- Joined
- Aug 28, 2015
Can't believe this hasn't popped up here yet, so I'll have a go. Likely-to-disappear links are archives, this is going to need a few of them - some will be to screencap tweets because there's been a fuckton of deleting so far and I've been too busy this week to chronicle.
So, Furbuy. Ebay for furries, if you don't know. It's run by an oldschool furry dude named Jurann, who is *notorious* in the fandom. If you've ever heard of the 'MY ASS IS HUNGRY' meme, it's literally that guy. He's a real fun dude, and his winning personality makes him a pariah in most social circles he engages with, as well as leaving a trail of firings-for-cause behind him in the tech world.
So we start with this thread. tl;dr: Furry infosec researcher gets into their DB server, sees just how ownable the whole thing is, sees that there's PII and lots of fun stuff in there. Tries to contact the owners. That doesn't work. Tries to do a fairly responsible disclosure. That's where it goes off the rails. Furbuy apparently then tries to SHUT. IT. DOWN. and fucks up, hard shutting down the server, and losing everything and blaming the researchers for a 'DDOS'.
People point out that maybe that isn't how it works, exactly, and poke some holes in the site's bad code. They put out a call for a new sysadmin to halp and someone points out they offered, but Furbuy wouldn't pay. Related arguments intensify, and finally, they state that it all doesn't matter because you're a bunch of cucks:
So, the site's down, the site owner's screechy and claiming to be bringing in the cops on the researcher, it's all a mess worthy of vats of popcorn.
Bonus for multiple crossovers! We gots eevee working the crowd, Dogpatch is being awfully softball for a dude throwing around 'cuck', and on and on. I'm really only scratching the surface here, it's great.
So, Furbuy. Ebay for furries, if you don't know. It's run by an oldschool furry dude named Jurann, who is *notorious* in the fandom. If you've ever heard of the 'MY ASS IS HUNGRY' meme, it's literally that guy. He's a real fun dude, and his winning personality makes him a pariah in most social circles he engages with, as well as leaving a trail of firings-for-cause behind him in the tech world.
So we start with this thread. tl;dr: Furry infosec researcher gets into their DB server, sees just how ownable the whole thing is, sees that there's PII and lots of fun stuff in there. Tries to contact the owners. That doesn't work. Tries to do a fairly responsible disclosure. That's where it goes off the rails. Furbuy apparently then tries to SHUT. IT. DOWN. and fucks up, hard shutting down the server, and losing everything and blaming the researchers for a 'DDOS'.
People point out that maybe that isn't how it works, exactly, and poke some holes in the site's bad code. They put out a call for a new sysadmin to halp and someone points out they offered, but Furbuy wouldn't pay. Related arguments intensify, and finally, they state that it all doesn't matter because you're a bunch of cucks:
So, the site's down, the site owner's screechy and claiming to be bringing in the cops on the researcher, it's all a mess worthy of vats of popcorn.
Bonus for multiple crossovers! We gots eevee working the crowd, Dogpatch is being awfully softball for a dude throwing around 'cuck', and on and on. I'm really only scratching the surface here, it's great.
but I'm canadian too!
