Post: #26

(09-03-2015 07:27 AM)Libertas Wrote:  There's no real financial benefit to hacking this place.

Depends - some members have paid memberships. If a non-prepaid cc was used and the info was retained but not encrypted, that could be sold or given away by a spiteful SJW inspired hacker. Real identities can be used for impersonation crimes (like signing up for an AM account - ha.)

Hacking tools are easier than ever to use nowadays and I assume Roosh's team reviewed their security protocols and data retention policies. I wouldn't put it past a C-average computer science dropout to be able to do what happened over the past couple of days.

Post: #27

I guess if he or they succeed in silencing us, that'll proof that they aren't insane pathetic mindless drones settled amongst the sticky filth of the bottom of the barrel of mankind, right?

That said, maybe we should have a separate 'debatervf.com' so we can have a compartmentalized 'debate' with the degenerate crap of humanity, which might act as a blow off valve for them, by giving them an outlet for expressing their shitness before their superiors. It might also give insight into their nature.

Post: #28

(09-03-2015 09:16 AM)Phoenix Wrote:  That said, maybe we should have a separate 'debatervf.com' so we can have a compartmentalized 'debate' with the degenerate crap of humanity, which might act as a blow off valve for them, by giving them an outlet for expressing their shitness before their superiors. It might also give insight into their nature.

That wouldn't work.

If anything it'd piss them off more and they'd get in more of a frenzy having a bunch of "shitlords" throw facts and logic at them. Especially when they try to use the "facts and logic" high ground while saying their crazy "Roosh is a rapist" bullshit.

And we know their nature. They get loud, they argue, they get beat in the argument, they get louder, and then they DDOS the forum thinking they'll get their way.

Post: #29

(09-03-2015 07:27 AM)Libertas Wrote:  I'm going to take a guess that the person(s) behind this aren't too sophisticated.

Serious hackers go after people's identities in a way that they can extract financial benefits. I suppose to register at Ashley Madison you would need to put your name and other sensitive information so that they can screen you. Here all you need is an email. There's no real financial benefit to hacking this place.

The ones behind this are probably just Anon faggots making a point in favor of "social justice."

I think it's equally likely that they are just doing it to stir up internet drama. My recommendation is to stay calm and focused on getting the sites back up and stable.

Post: #30

Yeah you might be right. I'm just looking forward to the day when they're staving in the gutters with a stunned look on their faces.

Post: #31

Imagine if they DDOS'd the forum during Canada. That would have definitely hurt.

But since they DDOS'd me in peace time, the servers will be strengthened for attacks during more critical times.

In other words, they should have waited during a future battle, and then DDOS the servers then. I would have been overwhelmed. Their mistake.

Post: #32

Was just thinking that this DDOSing is a timely reminder to be careful what you write in PMs. And not just with new/unrepped members.

Among established members some sensitive info tends to get shared. This might include first name, email address, hometown and phone number.

Of course, we trust senior posters who have been vouched for in person, but what if the site gets hacked?

It really wouldn't take a genius to work out the identity of many posters, based on what I've previously been sent in some PMs. I've been guilty of some sloppiness too.

This place is getting a lot more attention than ever before which increases the risk of a malicious hack.

Not to knock Roosh at all, but if a largescale hack can happen to huge corporations then it can happen to us.

Be careful out there guys!

Post: #33

I've just gone through my PMs and deleted everything with a phone number. Phone numbers can be used to identify an individual.

I suggest you guys do the same.

EDIT: Check out this article on Social Media Self-Defense
http://blog.totallynotmalware.net/?p=15

Quote:Social Media Self-Defense
Recent events have raised conversation about the necessity for operational security in relation to social media. Discussions about how to maintain an online presence while protecting one’s private life and personal identity are cropping up in communities who had previously never felt the need to exercise operational security, and who had never considered the possibility of falling prey to compromised security and data breaches.

In the age of social media, there are a myriad ways our online presence may be used against us by a multitude of adversaries. From stalkers to prosecutors, any public information that can be attached to our identities may be used to their advantage and our detriment. It is important that we are mindful of the resources we make available to potential attackers.

In the interest of making practical operational security accessible to more people, I have composed a list of basic strategies for helping to mask the link between a social media account and one’s true identity. This list is by no means exhaustive, and it is important to keep in mind that an adversary with enough resources will likely be able to circumvent this obfuscation, given enough time. That said, it is nearly always worthwhile to make these connections more difficult, especially when they come at very little cost to us in terms of implementation.

1. Use a unique email address.
When attempting to mask connections between social media profiles, including dating sites, it is important to use a dedicated email address that does not relate back to other profiles, our legal name, or, ideally, any of our public associations. Using [email protected] is a bad idea; using [email protected] is a great idea. Creating new email addresses is easy, so there is no need to reuse one for accounts you’d like to keep separate.
Pro-tip: you can use a service like 10minutemail.net to generate a temporary email for creating a new Gmail account.

2. Choose a unique handle.
Do not re-use handles across platforms you’d like to keep separate. Do not use firstnamelastname69 for accounts you do not want to have connected to your legal identity. Pick something else. Anything else. It doesn’t matter.

3. Don’t use the same photos.
Do not use the same photos on profiles you’d like to keep separate. Reverse image search is a thing, and it will fuck your shit up. Ideally, you would not use images of your face at all on a profile you did not want tied to you, but if you must, make sure they can’t be linked back to your Twitter or Facebook accounts simply by using a quick drag-and-drop search.

4. Your tabs are YOUR business.
Give no indication that you’re using a site you don’t want people to know you’re using: if you’re trying to keep your private account private, make sure you’re not hinting at its existence by means of open tabs. Ensure you’re not being shouldersurfed while interacting with that account, and never post screencaps that show tabs. EVER.

5. Scrub your browsing history.
Religiously. As with the above point, if you don’t want people to know you’re using a site or service, it’s best not to leave evidence around and available to the casual observer. Deleting your browsing history is easy. Using Chrome in incognito mode and closing your tabs after every session is even easier.

6. When possible, pay in cash.
When making purchases connected to your private persona, pay in cash. When cash isn’t possible, consider paying with a pre-paid card. Purchased with cash. You do not need bank statements or credit card statements establishing a link between you and places you never were, or sites you do not use.

7. Don’t use your legal name.
Pick a name. Any name. There is no need whatsoever for you to use your legal name on social media. You certainly CAN if you feel comfortable with it, but it is absolutely not mandatory. DO pick a name you will actually respond to, though.

8. If you want to keep a secret, KEEP QUIET.
Don’t talk about it. Don’t brag, don’t discuss it anonymously. Don’t tell your best friend, don’t tell your workmates, don’t tell that stranger at the bar. Just SHHHH. Stop talking.

9. Use strong passphrases.
“Password,” “Passw0rd,” “password123,” etc. are not good enough. Use strong unique passwords for each site or service. Better yet, use a password manager with a strong master password.

10. Don’t share identifying information.
If you’re trying to keep a profile secret, don’t share personally-identifying details on it. Keep your workplace, alma mater, tattoos, and the freckle on your left butt cheek private; there is no benefit to sharing these details on an account you don’t want to have linked back to you.

11. “Plausible deniability” is a terrible failsafe.
If your operational security is poor enough that you have to rely on plausible deniability, you are almost definitely not capable of pulling off plausible deniability. It’s far better to share false information from the start than it is to put honest information out there, and then try to lie to cover up its connection to you. If you are relying on plausible deniability to keep you safe, you are fucked.

12. Being recognized will fuck your shit up.
Don’t conduct clandestine meetings in places you frequent in your normal life. It only takes one staff member, regular patron, etc. to recognize you, call you by the wrong name, and totally blow your cover. It only takes an innocuous comment to someone in your normal life to make your secrets known. Pick somewhere you are unlikely to be recognized, dress differently than you normally do, and don’t go to that place in your day-to-day life if you can avoid it.

13. Alibis can be helpful, but they’re hard.
Use your credit card to buy a movie ticket or pay for food somewhere you frequent often. The problem with many alibis is that they involve having someone else lie on your behalf, which in turn requires violation of rule number 8. If you are going to construct an alibi, make sure you’re fabricating evidence, rather than relying on false testimony.

14. Strict compartmentalization.
The first rule of Fight Club is, do not talk about Fight Club. The second rule of Fight Club is DO NOT TALK ABOUT FIGHT CLUB. This rule actually goes both ways; just as you should not be discussing your secret life within your mundane existence, there is also no reason to discuss your day-to-day life within your secret life. Just don’t. Keep it completely separate; no overlap, no allusion, nothing.

15. Maintain composure.
If you want to get away with keeping a secret, you must keep your cool. Be mindful of being fidgety. Don’t giggle every time someone says the word “secret.” Be aware of your facial expressions and your reactions to the people around you. Be aware of what names you’re responding to, when. Stay calm.

16. Don’t get cocky.
Persona maintenance requires constant vigilance. Personal security is never assured, and one should never forget this. Cockiness breeds sloppiness, sloppiness leads to discovery.

17. Perfection takes practice.
None of these skills are innate. All of them require extensive practice. You may find that you need to start over and start clean over and over again. There is no shame in failure, but it is important to remember that the internet never forgets; it is best to always err on the side of caution and add additional information as you go, after having properly assessed the risk.

Again, while this is by no means an exhaustive list of all possible precautions one might take, and while these precautions may not be as helpful against adversaries with a lot of time and resources, they are absolutely an easy way to minimize risk from stalkers, dangerous family members, nosy employers, and potentially even low-level state adversaries. Social media can very well be a point of vulnerability for many of us, but through careful persona management, it is possible to negate some of that insecurity while maintaining a robust online presence.

Post: #34

You guys are too late. If someone hacked us, they already did it.

Post: #35

Well, then good for me that I use a burner email.

Post: #36

Roosh anything to worry about with the membership upgrades with information that way?

Post: #37

Well this explains the LM McCoy thing. He was from the future.

Post: #38

(09-03-2015 12:04 PM)Fisto Wrote:  Roosh anything to worry about with the membership upgrades with information that way?

Your Paypal information is not stored on the server, so nothing to worry about there.

Post: #39

(09-03-2015 11:50 AM)Cattle Rustler Wrote:  You guys are too late. If someone hacked us, they already did it.

This is pure speculation and fearmongering. There's no place for it.

Post: #40

I just emptied all my message folders to be on the safe side. A lot of great messages in there. Oh well.

Post: #41

(09-03-2015 12:14 PM)Fisto Wrote:  I just emptied all my message folders to be on the safe side. A lot of great messages in there. Oh well.

I don't think such a brute cleanup is necessary.

No need for us to get paranoid, just to play it smart. 95% of you have nothing to worry about.

Post: #42

(09-03-2015 12:17 PM)Roosh Wrote:  

(09-03-2015 12:14 PM)Fisto Wrote:  I just emptied all my message folders to be on the safe side. A lot of great messages in there. Oh well.

I don't think such a brute cleanup is necessary.

No need for us to get paranoid, just to play it smart. 95% of you have nothing to worry about.

Well you know Fisto, he's a "brute" kinda guy.

Post: #43

I have a dummy email account but just made another one and am trying to complete the process but RVF won't send the confirmation email. Anyone else have this problem? I think Roosh mentioned something about email updates but I am guessing that is different than what I am trying to do.

Anyone else able to change emails?

Post: #44

I changed my email a few months ago from a regular burner to a rvf only one. I had to do it from my pc, add it wouldn't let me from my phone.

Post: #45

Quote:I have a dummy email account but just made another one and am trying to complete the process but RVF won't send the confirmation email.

Email is currently disabled. It asks you to confirm the email after changing it?

Post: #46

(09-03-2015 12:42 PM)Roosh Wrote:  

Quote:I have a dummy email account but just made another one and am trying to complete the process but RVF won't send the confirmation email.

Email is currently disabled. It asks you to confirm the email after changing it?

Yes, it says something along the lines that an email has been sent to your new email account and you need to do somethings to complete the process.

Post: #47

(09-03-2015 12:46 PM)samsamsam Wrote:  

(09-03-2015 12:42 PM)Roosh Wrote:  

Quote:I have a dummy email account but just made another one and am trying to complete the process but RVF won't send the confirmation email.

Email is currently disabled. It asks you to confirm the email after changing it?

Yes, it says something along the lines that an email has been sent to your new email account and you need to do somethings to complete the process.

I've done the same thing. Change my email address to a new one and am waiting an email to confirm it (obviously email is disable)

I also purged everything that was searchable with my old email address as well.

Post: #48

(09-03-2015 09:28 AM)Roosh Wrote:  Imagine if they DDOS'd the forum during Canada. That would have definitely hurt.

But since they DDOS'd me in peace time, the servers will be strengthened for attacks during more critical times.

In other words, they should have waited during a future battle, and then DDOS the servers then. I would have been overwhelmed. Their mistake.

Someone did indeed bring up that they should have DDOSed the servers during your Canada tour on that protest Facebook group



But as we have seen from what happened during that time, SJWs aren't too bright when it comes to planning.

Post: #49

Those posts are recent.

Post: #50

(09-03-2015 12:17 PM)Roosh Wrote:  

(09-03-2015 12:14 PM)Fisto Wrote:  I just emptied all my message folders to be on the safe side. A lot of great messages in there. Oh well.

I don't think such a brute cleanup is necessary.

No need for us to get paranoid, just to play it smart. 95% of you have nothing to worry about.

Just a tip to those looking to clear out PMs and play it safe:

If it looks like you'll have to delete a PM that you really liked and wish you could preserve the message without compromising your safety, simply screenshot it and keep it on your hard-drive. Once you've taken the screenshot, the PM is preserved even after deletion from the server, it is no longer online, and you can look back on it whenever you like.