Kiwifarms Gossip & Yarring Kiwifarms Down a Lot

[The Gays From LA]

I remember @kiwifarmske was posting a lot of updates while KF was down during #DropKiwiFarms:

Malicious false bar complaints against one of KF's lawyers, Nick Rekieta:
Frivolous Complaints and Frivolous Complainants ...
In the Matter of the Complaints against Nicholas R. Rekieta, a Minnesota Attorney, Registration No. 0397061.
Complainants @GayestFesh @GinroDino @keffals
@Esqueer_

https://twitter.com/x/status/1588064204711493634

In this video, Nick Rekieta talks about these frivolous complaints and how @keffals and @Esqueer_ convinced frivolous complainants including @GayestFesh and @GinroDino to attack him according to baseless allegations.

https://twitter.com/x/status/1588247769139273728

She eventually migrated to @kiwifarmsreview

https://twitter.com/kiwifarmsreview/with_replies

But she hasn't tweeted anything out about the new downtime. I hope she can log back into this account and start posting updates during the downtime again.

I thought the entire point of hosting a website on the "dark web" with a .onion address was that it decentralizes access to it and so the site cannot be taken down this easily.

No. The purpose of Tor is to anonymize information exchange between a client and a server. Tor doesn't decentralize the client or the server themselves, but the path that the information passing through the internet takes to get from one end of the communication to the other. The Tor network itself, in other words the conglomeration of onion routers through which information requests pass from the client to a server, that is semi-decentralized. Not the .onion sites themselves:

Are .onion sites decentralized?

Basically - no: the way you're accessing them is decentralized, but the sites are quite centralized to the very HS server serving them.

Are .onion sites decentralized?

Blockchain technology has given rise to something called "decentralized domains" like .crypto that cannot be censored, nor rented (in the case of namebase.io), unlike DNS domains like .co...

tor.stackexchange.com

When a website provides a .onion variant of itself like KF does, it uses Tor's hidden services to hide its location from the end user. That doesn't mean the web server itself is decentralized. The .onion variant is presumably still on a single server somewhere, perhaps even the same server as the clearnet site. Also, I know from the comments in the TG thread and during #DropKiwiFarms that a lot of Kiwis don't actually use the .onion address (because it's long and having to copy-paste it all the time is cumbersome) but merely access the clearnet site (.net) through the Tor network.

Elaine was saying that the KF .PHP service is still up

IIRC, she performed an NMAP port scan on a DNS server (IP address 193.142.147.186) and discovered that the SSH (Secure Shell) port was still listening.

There's nothing unusual about that. This is what a security minded network engineer would do while his site is under attack: shut down all other services but the most necessary ones, like SSH.

 

[The Gays From LA]

OK, I am seeing way too many people being easily impressed by Elaine... simply looking up a domain in her browser. Zoomers can't possibly be this ignorant of the internet. So, let me explain to you what you're actually seeing during this part of Elaine's Livestream:

Elaine is on a website called dnsdumpster.com: "DNSdumpster.com is a FREE domain research tool that can discover hosts related to a domain."

The page that is displayed on her browser is this:

You can go and have a look at this page for yourself by going to https://dnsdumpster.com/ and inputting "kiwifarms.net" in the box at the top. It will then generate a page identical to the one that Elaine is showing on her Livestream. In fact, feel free to play with it and have a look at other website you frequent to see which hosts those are using. Playing around like this is a great way to learn about the internet.

Looking at the generated list of IP addresses and domains, Elaine notices that Epik no longer shows up as KF's web service provider, and starts gloating over the fact.

There are some people in the chat shouting about Elaine doing "hacking on a Youtube Livestream", but she's literally not hacking anything at all. I know that this page looks impressive to some who doesn't know anything about the internet, but it's not hacking to use a website to look up information about a website on the internet.

(The NMAP port-scanning that Elaine later does is more legally tricky, because that could be interpreted as the digital equivalent of "walking around a building and knocking on the windows to see which window is still open", if she then uses the information obtained from the NMAP scan to escalate her interaction with that particular server. This is why a lot of networks/ISPs have disabled NMAP by default on user accounts. You really shouldn't NMAP a remote server unless they've consented to it. Trying out a limited number of individual services to see if a server is alive is usually OK, but performing a whole-ass port scan is definitely considered sus.)

She says "all his other hosts are these weird data-centers in the middle of nowhere", but those aren't the hosts that serve up the website, just the DNS (Domain Name Server) hosts. I know this is one of the more perplexing aspects of the internet for average users to understand - that 1) a website and 2) the name of that website are on two different servers - but that's the internet.

Elaine then looks at a domain map of KF's structure. This is the map she is looking at:

Elaine then claims it's unsafe to have a domain called "crunklord.kiwifarms.net" because it outs Crunklord as being associated with KF. There is nothing unusual or unsafe about this, everyone already knows that Crunklord is helping Null with the site and running other aspects of KF for him, like the KiwiFarms Fediverse instance.

TLDR, looking up kiwifarms.net on a website like dnsdumpster.com is not "hacking".

 

[Fedbuster]

"drinking blood of the kiwis"
The schizo drinks Kiwi Juice?

 

[Firegirl26]

So no one can figure out where the website is down. I know recently that 14year-old kid hacked it. he has an account on KiwiFarms, but I don’t think he’s allowed to use it until he’s of age. before the site went down, I remember looking at the thread. The kid was on, and he was kicked off after a few hours. he could’ve been mad about the ban and retaliated.

 

[TheChattanoogaAshleyJank]

So no one can figure out where the website is down. I know recently that 14year-old kid hacked it. he has an account on KiwiFarms, but I don’t think he’s allowed to use it until he’s of age. before the site went down, I remember looking at the thread. The kid was on, and he was kicked off after a few hours. he could’ve been mad about the ban and retaliated.

Didn't Null pay him off though, or was there another one?

 

[Carl]

So no one can figure out where the website is down. I know recently that 14year-old kid hacked it. he has an account on KiwiFarms, but I don’t think he’s allowed to use it until he’s of age. before the site went down, I remember looking at the thread. The kid was on, and he was kicked off after a few hours. he could’ve been mad about the ban and retaliated.

He keeps mentioning Tier 1 ISP's and LFJ (and keeps crying about frozen peaches excessively)so it seems to be a blackhole/transit situation vs a hack that happened days prior. But then again he's really not going into specifics this time (like usual)so it can be anything.

All Josh has to do is not be an insufferable asshat and he won't make so many enemies.

 

[The Gays From LA]

Look at this. Ping screen of death, red all over:

Zoomers, learn about the internet and be like Elaine by having a look at it for yourselves here:

https://ping.pe/103.114.191.1

So no one can figure out where the website is down.

He keeps mentioning Tier 1 ISP's and LFJ (and keeps crying about frozen peaches excessively)so it seems to be a blackhole/transit situation vs a hack that happened days prior. But then again he's really not going into specifics this time (like usual)so it can be anything.

I too think he's hinting at it being a problem with a backbone. People on Twitter are speculating widely that it might be something with Epik, but I too read between the lines of Null's latest statement that it might not be Epik but another backbone that relented.

When I read his latest statement, I noticed that Null specifically mentioned NTT as one of the backbones that have dropped KF:

NTT was the Japanese backbone that Null began using towards the end of #DropKiwiFarms to get KF back on the internet globally.

Spoiler: Spoilerama

I remember I sent Null a traceroute chain when NTT first began to show up, asking him if he was now routing through Japan:

He never answered me, but later it was confirmed that he had indeed begun using NTT as a backbone.

When I left KF back in January of 2023, he was to my knowledge still using NTT. I don't know if that has changed since.

If Null was still using NTT until recently.... is he perhaps suggesting that LFJ went to Japan or contacted/hired someone in Japan to contact NTT there to get KF kicked off? (JFC, obsessed freak.)

 

[TheChattanoogaAshleyJank]

If Null was still using NTT until recently.... is he perhaps suggesting that LFJ went to Japan or contacted/hired someone in Japan to contact NTT there to get KF kicked off? (JFC, obsessed freak.)

Could it be the return of Byuu?

 

[The Gays From LA]

Sinseer now claims that the problem isn't NTT as I speculated but rather Terrahost, KF's Dutch ISP:

Here's what we know so far;

Terrahost is no longer able to provide tier 1 service to Kiwifarms.

Joshua Moon is crying about the end of the internet and claiming people are preventing him from giving out more info. he has shown no proof of anything yet. he is begging for money

https://twitter.com/x/status/1655323400838041603

He also posted these screenshots from I guess the KF Telegram channel which he had already infiltrated and was obsessively screengrabbing from throughout #DropKiwiFarms:

If Null can't talk about what he's doing right now it's obviously because things have gotten so serious that his lawyers are now involved. He's probably talking to his ISP via a lawyer and this is the reason he's been asked not to say anything so as to not jeopardize those negotiations.

BTW, Sinseer's claim of Null fundraising right now is bullshit because how is KF fundraising if no one can obtain their crypto-addresses from the website? Unless people copied them before the site went down.

It's interesting that it's Terrahost because I looked up KF's Autonomous System Network number, which is AS397702, on URLscan.io, which is one of Liz Fong-Jones favourite websites for keeping the tabs on KF. LFJ repeatedly let it be known during #DropKiwiFarms that he was using URLscan.io to check when KF was going offline.

And what did I see at the urlscan.io page for AS397702?

AS397702 - SSSS, US - urlscan.io

urlscan.io - Website scanner for suspicious and malicious URLs

urlscan.io

Supposedly someone from the Netherlands had been scanning KF everyday for hours, over many days, from a Dutch IP address... perhaps this was someone at Terrahost?

"Seen 10033+ times between May7th,2023 and May 7th, 2023"

Now, this Dutch IP address that was scanning KF could be just a proxy address (as URLscan.io does provide that service to users)... or someone in the Netherlands was constantly scanning KF to see when it would go down. Whomever it was, they stopped scanning KF 16 hours ago (from the moment I took my screengrab).

Here, have a look for yourselves (use a VPN or Tor though, as this website will otherwise log and display your IP address!):

Search - urlscan.io

urlscan.io - Website scanner for suspicious and malicious URLs

urlscan.io

 

[delphi]

I thought Terrahost was forced into capitulation last year.

BTW, Sinseer's claim of Null fundraising right now is bullshit because how is KF fundraising if no one can obtain their crypto-addresses from the website? Unless people copied them before the site went down.

And how would people know he's begging for money? A lot of kiwis refuse to install Telegram.

After the drama last year Josh said that "we needed big friends and we found them". The context in which that comment was made suggested that some large donations had been made.

 

[The Gays From LA]

After the drama last year Josh said that "we needed big friends and we found them". The context in which that comment was made suggested that some large donations had been made.

I though the "big friends" was just a reference to Epik, not to donations per se.

 

[delphi]

I though the "big friends" was just a reference to Epik, not to donations per se.

Maybe. Hard to check stuff with KF down.

 

[Chrysler Building]

Going international to attack the backbones of KF? That's a very desperate person or persons. I'm imagining a tranny with a small mountain of blood covered dilators copy pasting email after email...

 

[Gamercat]

@The Gays From LA be careful messing with an international cybercriminal ayonmouse haxxer

 

[The Gays From LA]

Going international to attack the backbones of KF? That's a very desperate person or persons. I'm imagining a tranny with a small mountain of blood covered dilators copy pasting email after email...

For those of you who still think that Null's reference to Liz Fong-Jones in his statement is oddly specific...

Here are the tweets from Liz Fong-Jones from when he first began targeting TerraHost during #DropKiwiFarms last year. As Null pointed out in his statement, these tweets from Liz are now gone because LFJ nuked his Twitter account to cover up:

Null named Liz Fong-Jones in his statement as the main instigator of the campaign to target TerraHost, because he knew that Liz Fong-Jones had been targeting TerraHost since last year.

So I had a look at my archive, and I found this tweet where an ex-Tor developer, Neel Chauhan, (if you want an idea of the kinds of connections LFJ has...) was telling LFJ: "Terrahost just peers with Sprint.(...) You should go after @altibox since they're actually a Terrahost upstream."

@RubinRemus, before his Twitter account got suspended, was also habitually tweeting at Epik and Altibox to convince them to drop KF:



Now I have to wonder: If TerraHost has dropped KF, was it perhaps because it was actually @altibox that relented? If Null has a contact at @altibox he might want to get in touch with them.

 

[delphi]

People forget that Google had an enormous amount of engineers on their staff during the time LFJ worked there, many of whom have now gone on to work for other companies. While he may not have been universally liked, his organisation of the Google walkout and his starting of the strike fund endeared him to many.

 

[Chrysler Building]

Null named Liz Fong-Jones in his statement as the main instigator of the campaign to target TerraHost, because he knew that Liz Fong-Jones had been targeting TerraHost since last year.

So I had a look at my archive, and I found this tweet where an ex-Tor developer, Neel Chauhan, (if you want an idea of the kinds of connections LFJ has...) was telling LFJ: "Terrahost just peers with Sprint.(...) You should go after @altibox since they're actually a Terrahost upstream."

View attachment 33619

View attachment 33620

@RubinRemus, before his Twitter account got suspended, was also habitually tweeting at Epik and Altibox to convince them to drop KF:

View attachment 33622View attachment 33621View attachment 33623View attachment 33624

Now I have to wonder: If TerraHost has dropped KF, was it perhaps because it was actually @altibox that relented? If Null has a contact at @altibox he might want to get in touch with them.

LFJ's tech supremacy is just as fake as his tits I see.

 

[Firegirl26]

Just want everyone to know there’s no such thing as accident consent

 

[Fedbuster]

The only “neo nazis” that exist today are the glownigger shit stirrers starting witch hunts over a dead form of government (national socialism) that had been annihilated almost a century ago.

 

[Kenneth Erwin Engelhardt]

Josh do you remember when you said this would never happen again?