Bitcointalk vs 4chan hacks

[Churchillvv]

Do you remember this game? by dannybrown ?



It portrays and/or explains how much secure the forum is under Theymos administration.

This is actually kind of cool... Can you share the link that this is from, or what you're talking about is from?

Here is the link - https://youtu.be/o4QE9XFY2os?si=-x4RgG-C_2EUS3NB

Good to here Theymos confirmation that Bitcointalk forum has much better security than that of 4chan.
However, we now have to be full aware that personal safety is much better by not posting sensitive things here.

To support that it's clearly stated in the About privacy

It's possible to use bitcointalk.org without submitting any personal info. Use Tor + a throwaway email + a new pseudonym, etc. If you care about preventing personal information from being collected on bitcointalk.org, then preventing this collection is your responsibility.

And was ended with a very satisfying statement "Computer security can never be guaranteed

[Nightwalker(NW)]

What can we do to increase security and prevent Bitcointalk suffering something similar in future?

This is so bad and is my first time hearing about the 4chan forum.
For long now I have been trying to noticed that theymos puts more effort in securing the forum, even spending more money to make sure the security system aren't brute-force than any other thing out there, If you check or noticed you will see that a 2fa method has been to account for additional security to protect personal account, to me i think we have more technical/developers over here who aren't also sleeping exploring different tools to make sure the forum is free from hack or any attack that may arise in the future.
Theymos doesn't sleep about the security of this bitcointalk community that why mixers was also ban immediately when he noticed the forum could be under attack if that continuous over time.

[fillippone]

I assume theymos is doing a great job on what matters.
A new epochtalk look is essential, yet not fundamental.
Preserving the community over the years through forum security is indeed fundamental.

But remember that perfect security, both online and offline,  doesn't exist.
Always assume that the forum can and will be hacked. So behave accordingly.
 

[KingsDen]

I assume theymos is doing a great job on what matters.
A new epochtalk look is essential, yet not fundamental.
Preserving the community over the years through forum security is indeed fundamental.

The forum look has accustomed many of the users here. Majority of the users will reject any other look apart from the one we are used to for many years. Besides, for the past few years, there has been some improvement in the forum functionalities, courtesy of theymos and his team.

But remember that perfect security, both online and offline,  doesn't exist.
Always assume that the forum can and will be hacked. So behave accordingly.
 

You are very correct, which is the reason why theymos does not sound 100% confident that the forum won't be hacked even though he knows alot has been put inplace to secure the forum.

[Cryptoprincess101]

What can we do to increase security and prevent Bitcointalk suffering something similar in future?

Just like the opinion of others, it is almost impossible to guarantee 100% security of our activity on the internet, the only solution will be to equip the forum with some security measures that can resist attack if an attempt is being made so that even if the forum experience hacks in the future, it won't be disastrous and can be restored almost immediately.
        There should be a counter-attack security apparatus to repel any unforeseen attacks that may likely happen in the future. Bitcointalk.org is too large to experience a security breach even though it is unavoidable.
        And also, those developers and bug scientists we have in the forum can also help give Theymos ideas on how to protect the forum from experiencing intense attacks in the future.

(Though long-term, we really all need to be moving to decentralized forums. The world is getting more and more anti-free-speech, and in the not-too-distant future there aren't going to be many "territories of freedom" where free centralized forums can operate.)

That's true Theymos, Decentralized forum will really be the sure way to go because we can't continue to be denied privacy, everyone deserves their own privacy and not to be manipulated against their own will by the government or institutions that have ill-feelings for a particular forum. And thank you Theymos for all you did and doing to make the forum a safer and better environment for us all!

[Ivystar5]

But remember that perfect security, both online and offline,  doesn't exist.

If you toggle down to about Bitcointalk privacy the last variation says below 👇

Computer security can never be guaranteed.

The administrators had to always remind us about that!

[tread93]

What can we do to increase security and prevent Bitcointalk suffering something similar in future?

Why asking this question when Bitcointalk has been able to remain operational since over 15 years ago? Did you think there were no hackers that tried to take over this forum? You are an old member, you know this.

Theymos really tried letting this forum be where it is today.

Yes Theymos and team have done a great job and I'm sure they have really hardened their cyber posture since 2015. Btalk has some pretty serious bounties for finding flaws in the system so they are doing that too. What i do wonder is if there have been any external penetration tests done with remediation and patch work, I'm sure they have been all over it though.

[_BlackStar]

-snip-

Yes Theymos and team have done a great job and I'm sure they have really hardened their cyber posture since 2015. Btalk has some pretty serious bounties for finding flaws in the system so they are doing that too. What i do wonder is if there have been any external penetration tests done with remediation and patch work, I'm sure they have been all over it though.

What is the meaning of external penetration tests - is it some kind of trying to find weaknesses in a security system, or what do you mean?

The admin of this forum have been working hard to improve the security system and not only that - a bug bounty is also provided so that someone who finds a weakness can report it as soon as possible instead of exploiting it for personal gain. Someone may have tried to find a weakness in the security system - but they may not have found it, or theymos have fixed it behind the scenes.

[tread93]

-snip-

Yes Theymos and team have done a great job and I'm sure they have really hardened their cyber posture since 2015. Btalk has some pretty serious bounties for finding flaws in the system so they are doing that too. What i do wonder is if there have been any external penetration tests done with remediation and patch work, I'm sure they have been all over it though.

What is the meaning of external penetration tests - is it some kind of trying to find weaknesses in a security system, or what do you mean?

The admin of this forum have been working hard to improve the security system and not only that - a bug bounty is also provided so that someone who finds a weakness can report it as soon as possible instead of exploiting it for personal gain. Someone may have tried to find a weakness in the security system - but they may not have found it, or theymos have fixed it behind the scenes.

Yes it's basically acting as a threat actor but instead of a free lance hacker it's like an actual cyber firm who specializes in these kinds of tests and they try to exhilarated the external perimeter like the website domain and subdomains and other loopholes in the code etc. Yes I know they do make sure to keep it up to date and there is no question these kinds of tests are performed quite often.