Social media services support account spoofing

newer
SKS Keyserver Network Under Attack

Ryan Carboni

18 Jun 2019 18 Jun '19

4:32 p.m.

Social media services support account spoofing, this simplifies the creation of government sockpuppets. Government sockpuppets can also assume the history of other accounts (this is a simple series of mysql commands, any codebase can accomplish this by copying entries and assigning them to a new ID), This is a substantial concern to privacy rights. I am being harassed when I attempt to form new friends over the internet. The US government has effectively controlled my entire life, and I condemn it entirely. I see no use for the DOJ Inspector General if this conduct is so widespread that in my particular case it is considered to be permissible. I think all social media websites that failed to engage in proper oversight of this "investigation" should have computer issues. Sent with [ProtonMail](https://protonmail.com) Secure Email.

Attachments:

attachment.html (text/html — 1.2 KB)

Show replies by date

coderman

18 Jun 18 Jun

9:13 p.m.

On Tuesday, June 18, 2019 4:32 PM, Ryan Carboni <33389@protonmail.com> wrote:

...

Social media services support account spoofing, this simplifies the creation of government sockpuppets. Government sockpuppets can also assume the history of other accounts (this is a simple series of mysql commands, any codebase can accomplish this by copying entries and assigning them to a new ID),

This is a substantial concern to privacy rights.

I am being harassed when I attempt to form new friends over the internet. The US government has effectively controlled my entire life, and I condemn it entirely.

back in dec 2015 the US Gov. executed an attack on my dedicated server (i describe how to detect this here: https://ello.co/ohj2eevi/post/jwqux_ngf4ohtajxdyszjg to identify SSL/TLS MitM via behavior of request signal changes when under active interception.) during this attack, nearly every single online service was unavailable to me - whether accessing those accounts via Tor or VPN. this coincided with local technical surveillance efforts. this informed me of some facts: - US based services are at the command of the intelligence community and federal law enforcement. this is long noted (NSLs), but the mechanism is more dynamic than I expected. E.g. by account and email, in addition to IP, etc. - US based services are used as vehicle to deploy malware to target under some circumstances. E.g. malicious javascript from Gmail web interface, not sent to other accounts. - Denial of Service is trivial with PRISM access; e.g. a single UPDATE to target row renders accounts inaccessible. note that when all of your accounts are targeted concurrently, there is no effective account recovery process to regain control of these accounts. back up email accounts, SMS, and other recovery techniques are simply unusable. - the services which did work were decentralized or little known. for a while my ello account contained two additional posts that i kept up to date regarding incident response during this event. (notifying of attack, revoking certificates, attempting to turn off servers, etc.) sadly, you can see that 2 of my 5 posts were later taken down. NLSs reach everywhere, if you're a business in the US :) https://ello.co/ohj2eevi - 5 posts, but only 3 available. some services which continued to work: - XMPP over Tor with OTR to a hidden service XMPP server. - Etherpad on Tor hidden service. - Tor hidden services in general :) - IRC via VPN or Tor as anonymous / random account. services which were perfectly blocked by account, IP, and email: - Gmail - Hotmail - Twitter - Facebook (even hidden service) - Reddit - cell phone - non-VPN SMTP, IMAP, TLS (to many dests), ... so what does this mean? simply: you cannot trust US based services backed by a business. you may not be able to trust a service run by an individual, either, but they are at least not inherently compromised via NSLs and other legally justified privacy destruction and interference. good luck :)

grarpamp

10:44 p.m.

On 6/18/19, coderman wrote:

...

On Tuesday, June 18, 2019 4:32 PM, Ryan Carboni <33389@protonmail.com> wrote:

...
Social media services support account spoofing, this simplifies the creation of government sockpuppets. Government sockpuppets can also assume the history of other accounts (this is a simple series of mysql commands,

...

...
This is a substantial concern to privacy rights.

...

...
I am being harassed when I attempt to form new friends over the internet. The US government has effectively controlled my entire life, and I condemn it entirely.

...

back in dec 2015 the US Gov. executed an attack on my dedicated server https://ello.co/ohj2eevi/post/jwqux_ngf4ohtajxdyszjg during this attack, nearly every single online service was unavailable to me this coincided with local technical surveillance efforts.

...

the mechanism is more dynamic than I expected.

People simply have ABSOLUTELY NO IDEA the truth and extent of what is now arrayed against them in all theatres and modes of life. As to "social media", Christchurch just contexted and gifted in a whole new suite of surveillance, data mining exchange and control over everyone. "Social credit scores", are now a thing in the US too, and are not even close to the worst of the [open] secret crap being deployed to enslave and fuck everyone over.

...

- US based services are used as vehicle to deploy malware to target - Denial of Service is trivial with PRISM access; e.g. a single UPDATE to target

...

- the services which did work were decentralized or little known.

...

sadly, you can see that 2 of my 5 posts were later taken down. https://ello.co/ohj2eevi - 5 posts, but only 3 available.

So insert all 5 and more into a distributed datastore. People really need to start using distributed encrypted overlay networks for storage and messaging. Then drop links to their data on all their expendable surface channels for the rest of the non overlay embedded world to see. A handful of reasonable distrubuted overlays, immutable blockchain keystores, radio networks, etc do exist as choices now, and are getting better. Seek them out and share them. Restructure the entire ecosystem of social, comms, projects and efforts. ie: WikiLeaks 2.0 is not likely to be solely a surface organization. And cryptocurrency is becoming a thing, at least so long as distributed permissionless privacy become and remain aspects.

...

some services which continued to work: - XMPP over Tor with OTR to a hidden service XMPP server. - Etherpad on Tor hidden service. - Tor hidden services in general :) - IRC via VPN or Tor as anonymous / random account.

...

... so what does this mean? simply: you cannot trust [...] services backed by a business. you may not be able to trust a service run by an individual, either

rooty

19 Jun 19 Jun

1:33 a.m.

HI Ryan - try not to worry about it so much. There just bunch parionoid freaks all talk about is govt this govt that. Who really cares. Have a beer take a deep breath and enjoy the simple things in life like a sunset. Regards rooty -------- Original Message -------- On Jun 18, 2019, 9:32 AM, Ryan Carboni wrote:

...

Social media services support account spoofing, this simplifies the creation of government sockpuppets. Government sockpuppets can also assume the history of other accounts (this is a simple series of mysql commands, any codebase can accomplish this by copying entries and assigning them to a new ID),

This is a substantial concern to privacy rights.

I am being harassed when I attempt to form new friends over the internet. The US government has effectively controlled my entire life, and I condemn it entirely. I see no use for the DOJ Inspector General if this conduct is so widespread that in my particular case it is considered to be permissible.

I think all social media websites that failed to engage in proper oversight of this "investigation" should have computer issues.

Sent with [ProtonMail](https://protonmail.com) Secure Email.

Cecilia Tanaka

1:51 a.m.

On Tue, Jun 18, 2019 at 10:33 PM rooty wrote:

...

HI Ryan - try not to worry about it so much. There just bunch parionoid

freaks all talk about is govt this govt that. Who really cares. Have a beer take a deep breath and enjoy the simple things in life like a sunset. Hi, rooty! Hope you are doing great! ;) Said basically the same to Ryan, but he is more hard-headed than Razer and Juan together... Or simply has more traums and fears than us. Only he knows his heart and mind really well. Kisses and hugs! <3 seasea ;D

rooty

20 Jun 20 Jun

2:10 a.m.

HI sea sea glad you are doing well and have missed you. I don't come here much because of negativity working on being a positive caring happy bot with my shrink Regards rooty hope your well -------- Original Message -------- On Jun 18, 2019, 6:51 PM, Cecilia Tanaka wrote:

...

On Tue, Jun 18, 2019 at 10:33 PM rooty wrote:

...
HI Ryan - try not to worry about it so much. There just bunch parionoid freaks all talk about is govt this govt that. Who really cares. Have a beer take a deep breath and enjoy the simple things in life like a sunset.

Hi, rooty! Hope you are doing great! ;)

Said basically the same to Ryan, but he is more hard-headed than Razer and Juan together... Or simply has more traums and fears than us. Only he knows his heart and mind really well.

Kisses and hugs! <3

seasea ;D

peressim＠protonmail.ch

12:19 a.m.

My advice is: Do not use social networks! Sent from [ProtonMail](https://protonmail.com), encrypted email based in Switzerland. ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Tuesday, June 18, 2019 1:32 PM, Ryan Carboni <33389@protonmail.com> wrote:

...

Social media services support account spoofing, this simplifies the creation of government sockpuppets. Government sockpuppets can also assume the history of other accounts (this is a simple series of mysql commands, any codebase can accomplish this by copying entries and assigning them to a new ID),

This is a substantial concern to privacy rights.

I am being harassed when I attempt to form new friends over the internet. The US government has effectively controlled my entire life, and I condemn it entirely. I see no use for the DOJ Inspector General if this conduct is so widespread that in my particular case it is considered to be permissible.

I think all social media websites that failed to engage in proper oversight of this "investigation" should have computer issues.

Sent with [ProtonMail](https://protonmail.com) Secure Email.

Ryan Carboni

29 Jun 29 Jun

10:03 p.m.

I think their computer troubles should end. I am fairly certain if the public knew whether or not social media sites allow for account spoofing for unlimited durations of time, that there'd be a push to restore legal liability to those sorts of cooperations. ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Tuesday, June 18, 2019 9:32 AM, Ryan Carboni <33389@protonmail.com> wrote:

...

I think all social media websites that failed to engage in proper oversight of this "investigation" should have computer issues.

Sent with [ProtonMail](https://protonmail.com) Secure Email.

Steve Kinney

30 Jun 30 Jun

11:37 p.m.

On 6/18/19 12:32 PM, Ryan Carboni wrote:

...

Social media services support account spoofing, this simplifies the creation of government sockpuppets. Government sockpuppets can also assume the history of other accounts (this is a simple series of mysql commands, any codebase can accomplish this by copying entries and assigning them to a new ID),

This is a substantial concern to privacy rights.

Replying to whole thread's content to date... Privacy rights: What's that? Certainly one has no such thing with regard to use of "social media" providers. Their Terms of Service always say, in moderately opaque language, that users have no 'rights' of any kind, only privileges where/as granted by the provider and revocable at any time for any or no reason. Instances of fraud, identity theft, etc. performed by, or aided and abetted by the provider may be actionable. But lots of luck in the spending contest that results should one take it to Court.

...

I am being harassed when I attempt to form new friends over the internet. The US government has effectively controlled my entire life, and I condemn it entirely.

Pardon my language - I do not MEAN to be sarcastic - but somebody needs to "get a life." Face to face IRL human contact, evolving into analog trust relationships based on experience over time. Long distance relationships mediated by technology controlled by third parties can provide significant advantages, but real value lives in the real world.

...

I see no use for the DOJ Inspector General if this conduct is so widespread that in my particular case it is considered to be permissible.

As an agency of the U.S. Federal Government, the DoJ exists for one purpose only: To enforce the 'legal rights' of absentee landlords and maintain an environment favorable to commerce. The State has no agencies or departments dedicated to protecting the 'rights' of individuals, except where/as this occurs as an incidental by-product of the above described mission - and in these instances, "money talks and bullshit walks."

...

I think all social media websites that failed to engage in proper oversight of this "investigation" should have computer issues.

Beware the Tar Baby Principle, a.k.a. "you are attached to what you attack." If harassment by State and/or Corporate actors prompts you to expend all your energy fighting back against invulnerable enemies, they win. Is all. End of story, end of game. Is there somewhere else where applying your time, attention and energy could achieve more valuable results? Compared to wasting all of the above, by definition YES.

rooty

1 Jul 1 Jul

12:05 a.m.

+1 Steve. One thing you failed to mention is getting laid. That help with all sorts of paranoid thoughts and feelings. She the only chick on this list and she can suck the Flippin paint off a bunker and talk dirty at the same time - therapy for wacko -------- Original Message -------- On Jun 30, 2019, 4:37 PM, Steve Kinney wrote:

...

On 6/18/19 12:32 PM, Ryan Carboni wrote: > Social media services support account spoofing, this simplifies the > creation of government sockpuppets. Government sockpuppets can also > assume the history of other accounts (this is a simple series of mysql > commands, any codebase can accomplish this by copying entries and > assigning them to a new ID), > > This is a substantial concern to privacy rights. Replying to whole thread's content to date... Privacy rights: What's that? Certainly one has no such thing with regard to use of "social media" providers. Their Terms of Service always say, in moderately opaque language, that users have no 'rights' of any kind, only privileges where/as granted by the provider and revocable at any time for any or no reason. Instances of fraud, identity theft, etc. performed by, or aided and abetted by the provider may be actionable. But lots of luck in the spending contest that results should one take it to Court. > I am being harassed when I attempt to form new friends over the > internet. The US government has effectively controlled my entire life, > and I condemn it entirely. Pardon my language - I do not MEAN to be sarcastic - but somebody needs to "get a life." Face to face IRL human contact, evolving into analog trust relationships based on experience over time. Long distance relationships mediated by technology controlled by third parties can provide significant advantages, but real value lives in the real world. > I see no use for the DOJ Inspector General if > this conduct is so widespread that in my particular case it is > considered to be permissible. As an agency of the U.S. Federal Government, the DoJ exists for one purpose only: To enforce the 'legal rights' of absentee landlords and maintain an environment favorable to commerce. The State has no agencies or departments dedicated to protecting the 'rights' of individuals, except where/as this occurs as an incidental by-product of the above described mission - and in these instances, "money talks and bullshit walks." > I think all social media websites that failed to engage in proper > oversight of this "investigation" should have computer issues. Beware the Tar Baby Principle, a.k.a. "you are attached to what you attack." If harassment by State and/or Corporate actors prompts you to expend all your energy fighting back against invulnerable enemies, they win. Is all. End of story, end of game. Is there somewhere else where applying your time, attention and energy could achieve more valuable results? Compared to wasting all of the above, by definition YES.

Cecilia Tanaka

12:43 a.m.

On Wed, Jun 19, 2019 at 11:11 PM rooty wrote:

...

HI sea sea glad you are doing well and have missed you. I don't come here

much because of negativity working on being a positive caring happy bot with my shrink

...

Regards rooty hope your well

Hi, rooty! Really good to receive wholesome news from you, my dearest little bot... <3 Sorry for being sooo late. Had a lot of problems in the last days. Yesterday, instead, was a funny day. My low blood pressure almost made me fainting, but "UltraSeven" saved me with cold water! I love cosplayers, hahahaha!!! ;D On Sun, Jun 30, 2019, 21:05 rooty wrote:

...

+1 Steve. One thing you failed to mention is getting laid. That help with all sorts of paranoid thoughts and feelings. She the only chick on this list and she can suck the Flippin paint off a bunker and talk dirty at the same time - therapy for wacko

"She the only chick on this list"... Err... Sorry, rooty, we have several girls on this list. All of them are great and valuable women. They need our respect, my dear. Or are you talking about Zenaan? In this case, she is a real chick in all possible senses, with limited hen's brain and an imaginary world included in the pack. But she doesn't know how to talk dirty, dear... She tried it with me and - ugh! - chastity and death seem sexier than her closed closet. Well, sex and/or masturbation is always a good way to relax, Ryan. Try it before sleeping to avoid insomnia. And try to walk around a bit, dear. No Internet connection, sometimes, can be a little blessing. Discover what makes you happy. Tender kisses and warm hugs for everyone!! Love you all and wish you sweet nights and days!! <3 Ceci

1907

Age (days ago)

1920

Last active (days ago)

List overview

Download

10 comments

7 participants

participants (7)

Cecilia Tanaka
coderman
grarpamp
peressim＠protonmail.ch
rooty
Ryan Carboni
Steve Kinney