Slashdot Mirror
Cryptome Accidentally Leaks Its Own Visitor IP Addresses (dailydot.com)
An anonymous reader writes with this Daily Dot story about an accidental leak of user info from Cryptome. Cryptome, the Internet's oldest document-exposure site, inadvertently leaked months worth of its own IP logs and other server information, potentially exposing details about its privacy-conscious users. The data, which specifically came from the Cartome sub-directory on Cryptome.org, according to Cryptome co-creator John Young, made their way into the wild when the site logs were included on a pair of USB sticks sent out to a supporter.
shill site trolling for leaks. They hate us for wanting privacy.
I am serious, and I am sure no one in the Government has ~ever~ monitored this web site's traffic or users ever never... (I always assume I am always logged by some alphabet agency and added to some bad-list for checking out the very cool stuff at cryptome.org throughout the years...) It sounds like John just accidentally sent out logs on a USB archive stick. I am sure the recipient considered it value-added. (don't see any politics going on here either, not taking the troll bait)
Why does an anonymous leak site even store identifying information? Isn't the best defense to never even keep the data?
------ The best brain training is now totally free : )
we're gonna be dizzy and we're gonna make mistakes. Mel Brooks
WTF!? Why would a privacy conscious website even keep logs? DuckDuckGo for example doesn't keep logs so that privacy can actually be maintained.
That should be "months' worth".
At the bottom of the
Well, with people like that as your supporters ...
Who needs enemies?
the robustness of any security is based on the stupidest person
I see that the site is dedicated to spreading information that some people would prefer to keep private. They publicize things that they think should not be private, "violate the privacy" of those whom they think should have their information revealed and publicized (rightly or wrongly).
So in some sense, it's an anti-privacy site, for better or worse. I don't immediately see any indication that the operator is "privacy conscious ". Do you? Or is it more like "I think he -should- be privacy conscious, so I assume that he is"?
That said, I imagine anyone publishing just about anything would be interested in knowing how many people use the site, which types of documents get the most interest, etc. That information comes from log analysis.
http://imgur.com/gallery/TXgC9Xe/
Seriously, this data should not even be recorded on such a site. And it it is, it should not even be written locally and immediately exported to a machine that is specially protected and not reachable from the Internet. So that is _two_ massive screw-ups right there.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
Up until just a few years ago (when Google claimed the Usenet) a posters IP address was always displayed in the headers. It was no big deal.
This is a public website, without https. I visit it and I don't give a rats ass about it. I suspect true revolutionaries would actually use Tor and proxies to visit it. Besides, who can be hurt with the truth.
Who cares?
Its not going to stop me visiting cryptome any time time soon. The more people know I am visiting cryptome, the more seriously they will have to think about doing anything stupid.
Cryptome is hosted on web.com, formerly Network Solutions, it's a shared platform with like 750k other sites on it all run wild hair PHP applications and 8 year old WP installs on a giant NFS mount. It's all horribly insecure.