this post was submitted on 12 Feb 2025
45 points (95.9% liked)

Comradeship // Freechat

2258 readers
89 users here now

Talk about whatever, respecting the rules established by Lemmygrad. Failing to comply with the rules will grant you a few warnings, insisting on breaking them will grant you a beautiful shiny banwall.

A community for comrades to chat and talk about whatever doesn't fit other communities

founded 3 years ago
MODERATORS
 

Hexbear.net is probably going to be sold to a complete stranger, and this is a big OpSec issue because there will be rare visitors who can be honeypotted into a malicious Hexbear clone. I think we need to request all mobile Lemmy apps to ban hexbear on the client code side. Or at least add the code to alert anyone connecting to Hexbear.net that it is not safe to visit this domain anymore

top 11 comments
sorted by: hot top controversial new old
[–] [email protected] 9 points 1 day ago

One of the highest bidders is literally peepee, I assume this is a funny joke from someone who intends to bet infinite amounts and 100% does not intend to pay up

[–] [email protected] 12 points 1 day ago

Most likely the dork who keeps bidding higher is a crypto fanboy. Hexbear is also the name of a shitcoin.

[–] [email protected] 18 points 1 day ago (1 children)

We don't know anyone would bother to make a malicious clone. Most likely some anarchist or liberal (heh) will buy it and do something silly like put an anti-ML screed or some NATO propaganda or something else simple there to "troll the tankies" so all this talk is a bit premature.

Also I wouldn't count on all lemmy apps to necessarily cooperate. There have been other instances that have gone offline permanently for instance, is there any precedent to banning closed instances to prevent re-use? If not that would need to be discussed as an official suggested lemmy best practice. Otherwise the app devs, most of whom are probably not that sympathetic to places like that if not potentially outright hostile are unlikely to comply.

Personally I think you're begging to open a whole can of worms proposing app-side site-bans. What's to stop a liberal dev of a big lemmy mobile client from just adding "tankie" domains to prevent tankies from using their app? Once you plant the idea that it's necessary to maintain a ban-list and do so, the temptation to abuse it is immediately there whereas right now it would be at least a little hassle.

[–] [email protected] 8 points 1 day ago

Not a site ban. Just put a warning that the domain changed its owner in the past or can be malicious

[–] [email protected] 9 points 1 day ago* (last edited 1 day ago) (1 children)

Should be a post about how much it is towards the end of the auction. Could reasonably get it if it's below a thousand; depending on the situation in the coming weeks.

[–] [email protected] 7 points 1 day ago* (last edited 21 hours ago)

1921 currently lol

Edit: 2345

[–] [email protected] 6 points 1 day ago (1 children)

Very good point.

I'm also curious to know if this means anything with regards to registration data.

[–] [email protected] 10 points 1 day ago (1 children)

TL;DR unless the shitlib did a Mission Impossible style heist, all the registration data is just on someone's server, likely in a massive data center wherever they were paying to host the site from. It's probably encrypted (well, it should be) and effectively inaccessible to anyone without the proper keys to access it.

The domain name is just the domain name

When you type in a domain name your DNS resolves that name to an IP address

Without dragging this out overly much, it's like someone stole your phone number. Not your phone.

When people call your stolen number they expect that Illuminati answers. The thief could fake being you, if they were good enough and wanted to.

But they don't have your data. That resides on your phone. The server(s) that were being used to host hexbear, to leave the analogy behind.

There's currently nothing to worry about data theft side of things.

However, with minimum due respect, whoever managed to let the domain registration expire is a top tier... dingus. I honestly don't even know how they let that happen. 🤷‍♂️

[–] [email protected] 8 points 1 day ago (2 children)

The domain can turn into a honeypot to connect IPs to real usernames

[–] [email protected] 12 points 1 day ago

Sure. Although that means very little considering most people have dynamic IPs. You also can't do anything with an IP... not much anyway. Assuming they even grab a long term dynamic IP (some ISPs rarely change the IP, this is true) it only gives them your generalized geolocation which is often off by hundreds of miles. And your ISP, although that isn't always clear either. It's not like an ip tracing to your home directly. That would make literally every single connection you make to any website a security risk. My point being, if your personal security risk levels prohibits connections to websites... this is just another drop in a bucket.

I'm not trying to be flippant here or overly dismissive. I just think this isn't as big of a concern as some are imagining. I agree generally something should be done to alert users that the website is no longer "safe" or "genuine." Beyond that, barring a lemmy decision about how to handle expired/stolen domains, not much else can be done. 🤷‍♂️

Maybe see if someone can add it to a large Adblock list so that ublock, etc. pick it up as "potentially dangerous."

That's assuming the hexbear admin team isn't able to snag it. Last I saw it's like ~$700. There's absolutely some IT nerd with a bunch of cash who might buy it from the auction and gift it to hexbear. Who knows. There's many more shitty NATO IT libs who would buy it and sit on it for years just to pretend they "owned the tankies."

Ultimately I find it hard to not find a lot of fault in the admins of hexbear for letting this go for months and months. They should've begun migration to a new domain as soon as the old admin/owner disappeared.

[–] [email protected] 3 points 22 hours ago

Honestly if your using a heavily commie site and not taking opsec precautions to hide your real IP then they already know it.