The globalists are shutting down Tor access to endchan on PURPOSE! The globalists are scum!

I had a development server breached that I had an old development copy of the Endchan database (without media).

All users are advised to change their passwords ASAP.

Development server was breached used an redis/ssh exploit. Redis was installed and usually ran as a user but recently doing some development work, I accidentally started it up as root to look something up and left it running. Redis then can write to your ssh keys and insert unwanted keys and allow root access. All files in /root and /home were removed and a note was left:

>Hi, please view here: http://pastebin.com/raw/vadfLyDS for information on how to obtain your files!

Luckily I have bandwidth logs on that box and I can see there was nothing transferred out of the box. So my guess is they just deleted the files. The nature in which they left the machine leads me to believe this was an automated attack (plenty of other meaningful data directories were left alone).

The copy of Endchan's data is left untouched on this development server. However the dump that was used to transfer the copy was still likely in the /root directory that was deleted. I will get the date of the data copy as soon as I can do some data recovery on that machine, I estimated the copy to be an early 2016 Q2 dump. This server is now offline.

At Endchan, we want to be as transparent as we possibly can and even though we do not believe anything was leaked, we cannot rule out nothing happen with 100%. And even if we could be certain that nothing was at risk, we still want to report anything of this nature to our users.

I fucked up, I'm sorry for any troubles this may and has caused any of you.

Please let us know any questions you may have.

I messed up during the migration. While waiting for the final database copy, I thought I'd upgrade/patch some servers, unfortunately I upgraded the box I was copying from. And I rebooted it without thinking about it. Now I manage around 20 servers that run hundreds of containers, so keeping track of everything isn't as easy as if I just had a couple. Also in my day job I get paid to professional move websites all the time. I make good money doing it, so I'm not a complete newb but I have no accounting for how I made such egregious error. I had a plan and just made a mistake.

Last year when we got the dedicated server, we built state of the art encryption into it. To the normal internet it looks like a website (unlike anything like Endchan) but with a special certificate our frontend server have, it runs the Endchan site. We split the drive into 3 sections, the camouflage (fake site / web server and relay), the app (lynxchan, megud, other site utilities), and the database. Then we encrypted the app and data drives. I held the keys to app, and Balrog the keys to data. We did have the foresight to give a back up of these password to other people just incase one of us got hit by a bus. Well Balrog and his backup StephenLynx both failed to find the correct password from a year ago.

So the two events combined means we can't access the latest copy of the Endchan data. So where does that leave us, well we had a full copy from 4/19 that we were syncing with the live data during the migration time. When it stop copying, it left the database in an inconsistent state. The mongo repair tool has done a great job recovering what you see;

we have most of posts but are missing a lot of database files (a great example of why you never store images in a database; we should only be missing the new files from last week on).

I fucked up, Balrog fucked up, and StephenLynx doesn't even remember us giving him the password. If just one of 4 events had gone another direction, we would not have been here.

I proposed throwing in the towel. My recent battles with pedospammers has not been fun but Balrog put it well: "we're still one of the only imageboards worth a damn and people need us goddamn it"

I considering just running the board with no content, even thought about switch imageboard software. Balrog said we should take it to a vote and let you guys decide. But to be honest we recovered more than I was expecting and the lynxchan repair process (rebuilding HTML files) is still running (going to take a long time on these older servers).

To be clear why we migrated, our donations levels were so low, we could no longer afford that server. Our previous server was awesome, a full year of uptime (Another reason why we never needed these passwords because the machine never went down).

In retrospect our set up was probably more complex than needed but it was just an attempt to help secure you're guys data the best we could. Our new drives are no longer encrypted.

I love how this website goes down several times every day.
"Communication between the frontend and lynxchan has failed".

fuck im horny dude get in here and fuck me

Why did you give the /sp/ mod special site privileges? That seems like a bad practice to hand out special favors. If you're going to give admin powers to the /sp/ BO then you should be giving them to the /pol/ BO as well.

>make a fresh email so I can make a board here
>use said email when making a board
>email gets spammed with Junk mail and phishing months later

Why did you sell my data Endchan?

can something be done about /news/? it used to be a real news outlet, now it's a fucking alt-right shitspouting extension of /pol/ and these "news" are on the front page

not everyone has right wing beliefs and /news/ being the way it is on the front page is as good as admitting the admins are /pol/cucks

either change the moderation and remove biased posts or remove it from the frontpage