swampman posted:

is twitter cia stuff? getfiscal has twitter and they're like.. communist mastermind

if you're honestly worried about anything like this, we already know from the major leaks over the past few years that the tracking systems that exist at all major internet traffic exchanges in the US already see everything anyway.

also it's trivial to exploit the extremely out of date security built into this site, and it doesn't use HTTPS anyway, so everything sent between your computer and rhizzone.net is readable and analyzable by state intelligence agencies, including your email when you signed up, and your password every time you log on.

that email address, your password, and your IP address can all be correlated with basically zero effort to discover other accounts and communications you make on other websites. everyone has a correlated identity built up of all your accounts and communications that are known, and if your account here uses the same email and/or passwords and/or computers as another account, then this account would be linked into their concept of your identity. there is basically no way around this though. all of this is essentially in nsa(/fbi/cia) google forever, and all you can do is hope no one bothers looking, or if they do, that they don't care enough.

i was writing software that did a version of this kind of snowball-like identity gathering, but with publicly available data, about companies, in 2005, so i'm guessing they're probably a little ahead of me on it.

imo it would be pointless and only serve to give people a false sense of anonymity or security if we actually tried to make this place truly secure. it's very difficult. and too late anyway.

(though maybe I'll look into encrypted passwords so at least random kids don't steal them.)

Urbandale posted:

i say require it and make exceptions on a case by case basis. its not like we need to create a set of bylaws to follow to a t

pretty much this. in fact imo the rule should be fb/twitter/blog link required unless referred by a current poster, but obv case by case exceptions can still be made

shriekingviolet posted:

I am 100% dedicated to listening carefully to the needs of this community and then just doing whatever I originally wanted to do anyways, so your feedback is valued!

Invite Brown Moses to debate Baby Huey P. Newton in Brooklyn on the topic of People's War in India: Specific Material Ways We Can Support Their Struggles.

drwhat posted:

swampman posted:

is twitter cia stuff? getfiscal has twitter and they're like.. communist mastermind

if you're honestly worried about anything like this, we already know from the major leaks over the past few years that the tracking systems that exist at all major internet traffic exchanges in the US already see everything anyway.

also it's trivial to exploit the extremely out of date security built into this site, and it doesn't use HTTPS anyway, so everything sent between your computer and rhizzone.net is readable and analyzable by state intelligence agencies, including your email when you signed up, and your password every time you log on.

that email address, your password, and your IP address can all be correlated with basically zero effort to discover other accounts and communications you make on other websites. everyone has a correlated identity built up of all your accounts and communications that are known, and if your account here uses the same email and/or passwords and/or computers as another account, then this account would be linked into their concept of your identity. there is basically no way around this though. all of this is essentially in nsa(/fbi/cia) google forever, and all you can do is hope no one bothers looking, or if they do, that they don't care enough.

i was writing software that did a version of this kind of snowball-like identity gathering, but with publicly available data, about companies, in 2005, so i'm guessing they're probably a little ahead of me on it.

imo it would be pointless and only serve to give people a false sense of anonymity or security if we actually tried to make this place truly secure. it's very difficult. and too late anyway.

(though maybe I'll look into encrypted passwords so at least random kids don't steal them.)

it's not state governments that are the concern, it's the kind of molly crabapple shit that social media invites

aerdil posted:

is it possible to implement a post per day limit until someone gets a certain amount of positive reputation? feel like thatd help out with any mustang problems

iirc stormfront puts new posters on a probationary period until they make 3 good posts. however, i think its unfair to require something of new posters that we couldn't accomplish ourselves.

swampman posted:

That's not a hard standard to implement in connection to post rep... It's not hard for a magic post to get like 8 votes, but also 8 voters isnt like, supermajority of the forum..
Yet

I was thinking about this and was curious:

118 users have logged in in the last 30 days
252 users have logged in in the past year
37 of those have never posted

739 users have ever posted

7238 users are registered

scrolling through it looks like some of the (let's estimate) 6000 fake accounts are actually just spammers and not mustangs, but it's hard to tell the difference.

maybe after we get the registration/security thing sorted out a little better we can just lock out the 6,986 users that haven't logged in in the past year. if any of them come back they can make a new account or ask to have it unlocked.