Re:Toxic – A distributed, secure, command-line based instant...
by exposing on Wednesday February 11, 2015 @10:58PM
(#9037293)
HIGHLIGHTS
irungentoo: tox main developer, head of the Tox Foundation
NikolaiToryzin (stqism): second in command, run the Tox Foundation's monetary operation
The rest are other developers on the #tox-secret channel.
TRACKING PROPLEX, AN EX-MEMBER OF THE TOX FOUNDATION, ONLINE ACTIVITY THROUGH HIS UA:
irungentoo prolapses phone seems to have a unique user agent
NikolaiToryzin If you tell me it I can make tox.im return stuff to him only
irungentoo 'Mozilla/5.0 (Linux; Android 4.4.2; SM-N900V Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/40.0.2214.69 Mobile Safari/537.36'
NikolaiToryzin That'll be fun
READING HIS PRIVATE EMAIL:
irungentoo basically proplex did an email request change on his digital ocean account which means an email containing his ip got sent to [email protected] which ended up in the catch all email
urras irungentoo: Any interesting emails?
irungentoo urras, if you want to forcefully gain access to his digital ocean account I can reset his pass
[...]
NikolaiToryzin But they want his personal info
urras How do you guys know
NikolaiToryzin Emails.
irungentoo comparing himself to the NSA:
irungentoo I feel like the NSA
irungentoo tracking people across ips even without cookies is so easy
irungentoo why would I want to go after terrorists?
irungentoo blackmailing people with power is much more lucrative
TRACKING AN EX-DEVELOPER AGAIN:
irungentoo 173.52.122.131 - - [13/Jan/2015:00:33:01 -0500] "GET /User:Proplex HTTP/1.1" 404 3656 "https://github.com/Tox/Tox-Website" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
irungentoo interesting
irungentoo I like how he checked if the wiki was up: 96.250.8.105 - - [20/Dec/2014:02:12:30 -0500] "GET / HTTP/1.1" 301 5 "https://tox.im/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
irungentoo you really don't need cookies to track people online.
irungentoo: tox main developer, head of the Tox Foundation NikolaiToryzin (stqism): second in command, run the Tox Foundation's monetary operation The rest are other developers on the #tox-secret channel.
TRACKING PROPLEX, AN EX-MEMBER OF THE TOX FOUNDATION, ONLINE ACTIVITY THROUGH HIS UA:
irungentoo prolapses phone seems to have a unique user agent
NikolaiToryzin If you tell me it I can make tox.im return stuff to him only
irungentoo 'Mozilla/5.0 (Linux; Android 4.4.2; SM-N900V Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.69 Mobile Safari/537.36' NikolaiToryzin That'll be fun
READING HIS PRIVATE EMAIL:
irungentoo basically proplex did an email request change on his digital ocean account which means an email containing his ip got sent to [email protected] which ended up in the catch all email
urras irungentoo: Any interesting emails? irungentoo urras, if you want to forcefully gain access to his digital ocean account I can reset his pass
[...]
NikolaiToryzin But they want his personal info
urras How do you guys know
NikolaiToryzin Emails.
irungentoo comparing himself to the NSA:
irungentoo I feel like the NSA
irungentoo tracking people across ips even without cookies is so easy
irungentoo https://mail.tox.im/prolapse.txt [link now unavailable, but I archived it https://archive.today/KkSWp ]
irungentoo why would I want to go after terrorists?
irungentoo blackmailing people with power is much more lucrative
TRACKING AN EX-DEVELOPER AGAIN:
irungentoo 173.52.122.131 - - [13/Jan/2015:00:33:01 -0500] "GET /User:Proplex HTTP/1.1" 404 3656 "https://github.com/Tox/Tox-Website" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
irungentoo interesting
irungentoo I like how he checked if the wiki was up: 96.250.8.105 - - [20/Dec/2014:02:12:30 -0500] "GET / HTTP/1.1" 301 5 "https://tox.im/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
irungentoo you really don't need cookies to track people online.