• All races, religions, ethnicities, gay/straight, CIS/Trans, Gender-fluid/Gender-static, Neurodiverse. We don't care. If you can swing with us: You are one of us.

    Disclaimer: Opinions expressed on this forum belong solely to the individual and do not reflect an official postition by Onionfarms.

KF Speculation 🤔 The end of kiwifarms

Parody Threads related to Kiwifarms Satire and speculation threads related to Null or Kiwifarms go here.
Oh yeah, and to add on my earlier post, Null and certain users propping the site up as "the last bastion of free speech" just rubs me the wrong way. Like, damn bro, this place isn't some big holy cause for the masses. This place was supposed to be a goofy and edgy forum where people talk about weirdos they found online.
There are plenty of other sites like Kiwifarms that does the same stuff, they're just smaller. So like...it's not like what Kiwifarms does will go away. If the site just went down forever one day with no way to get it back up, it's not like stuff like lolcow threads and archiving would stop, it'd just mean the users would have to post somewhere else and Null would have to try something else I guess.
This.

Now that Kiwfarms is seen as the stalking and harrasing website no one likes, everyone wants to pretend it was actually about free speech AgAiNSt the CAtheDRal and SjWS. Literal copium.

A month ago, before Keffals, everyone was like " I dont care about about values or politics as long as cows amuse me"

Come on.
 
Last edited:
they never really stopped its just josh has been able to get a step ahead of them before they catch up with him again lol
ChiefBadAfricanjacana-size_restricted-3990221001.gif
 
Already had 4 of the 7 weed vapes, saving last three for 4:20am or latter if I fall asleep. Good stuff, Cocoa Bomba 22.6% thc probably 50/50 hybrid. It's dreamy and happy, it can give me energy but can in certain situations put me to sleep.
cool
 
This is a dragon Josh may not be able to slay. And they have come for here as well. Assuming Keffals kills Kiwi Farms, Onion Farms is his next target. We are running out of places to speak, this isn't good for any of us.
OnionFarms doesn't have even 0.1% the reputation KF has. Lucas was invited here by Kengle to present his side of the story and interact with posters here who may be able to fact check some of his claims. He declined. The mere fact that a lot of people here refer to him as a Him and the mere fact that a lot of people here use less than kind terms to describe him has officially nothing to do with his status as a "trans-woman"; it has everything to do with the disgusting content of his character that no amount of "respect muh" can overcome. I don't respect him and I won't give him the dignity of playing pretend with him. So he can try to come after us, it would be a disastrous move for his image and reputation if he did.
 
At this point, I'd probably have to create a new account, if he ever reopens non invite registration, but I do wonder if it's really worth it. Josh not allowing users to delete accounts really does not sit well with me. On one hand, I sort of appreciate his turbo autistic determination to keep the site going, but his "customer service " skills blow barrels and barrels of chimps.
Requiring all users to do a password reset, with email, was the last straw for me. It's left a bad taste in my mouth that he could do this once; and so he could do it again. And only removing all email functionality from the site could mitigate my concerns with going back at this point.

The session-stealing attack did not even require such drastic action. All he had to do was log out all active sessions, and then require all users to pick a new password at login. Adding email to the mix just took out half the user accounts.

Taking out half the user accounts, and keeping registration closed, is 100% certain to cause the site to decline.
 
The whole account thing was stupid.

But, to be fair, he will need o stall registrations as much as possible. Likely they already have plans to cusse trouble or attempt to discredit the farms even more with false flags,
 
The whole account thing was stupid.

But, to be fair, he will need o stall registrations as much as possible. Likely they already have plans to cusse trouble or attempt to discredit the farms even more with false flags,
I'm shocked he doesn't even doxxed the false flaggers that come to his site given how he lets those idiots get away with dragging his name in the mud
 
Likely they already have plans to cusse trouble or attempt to discredit the farms even more with false flags,
Then the cows just make fake screencapps like they're already done a couple times in recent history.

At a certain point the site needs to open registrations. They have less users logged in right now (~600) than they did when they were Tor-only a couple weeks ago. (~900)
 
Requiring all users to do a password reset, with email, was the last straw for me. It's left a bad taste in my mouth that he could do this once; and so he could do it again. And only removing all email functionality from the site could mitigate my concerns with going back at this point.

The session-stealing attack did not even require such drastic action. All he had to do was log out all active sessions, and then require all users to pick a new password at login. Adding email to the mix just took out half the user accounts.

Taking out half the user accounts, and keeping registration closed, is 100% certain to cause the site to decline.
XenForo encrypts password information. Not only is password information inaccessible completely from the control panel, but even IF they had access to the physical database (which they didn't) passwords are one-way encrypted. They can't be decrypted. It would make sense for Josh to require a password reset for staff members because if I were going to break into KF I'd change the passwords on the janny accounts and screencap their PMs and whatnot; but if that happened I suspect we'd already know it had happened because leaks would have already taken place, but they haven't.

Josh likes to exaggerate everything but this exaggeration is flat out retarded. It makes negative sense. Josh himself said that the logs showed they tried to export the user data which are user settings/preferences, email addresses, IP logs and that is all.
 
XenForo encrypts password information. Not only is password information inaccessible completely from the control panel, but even IF they had access to the physical database (which they didn't) passwords are one-way encrypted. They can't be decrypted. It would make sense for Josh to require a password reset for staff members because if I were going to break into KF I'd change the passwords on the janny accounts and screencap their PMs and whatnot; but if that happened I suspect we'd already know it had happened because leaks would have already taken place, but they haven't.

Josh likes to exaggerate everything but this exaggeration is flat out retarded. It makes negative sense. Josh himself said that the logs showed they tried to export the user data which are user settings/preferences, email addresses, IP logs and that is all.
Oh yeah, I know quite well. I host a few sites.

I'm assuming it's a one way hash, which in this usage case is actually a step better than encryption, as there is no actual key to decrypt it, it's one-way. (This is how we store them in PHPBB, and how nearly every site does now)

You can brute force hashes, but there is no one decryption key; you'd have to try every combination, one by one. And with a long, complex password there's no point in even trying.
 
Oh yeah, I know quite well. I host a few sites.

I'm assuming it's a one way hash, which in this usage case is actually a step better than encryption, as there is no actual key to decrypt it, it's one-way. (This is how we store them in PHPBB, and how nearly every site does now)

You can brute force hashes, but there is no one decryption key; you'd have to try every combination, one by one. And with a long, complex password there's no point in even trying.
Yeah that's what I meant, a one-way hash and that's exactly right there's no key; so it makes no sense for Josh to force users to email reset their accounts and I strongly suspect that his decision is rooted in the fact that he doesn't know how to set up a password reset prompt upon login
 
Back
Top Bottom