That's kinda the point though. Going out of your way to purchase a VPN IS going an extra mile (not the only one you should take, but def one of them)

I'm not personally trying to hide much with this account, and I never will on this forum, most likely. But some security is ALWAYS better than none.

PS- multi accounting is rife here. Dynamic IP's and public wifi means that will never change.

(Jan 6, 2016 02:38 PM)The Watcher Wrote:  Recently I made a suggestion to Omni to make profiles private. I think this would make people feel so much secure, although I don't think he wants to go in that direction.

Yes but in reality a judge would not look at it like that would he?
If that happened that would make them the criminals.

A judge would not look at what like what, exactly? Just asking because your post seemed kinda vague.
(Jan 6, 2016 02:42 PM)The Watcher Wrote:  Let's say a kid gets arrested. The evidence being provided in court includes his HF profile. On his HF profile he has obviously been doing some naughty things! Chasing those Counter Strike weapons, ratting people, what ever. A judge isn't going to send that 14 year old down for 10 years, trust me. They're not as bad as you think. If you're thinking like this you're being paranoid. Something has you paranoid. Maybe you're a hacker? 🤝

You're assuming that all people that get caught are 10 year olds. A lot of people here, myself included, are not minors and banking on the courts taking it easy on you is very foolish because there isn't really a precedent for that. In fact, the precedent seems to be pointing the opposite direction.
At the end of the day, with the content of this forum, it really shouldn't be left up to chance or to the supposed benevolence of some judge. Users should have the option to protect themselves, whether they be just newly learning or if they're more experienced.
(Jan 6, 2016 02:42 PM)The Watcher Wrote:  Let's say a kid gets arrested. The evidence being provided in court includes his HF profile. On his HF profile he has obviously been doing some naughty things! Chasing those Counter Strike weapons, ratting people, what ever. A judge isn't going to send that 14 year old down for 10 years, trust me. They're not as bad as you think. If you're thinking like this you're being paranoid. Something has you paranoid. Maybe you're a hacker? 🤝

maybe I'm on hackforums 🤣

http://www.tampabay.com/news/publicsafet...ay/2224827 - felony charges for a prank (stupid, but it happened)

http://www.slate.com/blogs/future_tense/...rimes.html - even more ridiculous example

I also have anecdotal evidence of hack creators being put in jail (hacks for games, aimbots, etc). People here also aren't all kids.

Ps- "Just ain't the same for hackers" ?
(Jan 6, 2016 02:56 PM)The Watcher Wrote:  They're good examples. Here's mine.
http://www.justice.gov/usao-wdla/pr/opel...king-forum
KMS is now out of custody and served little time in jail (on remand).
That's a 28 year old man that they recognised had mental issues because of the time he spent on his PC. He may have snitched his way out but it's still reality. & Dr Dre - The Watcher

Remember though, an example of the law working correctly doesn't discount previous problems where it did NOT work correctly.

People are assholes, and it's nice to have asshole insurance.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by OmniscientNov 15, 2017 08:17 PM 0 510 Nov 15, 2017 08:17 PM
Last Post: Omniscient
by TessJun 27, 2012 04:42 AM 5 341 Jun 27, 2012 04:42 AM
Last Post: Sol Yurick
by Ace6697Mar 31, 2012 08:34 PM 3 177 Mar 31, 2012 08:34 PM
Last Post: Ace6697