hi my 15 yr old friend is being posted and sexualized in a thread on the agatha2 board, this specific thread, and is causing her harrassment:

https://endchan.org/agatha2/res/17577.html#53732

posts #931 and #932 are the posts in question. I am requesting an admin please delete this content from the thread since she does not want to be posted here and doesnt want to be harrassed. Thank you.

Hi all,
We have some problems on >>>/ziemniachan/
All posts were deleted, except threads. Do you have any idea why this happened?
Is it possible to restore posts from yesterday?
Or where can we report this issue?

Thanks in advance for your support!

Is there a way to post code without getting it fucked up by tags or colors? Just display the text as it was posted without any modifications or interpretation by the chan software.

The code tags do not prevent this.

The owner of endchan.net has configured their website improperly. To protect your information from being stolen, Tor Browser has not connected to this website.

endchan.net uses an invalid security certificate. The certificate expired on March 21, 2019, 9:07 PM. The current time is March 21, 2019, 9:16 PM.

I had a development server breached that I had an old development copy of the Endchan database (without media).

All users are advised to change their passwords ASAP.

Development server was breached used an redis/ssh exploit. Redis was installed and usually ran as a user but recently doing some development work, I accidentally started it up as root to look something up and left it running. Redis then can write to your ssh keys and insert unwanted keys and allow root access. All files in /root and /home were removed and a note was left:

>Hi, please view here: http://pastebin.com/raw/vadfLyDS for information on how to obtain your files!

Luckily I have bandwidth logs on that box and I can see there was nothing transferred out of the box. So my guess is they just deleted the files. The nature in which they left the machine leads me to believe this was an automated attack (plenty of other meaningful data directories were left alone).

The copy of Endchan's data is left untouched on this development server. However the dump that was used to transfer the copy was still likely in the /root directory that was deleted. I will get the date of the data copy as soon as I can do some data recovery on that machine, I estimated the copy to be an early 2016 Q2 dump. This server is now offline.

At Endchan, we want to be as transparent as we possibly can and even though we do not believe anything was leaked, we cannot rule out nothing happen with 100%. And even if we could be certain that nothing was at risk, we still want to report anything of this nature to our users.

I fucked up, I'm sorry for any troubles this may and has caused any of you.

Please let us know any questions you may have.

I'm seeing a bug in the login form.
The message says the login was ok, but then no login session is created, and the login is asked again, and again.
It's basically impossible to login currently.

Could you verify if it's an error isolated to my account or if it happens for everyone else?

- nickname and password are correct
- get login ok message
- no login happens
- it's impossible to manage boards like this

Why isn't the endchan.xyz domain working anymore? I thought endchan was down because I didnt realize I should use endchan.net now. Either make the .xyz domain work again or else you should at least update the twitter and such with the .net domain.