Reddit, Discord, oba 4chan Brigading, Doxxing, ne Deepfake Harassment Campaign: Okusiba Subreddits, AutoMod Regex, ne Cloudflare Wansi w'Olumba Mode¶

Okuzuula nti erinnya lyo, ekitundu kyo, oba bizinensi entono ebadde eteekeddwa ng’oluwuzi olugendererwamu ku kipande ky’ebifaananyi ekitali kya mannya, ekifo eky’okukuba ebikonde, oba ekibiina ky’okukubaganya ebirowoozo eky’obulabe, kizibu kya sipiidi ya maanyi mu by’okwerinda ebya digito n’eby’omubiri. Mu ddakiika ntono nga thread egenderere egenda butereevu, ebikumi n’ebikumi bya akawunti ezikwasaganyizibwa zikola obulumbaganyi obw’omu kiseera kye kimu ku cross-platform: okubooga Discord server yo n’amayengo ga bot-join n’ebintu ebibi mu kukola framing, okuziyiza ekitundu kyo ekya Reddit n’okukozesa obululu n’okuvuma spam, okuteeka ku mukutu gwa AI deepfakes ezitali za kukkiriziganya, okufulumya endagiriro yo ey’awaka n’ennamba z’essimu z’amaka go (doxxing), n’okutongoza Layer-7 HTTP ebooga ku mukutu gwo ogw’obuntu oba ogwa kkampuni. Singa omuntu yenna mu maka go ayolekedde okutiisibwatiisibwa amangu mu mubiri, okutulugunyizibwa n’emmundu, oba okukubira essimu eteeberezebwa okuba ey’okukuba essimu, kuba essimu ey’amangu mu kitundu kyo amangu ddala ng’okozesa ensi yonna yaffe ennamba z’amangu directory, era ogatte ekitabo kino eky’ekikugu eky’okuggala omuggalo n’ekyaffe okutulugunyizibwa ku yintaneeti, okukola doxxing, n’okutulugunya abantu ku mikutu gya yintaneeti, . okulumiriza eby'obulimba okusaasaana, okusazaamu ekibinja ky'abantu, n'omuggalo gwa digito, era Discord server oba okuzzaawo ekikwekweto ky'omukitundu abalungamya.

Okuyimiriza ekikwekweto ekikwasaganyizibwa ku mikutu mingi kyetaagisa okukyusa okuva ku kugerageranya kw’abantu mu ngalo okudda ku kugaana okwetooloola okw’obwengula munda mu ddakiika 15 ezisooka. Ttiimu y'omukubiriza w'abantu tesobola kunyiga butambi bwa kuwera mangu okusinga script ya Python ekyusakyusa proxy ez'okusula ne akawunti ezisuulibwa. Nga okwatagana ne Discord's native Raid Protection ne regex AutoMod filters, okusiba Subreddit yo ku Approved Users n'okufuga Crowd okukakali, okuteeka web domains zo emabega w'okusoomoozebwa kwa Cloudflare "I'm Under Attack" JavaScript ne Turnstile, n'okukwata obujulizi obw'ekyama obukkirizibwa kkooti (WARC eby’okutereka eby’oku mutimbagano ne SHA-256 digests) nga abalumbaganyi tebannasazaamu miguwa gyabwe egy’okukwasaganya, ofuula enkizo yaabwe ey’emirimu n’okuuma obukuumi bwo obw’omubiri.

Kino kikole kati¶

1. Ggala wansi discord server yo mu sikonda 15 ng'okozesa "Pause Invites" ne "Pause DMs." Nywa ku Server Name yo waggulu ku kkono wa Discord -> londa Security Actions (oba Server Settings -> Safety Setup -> Raid Protection) -> kebera byombi Pause Invites ne Pause DMs okumala 24 Hours. Ekiddako, genda ku Enteekateeka za Seva -> Emirimu -> Olukusa Olusookerwako (@everyone) era okyuse OFF Send Messages, . Send Messages in Threads, . Attach Files, . Embed Links, . Add Reactions, . Create Public/Private Threads, era Mention @everyone, @here, and All Roles.
2. Kyuusa ekibiina kyo ekya Reddit (Subreddit) ku "Restricted" oba "Private" era oteeke Crowd Control ku "Strict." Ggulawo Mod Tools -> Community Type era oserenge selector okuva ku Public okudda ku Restricted (abakozesa abakkirizibwa bokka be basobola okuteeka oba okuteesa) oba Private (abakozesa abakkirizibwa bokka be basobola okulaba ekitundu) okusalako oxygen ya brigade. Amangu ago ggulawo Mod Tools -> Safety Filters -> Crowd Control era oteeke byombi Post Level ne Comment Level ku Maximum / Strict, era okole Ban Evasion Filter ne Harassment Filter.
3. Ggyako Cloudflare "Under Attack Mode" era ozibire emikutu gya IP egy'ensibuko obutereevu ku mukutu gwo ogw'obuntu oba ogwa bizinensi. Yingira mu Cloudflare Dashboard, londa domain yo, era okyuse Under Attack Mode okudda ku ON ku Overview quick-actions sidebar. Kino kiwaliriza buli mugenyi okuyita mu kusoomoozebwa okw’okubalirira kwa JavaScript okw’omu makkati n’obulungi bwa browser nga tannatuuka ku web server yo, okuyimiriza HTTP ey’obwengula POST foomu spam, okujjuza credential, n'okukoowa bandwidth nga bafudde mu tracks zaabwe.
4. Kuba essimu ya poliisi y'omu kitundu kyo ey'okusindika abantu abatali ba mangu okuteeka "Swatting / Premise Alert" ekola ku ndagiriro yo ey'obutuuze. Singa abazigu bafulumizza endagiriro yo ey'awaka ku forum oba imageboard, kuba ku layini y'ekitongole kya poliisi mu kitundu kyo ey'okusindika abantu mu mbeera ey'amangu oba etali ya mangu mu bwangu. Nnyonnyola mu bukkakkamu nti oli mukoseddwa ekikwekweto ekikola ennyo ku yintaneeti n’okutulugunyizibwa era saba Premise History Note / Swatting Advisory ku ndagiriro yo ey’omubiri nga kyetaagisa abasindika okukakasa essimu yonna eya 911/999/112 eyawambibwa oba ey’okukuba amasasi mu maka go nga bayita ku nnamba yo ey’essimu nga tebannaba kuteeka mu nkola yuniti ez’obukodyo.
5. Kuuma emiguwa gy'okukwasaganya abalumbaganyi ng'okozesa Archive.today, . Browsertrix / . ReplayWeb.page (WARC), era SHA-256 cryptographic hashing NGA TONNNA kuziloopa kusazibwamu. Imageboard threads (4chan, . Soyjak, . Kiwi Farms, emikutu gya Telegram egy’obufere) auto-prune (404) oba okufuna okusazibwamu abaddukanya emirimu nga bamaze okuloopebwa. Wamba PDF ez'olupapula olujjuvu, ensibuko ya HTML embisi, emitwe gy'okuddamu kwa HTTP, ne... WARC archives amangu ddala ne log their SHA-256 file hashes kale abakuumaddembe ne bannamateeka b’ensonga z’amateeka balina obujulizi obukakasibwa obw’enjegere.
6. Siba ku mikutu gyo egy’empuliziganya, okusazaamu olukalala lw’okunoonya amasimu/endagiriro ez’olukale, era osobozese Verbal Family Safe-Word. Teeka akawunti za Instagram, X (Twitter), Facebook, TikTok, ne LinkedIn ez’obuntu ku Private / Locked, kweka enkalala za mukwano gwo n’abagoberezi, era owe bazadde bo, munno, n’omukozesa Verbal Codeword eky’ekyama baleme kugwa ku AI amasimu ag’amangu agakubiddwa eddoboozi oba email ezijingirire nga zigamba nti ziva gy’oli.

Omuti gw’okusalawo: Okugezesa kampeyini y’ekikwekweto n’okutulugunya abantu okuva ku mikutu egy’enjawulo¶

Kozesa omuti guno ogw’okusunsulamu emirimu mu ddakiika 15 ezisooka okwawula buli kifo ky’okulumba mu nsengeka y’okukulembeza: obukuumi obw’omubiri obusooka, ebifo by’omukitundu eby’okubiri, ebikozesebwa ku mukutu gwa yintaneeti eby’okusatu, n’obujulizi obw’okunoonyereza ku misango mu ngeri ey’okuna.

flowchart TD
    RaidAlert["Coordinated Raid, Doxxing Thread, oba Obulumbaganyi bwa Deepfake Buzuuliddwa"] --> PhysicalCheck{"Endagiriro yo ey’awaka, Essimu, oba ekifo kyo w’okolera Ebadde Doxxed?"}
    PhysicalCheck -->|"Yee: Endagiriro ey’omubiri oba Amaka agagendereddwamu"| PoliceAlert["OMUDDAALA 1: Kuba Layini ya Poliisi y’omukitundu etali ya mangu okuteeka Swatting Premise Alert -> Freeze Credit Bureaus -> Labula Employer HR & Family With Safe-Word"]
    PhysicalCheck -->|"Nedda: Digital Platforms & Ebitundu Bwokka"| PlatformTriage["OMUDDAALA 1: Okuzuula Enkola Ezigendereddwamu (Discord, Reddit, Web Domain, Social Media) ."]
    PoliceAlert --> PlatformTriage
    PlatformTriage --> DiscordNode["DISCORD SERVER: Ssobozesa 'Pause Invites' & 'Pause DMs' -> Strip @everyone Sindika/Attach/Webhook Perms -> Teeka mu nkola AutoMod Regex & Okukakasa Essimu Okusinga"]
    PlatformTriage --> RedditNode["REDDIT SUBREDDIT: Teeka Community ku Restricted/Private -> Okufuga abantu ku Maximum -> Teeka mu nkola AutoMod Account-Emyaka/Karma Gate & Regex Slur/Doxx Filter"]
    PlatformTriage --> WebNode["OMUTWE GW'OMUNTU / KAMPUNI: Ssobozesa Cloudflare 'Under Attack Mode' -> Yongera amateeka ga WAF Geo/ASN/Rate-Limit -> Zingulula Origin Server IP & Lock Contact Forms"]
    DiscordNode --> DeepfakeCheck{"Abalumbaganyi Bateeka Ebifaananyi Ebizito oba Ebitali bya Kukkiriziganya?"}
    RedditNode --> DeepfakeCheck
    WebNode --> DeepfakeCheck
    DeepfakeCheck -->|"Yee: Synthetic NCII oba Okwefuula"| NCIITakedown["Ebifaananyi bya Hash ku StopNCII.org / TakeItDown.ncmec.org -> Fayiro DMCA ey'amangu & Platform NCII Takedowns -> Fayiro Alipoota ya Poliisi"]
    DeepfakeCheck -->|"Nedda: Spam, Okutyoboola erinnya, oba DDoS"| EvidenceLock["Kwamba WARC Archives, Full-Page Screenshots, & SHA-256 Hashes za Source Raid Threads Nga Tonnaba kukola lipoota ku kuggyibwawo"]
    NCIITakedown --> EvidenceLock

Ekitundu 1: Okuggala seva ya Discord mu sikonda 15 (Raid Mode, AutoMod Regex, ne Wick)¶

Omuwuzi gw’ekipande ky’ebifaananyi bwe gusuula enkolagana y’okuyita Discord oba okutunuulira seva y’omukitundu, abazigu bakozesa enkola bbiri ez’omu kiseera kye kimu: abalumbaganyi b’abantu okwegatta okuteeka ebifaananyi ebiwuniikiriza, okukola doxxing data, oba ebintu eby’obulimba eby’okukola fuleemu ya Terms-of-Service, n’ebikozesebwa mu kukola obubonero bwa Python/Golang mu ngeri ey’obwengula nga bikuba okusaba 50 buli sikonda nga bayita mu ba proxy abasula.

1. Ekizibiti kya Discord Emergency Perimeter ekya sekondi 15¶

Kola okunyiga kuno okutuufu okusobola okusiba enzirukanya ya seva amangu ddala:

+-------------------------------------------------------------------------+
|               DISCORD 15-SECOND EMERGENCY RAID LOCKDOWN                 |
+-------------------------------------------------------------------------+
| [00:03s] Server Name -> Security Actions -> [X] Pause Invites (24h)     |
|                                          -> [X] Pause DMs (24h)         |
| [00:08s] Server Settings -> Safety Setup -> Verification Level: HIGHEST |
|          (Requires Verified Phone Number on Discord Account)            |
| [00:12s] Server Settings -> Roles -> @everyone -> Clear Permissions     |
|          (Toggle OFF: Send Messages, Attach Files, Embed Links,         |
|           Add Reactions, Create Threads, Mention @everyone)             |
| [00:15s] Server Settings -> Integrations -> Webhooks -> Delete Unknown  |
+-------------------------------------------------------------------------+

1. Embaga ne munne Pause Invites era Pause DMs:
2. Okuyimiriza okuyita kulemesa buli koodi y'okuyita ey'olubeerera, enkolagana ey'ekiseera, n'ennono yo eya Server Tier 3 Vanity URL (discord.gg/yourname) mu kiseera kye kimu nga tosazaamu biyungo. Raiders nga banyiga link ku imageboard bafuna instant "Invites are currently paused for this server" okugaana.
3. Okuyimiriza DMs kiremesa akawunti ezaaseerera mu seva nga kkufulu tennasindikibwa kusindika bubaka obutereevu obutasabiddwa obulimu malware, gore, oba endagiriro z’amayumba eza doxxed eri abantu b’omu kitundu kyo.
4. Lock Channel-Specific Olukusa Okukyusa (The #general Override Trap):
5. Singa omukutu nga #general alina akabonero ka Green Checkmark (Allow) etekeddwawo ku @everyone ku Send Messages, enkyukakyuka mu mirimu gy’ensi yonna tezijja kusirisa mukutu ogwo. Koona ku ddyo ku mukutu -> Edit Channel -> Olukusa -> @everyone, nyweza ku Emmyuufu X (Deny) ku Send Messages, . Send Messages in Threads, era Add Reactions, era oteeke Slowmode ku Essaawa 6.
6. Okulemesa Reaction Okutulugunyizibwa (Add Reactions & Use External Emoji):
7. Raiders batera okuwandiika ebigambo ebivuma oba doxxing initials wansi #announcements ebiwandiiko nga bakozesa emojis z'ebbaluwa nga chat esibiddwa. Kakasa nti byombi Add Reactions ne ** .Use External Emoji** zikyusiddwa OFF ku @everyone mu nsi yonna ne munda #announcements okusukkulumya.

2. Okukoppa-okuteeka Discord AutoMod Regex Filters (Okuziyiza Doxxing, Slurs, ne Raid Links)¶

Discord's native AutoMod (Server Settings -> Safety Setup -> AutoMod) yeetegereza obubaka ku Discord's backend servers nga tebunalaga mu mboozi. Ne bwe kiba nti akawunti ya sleeper erina olukusa okwogera, AutoMod eziyiza obubaka ku ddaala lya gateway, ewandiika okugezaako ku private yo #mod-log omukutu, era n'ekozesa otomatiki Ekiseera 24-essaawa 24 Timeout.

Tonda custom AutoMod Keyword & Regex Rules (nga okozesa Rust-flavor regular expressions) ku vectors zino ennya ez'okulumba:

Era sengeka etteeka lya Discord eryazimbibwamu Block Mention Spam munda mu Safety Setup -> AutoMod: teeka ekkomo ku 3 unique mentions buli bubaka ne Block Message + 24-Hour Timeout.

3. Okutegeka Emiryango gy’okukakasa ne Bots ezilwanyisa Nuke (Wick, . DoubleCounter, oba Native Onboarding) .¶

Bw’oba olina okuddamu okuggulawo seva yo eya Discord nga kampeyini y’okutulugunya okwokya mpola egenda mu maaso okumala wiiki: 1. Teeka akawunti zonna empya eziyingidde mu Quarantine / Verification Zone eyeetongodde: - Kakasa nti... @everyone role esobola okulaba zero emikutu gy'ekitundu. - Yeetaaga bammemba abapya okuyita oba Discord's native Phone-Verified Onboarding + Server Rules Screening oba bot eyetongodde ey'okukakasa anti-alt/anti-proxy (nga Wick oba DoubleCounter, ezizuula VPN/datacenter ASN proxyes ne flag browser fingerprint alt-accounts) nga tebannafuna @Member omulimu. 2. Twesigangako ku "QR Code Verification" prompt: Jjukiza bammemba bo ng'oyita mu kirangiriro ekissiddwako ppini nti bots ezikakasa ezikkirizibwa tezisaba bakozesa kusika QR code ne Discord mobile app.

Ekitundu 2: Okuggala ekibiina kya Reddit (Subreddit) okulwanyisa okukola brigading ne doxxing¶

Nga subreddit (r/YourCommunity) eyungiddwa okuva ku mukutu ogw’ebweru, subreddit omuvuganya ow’obulabe, oba ekibiina ky’okukubaganya ebirowoozo ebweru w’omukutu, abazigu babooga new ennyiriri ne gore, deepfakes, oba ebikwata ku muntu nga mass-downvoting threads ezikkirizibwa n'okukozesa obubi "Reddit Cares" (u/RedditCareResources) button y'okuloopa okwetuusaako obulabe okutulugunya aba moderators.

1. Engabo ey’amangu eya Subreddit ey’emitendera 4¶

1. Flip Ekika ky'Ekitundu ku Restricted oba Private (Mod Tools -> General Settings -> Community Type):
2. Ekugirwa: Buli muntu akyayinza okusoma ebiwandiiko ebiriwo, okulemesa abazigu okugamba nti baaggyawo ekitundu kyo, ate Abakozesa Abakkirizibwa bokka be basobola okuleeta ebiwandiiko oba endowooza empya.
3. Private: Ekweka ebiwandiiko byonna, comments, n'amannya g'abakozesa moderator ku sidebar okuva ku accounts ezitakkirizibwa.
4. Biggate Crowd Control okutuuka ku Maximum (Mod Tools -> Safety Filters -> Crowd Control):
5. Ggyako Crowd Control for Posts and Comments ku ddaala lya Strict, era okyuse ON Kwata comments ezifugibwa abantu okusobola okwekenneenya. Kino kikwata mu ngeri ey’otoma ebiweereddwayo okuva ku akawunti ezirina karma ya subreddit embi, akawunti za Reddit empya ddala, n’abakozesa abatannaba kwegatta ku subreddit yo.
6. Sobozesa Harassment Filter era Ban Evasion Filter (Mod Tools -> Safety Filters):
7. Teeka Ban Evasion Filter ku Obwesige obwa waggulu + obw'ekigero (Within the last year) era olonde Filter (Hold in Mod Queue) okukwata abazigu abawereddwa nga bawuuta akawunti za alt ezisuuliddwa nga bayita mu kukuba engalo ku kyuma kya Reddit ku ludda lwa seva ne IP telemetry.

2. Koppa-Teeka Reddit AutoModerator Amateeka g'ekikwekweto eky'amangu ekya YAML¶

Ggulawo https://www.reddit.com/r/YOURSUBREDDIT/about/wiki/config/automoderator era oteeke bulooka zino eza YAML waggulu ku nsengeka yo:

---
# RULE 1: EMERGENCY BRIGADE LOCKDOWN GATE (Blocks non-established accounts)
type: any
author:
    account_age: "< 60 days"
    comment_karma: "< 100"
    combined_subreddit_karma: "< 15"
    is_contributor: false
    satisfy_any_threshold: true
action: filter
action_reason: "RAID LOCKDOWN: New account or low karma [{{match}}]"
---
# RULE 2: ANTI-DOXXING & RAID LINK INTERCEPTOR (Silent Removal + Modmail Alert)
type: any
title+body (regex, includes):
    - '\b(?:\+?1[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b'
    - '(?i)\b(?:victim_last_name|victim_street_name|victim_employer)\b'
    - '(?i)(?:kiwifarms|4chan\.org|4channel\.org|soyjak|t\.me/)'
action: remove
action_reason: "DOXXING / RAID LINK INTERCEPTED: [{{match}}]"
modmail_subject: "URGENT: AutoMod Blocked Doxxing / Raid Link by /u/{{author}}"
modmail: "Removed {{kind}} by /u/{{author}} matching [{{match}}]. Permalink: {{permalink}}"
---
# RULE 3: MASS-REPORT BRIGADE PROTECTION (Prevents auto-removal of mod announcements)
type: any
reports: 5
author:
    is_moderator: false
action: filter
action_reason: "High report volume (5+ reports) held for review"
---
# RULE 4: SHADOW-FILTER KNOWN TROLL ACCOUNTS WITHOUT TIPPING THEM OFF
type: any
author:
    name: ["RaiderAccountOne", "RaiderAccountTwo"]
action: remove
action_reason: "Silent shadow-filter on active raid account"
---

3. Okukomya "Reddit Cares" Okukozesa obubi n'okulinnya ku r/ModSupport¶

• Okuziyiza u/RedditCareResources Okutulugunyizibwa: Ggulawo obubaka okuva u/RedditCareResources, nyweza Loopa obubaka buno (obulaga akawunti y'omusasi ow'obulimba olw'okukozesa obubi lipoota), era oddemu STOP.
• Okulinnya ku Reddit Admins: Weereza Modmail ku r/ModSupport (https://www.reddit.com/message/compose?to=/r/ModSupport&subject=Active+External+Brigade+and+Doxxing+Emergency) nga zirina enkolagana eziterekeddwa ku thread y'ekikwekweto eky'ebweru, amannya g'abakozesa/permalinks za brigading 10 ku 20, n'obudde bw'okutandika UTC olwo ttiimu ya Reddit's Safety esobole okukozesa engabo za subreddit brigade n'okuyimiriza ebibinja bya sockpuppet.

Ekitundu 3: Okukuuma omukutu gwo ogw'obuntu oba ogwa bizinensi ne Cloudflare "Under Attack Mode" n'amateeka ga WAF¶

Ekikwekweto bwe kigenderera omutonzi eyeetongodde, munnamawulire, omukugu mu kukola emirimu egy’enjawulo, oba bizinensi entonotono, kumpi bulijjo abalumbaganyi bakyuka ne bagenda ku mukutu gwa yintaneeti ogw’omuntu oba ogwa kkampuni (yourdomain.com). Bagoberera ebigendererwa bisatu: 1. Origin IP Discovery & DDoS: Okukoona omukutu gwo nga tolina mukutu nga oyita mu mataba ga HTTP oba okutuuma ssente ennyingi ezitali za serverless/cloud bandwidth (Denial of Wallet) ku mikutu nga AWS, Vercel, Firebase, oba Netlify. 2. Contact Form / Comment / Checkout Spam: Okubooga email yo inbox, WordPress comments, oba Stripe checkout endpoint (obulumbaganyi obw'okugezesa kaadi obufuula akawunti yo eya Stripe okuyimirizibwa olw'okugaana mu lukujjukujju). 3. WHOIS & DNS History Reconnaissance: Okusekula ebiwandiiko byo eby'ebyafaayo eby'okuwandiisa domain (WHOIS) oba ebiwandiiko bya MX/TXT okuzuula endagiriro yo ey’awaka oba endagiriro yo eya Gmail ey’obuntu.

1. Okukola Cloudflare "Wansi w'embeera y'okulumba" (UAM) mu Sikonda 10¶

Singa DNS nameservers za domain yo zisonga ku Cloudflare (ne ku $0 Free Plan): 1. Yingira mu dash.cloudflare.com era olonde domain yo. 2. Ku mukono ogwa ddyo Ebikolwa eby'amangu ku bbali ku tabu Okutwalira awamu, kyusa Wansi w'Olumba Mode okudda ku ON (oba genda ku Obukuumi -> Ensengeka -> Omutendera gw'Obukuumi -> Ndi Wansi w'Okulumba). 3. Kino kye kikola amangu ddala: Buli mugenyi asaba omuko gwonna ku domain yo akwatibwa ku Cloudflare's global edge network (300+ cities) era n’aweereza omuko ogw’omu makkati ogwa Managed Challenge / JavaScript Proof-of-Work page okumala sekondi 3 ku 5 nga packet emu tennakwata ku web server yo ey’ensibuko. Ebiwandiiko bya Python ebikulu, . curl amataba, scrapers ezitaliiko mitwe, ne DDoS booters eza layisi ziremererwa okusoomoozebwa kuno ku bbali, okusuula omugugu gwo ogwa CPU origin server okudda kumpi zero.

2. Amateeka asatu amakulu aga Cloudflare WAF Custom Rules n’Ekkomo ku Miwendo (Free Tier) .¶

Genda ku Cloudflare Dashboard -> Security -> WAF -> Custom Rules -> Create Rule era oteekewo ebiziyiza bino ebisatu eby'okulongoosa:

Ekiddako, ggulawo Obukuumi -> WAF -> Amateeka agakoma ku miwendo -> Tonda etteeka: - Singa okusaba okuyingira kukwatagana: URI Path contains "/" (Ebidduka byonna) oba Request Method equals POST. - Omuwendo bwe gusukka: 30 requests per 10 seconds buli ndagiriro ya IP. - Oluvannyuma kola: Block (oba Managed Challenge) okumala sekonda 10 (Enteekateeka ya bwereere) oba Essaawa emu (Pro plan).

3. Okubala "Origin IP Leak" (Lwaki Cloudflare Eremererwa Singa Abalumbaganyi Bamanyi IP Yo Entuufu Ya Server)¶

Okuteeka Cloudflare mu maaso g'omukutu gwo (ekire kya Orange Proxied icon mu DNS) ekweka endagiriro ya IP entuufu eya web server yo emabega wa Cloudflare's anycast IPs. Wabula, singa omukutu gwo emabegako gwatambula nga teguliimu Cloudflare, ebikozesebwa nga SecurityTrails, ** .Censys, ne ** .Shodan beera n'ekiwandiiko eky'ebyafaayo eky'enkalakkalira eky'endagiriro ya IP entuufu ey'ensibuko ya web server yo. Raiders banoonya IP yo ey'ebyafaayo ne basindika DDoS traffic butereevu ku server IP yo, nga bayita ddala ku Cloudflare. - Engeri y'okusiba Origin Server yo enkalakkalira: 1. Kakasa buli... A, . AAAA, era CNAME likodi mu Cloudflare DNS erina Ekire kya Orange (Proxied) turned ON. Ssaawo ekintu kyonna ekitali kya proxy (Grey Cloud) subdomains nga direct.yourdomain.com, . ftp.yourdomain.com, oba mail.yourdomain.com ezisonga ku IP y'emu ne web server yo. 2. Saba endagiriro ya IP empya eya Elastic / Floating okuva ku web host yo (AWS EC2, DigitalOcean, Linode, Hetzner, Vultr, oba cPanel host) era ogaba IP empya ku server yo, nga olongoosa... A likodi munda mu Cloudflare. Kubanga IP empya erina zero historical DNS records mu SecurityTrails, abalumbaganyi tebasobola kukizuula. 3. Tegeka firewall ya server yo (ufw, . iptables, oba AWS Security Groups) okukkiriza omwalo 80 era 443 BYOKKA okuva ku Cloudflare's official IPv4/IPv6 CIDR ranges (cloudflare.com/ips) (oba sobozesa Cloudflare Authenticated Origin Pulls mTLS) ne DROP enkolagana endala zonna eziyingira ku ports 80/443.

Ekitundu 4: Okuwona Okutulugunyizibwa mu Deepfake n’Ebifaananyi Ebikoleddwa Ebitali bya Kukkiriziganya (NCII) .¶

Ebikwekweto by’okutulugunya eby’omulembe byeyongera okukozesa enkola z’okubunyisa amawulire eziggule, pulogulaamu ezikyusakyusa ffeesi, ne yingini ezikola amaloboozi okukola: - Ebifaananyi eby'omukwano ebikoleddwa mu ngeri etali ya kukkiriziganya (Deepfake Pornography / NCII) essiddwa ku bipande by’ebifaananyi, Reddit, X, ne Telegram; - Fabricated Voice Recordings oba Fake Chat Screenshots nga bagamba nti eyatulugunyizibwa yakola ebigambo ebimenya amateeka oba ebikomya omulimu, ebizinda abantu ne baweereza email mu bungi eri mukama w’omugenzi oba abawagizi.

1. Okuggyibwawo amangu ddala ebifaananyi eby’omukwano eby’omunda ebya Deepfake (StopNCII.org & TakeItDown) .¶

Singa abazigu bafunye oba nga batiisizza okuteeka ebiwandiiko ebikwata ku by’okwegatta: 1. Okukola ekifaananyi ekikusike eky'omu kitundu hash ku StopNCII.org (abantu abakulu 18+) oba TakeItDown.ncmec.org (abali wansi w’emyaka 18): - Enkola zombi zikola ku fayiro mu kitundu munda mu web browser yo (teteekebwangako ku seeva ez’ebweru) okukola engalo etegeerekeka (PDQ / . TMK hash) okuweereza ku mikutu egyetabye (Meta, Reddit, TikTok, OnlyFans, Pornhub, RedGIFs, Snapchat), okuziyiza mu ngeri ey’otoma okuteekebwa ku mukutu ogukwatagana mu nsi yonna. 2. Kozesa Emikutu egy'amangu egya Platform "NCII" egy'enjawulo: - Buli musingi omukulu gukuuma okukulembeza 24-hour NCII & Synthetic Media Removal Pipeline (laba yaffe... vidiyo ya viral enyooma, ebifaananyi eby’omukwano ebitali bya kukkiriziganya, n’okuggyawo DMCA okulungamya). 3. Fayira okunoonya ku Google "Ebirimu eby'Omuntu Ebitegeerekeka / Ebiwandiikiddwa" Okusaba Okuggya Indexing: - Waayo URLs ezikyaza deepfakes oba doxxed contact info ku Google's Ggyawo ebikwata ku muntu ow'olwatu oba doxxed portal (support.google.com/websearch/troubleshooter/9685456) ne Bing Ebirimu Okuggyawo.

2. Okulwanirira Omulimu Gwo ​​ne Ba Siponsa Ku Maloboozi/Ebifaananyi Ebikoleddwa ("Employer Brigading")¶

Omuwuzi gw'ekikwekweto bwe gutegeka "Employer / Sponsor Email Campaign," abazigu bakubira essimu ekitongole kya kkampuni yo ekya HR, flood Google Maps reviews with 1-star ratings (laba okukwasaganya 1-star review extortion n'okulinnyisa platform), era n’owandiika ebifaananyi ebijingirire oba ebitundu by’amaloboozi ebya AI eri maneja wo. - Pre-empt the brigade with a calm, 4-sentence HR / Legal briefing NGA email z'abazigu tezinnatuuka: - Sisinkana mu bwangu ne HR, Corporate Security, ne Direct Supervisor wo. - Waayo mu bufunze ebikwata ku bibaddewo eby'olupapula 1 nga mulimu: (1) Ennamba y'okulabula kwa Poliisi / Premise Alert, (2) Ebifaananyi ebikyusiddwa ku screens of the attackers' thread nga biragira bammemba "okuyita mukama waabwe / okuweereza screenshots ez'ebicupuli," ne (3) Saba nti IT essa mu kalantiini okumala akaseera emails ez'ebweru ezirimu erinnya lyo n'okuggyawo ekyongezeddwayo mu public directory.

Ekitundu 5: Okukuuma obujulizi obw’okunoonyereza ku misango obukkirizibwa kkooti (WARC eby’okutereka ebyafaayo n’... SHA-256 hashes) .¶

Okutegeeza ku thread y’ekikwekweto okusazaamu nga tonnakwata bujulizi bwa forensic, oba okukuba ebifaananyi byokka ebisaliddwako, kinafuya okuyita mu biseera eby’omu maaso kubanga bannamateeka b’abawawaabirwa bagamba nti ebifaananyi by’oku ssirini bisobola okukyusibwa nga biyita mu browser Inspect Element. Goberera kino 3-Step Digital Forensics Preservation Protocol nga tonnaba kukola wuzi ya kikwekweto 404s:

1. Wamba ekikwatagana ne RFC WARC (Web ARCive) Fayiro Mu Kitundu¶

OMU .warc oba .wacz fayilo (ISO 28500 standard) ewandiika okusaba kwa HTTP okubisi, emitwe gy'okuddamu, olujegere lwa satifikeeti za TLS, DOM, n'emikutu egyayingiziddwa mu kibinja ekirabika ng'okukyusakyusa: 1. Teeka ekifo ekiggule ArchiveWeb.page okugaziya nga Webrecorder (webrecorder.net) mu Chromium/Chrome. 2. Tandika okukwata, tikka thread ya raid (ng’oyita mu VPN kale IP yo ey’awaka teyingizibwangako bifaananyi ebiteekeddwamu), genda waggulu okutuuka wansi olwo comments zonna n’emikutu gy’amawulire okutikka, n’onyiga Stop -> Export as .wacz oba .warc.gz. 3. Teeka endabirwamu ey'omuntu ow'okusatu eyetongodde eriko sitampu y'obudde ku archive.today (archive.ph) ne ** .web.archive.org/save**.

2. Okukola n’okussaako Timestamp a SHA-256 Okugaaya ebiwandiiko mu ngeri ey’ekikugu¶

Amangu ago okubala ** .SHA-256 cryptographic hash** eyayo .wacz archive, ebiwandiiko bya PDF eby’olupapula olujjuvu, ne Raw Audit Logs: - Linux / macOS: Omuntu w'abantu: sha256sum raid_evidence.wacz full_thread.pdf > evidence_hashes.txt - Eddirisa PowerShell: Get-FileHash .\raid_evidence.wacz -Algorithm SHA256 - Email evidence_hashes.txt eri ggwe kennyini ng'oyita mu muwa assa omukono ku mitwe ne DKIM (nga Gmail oba Proton Mail) okukakasa eri owookubiri nga eyo yennyini 64-ennukuta SHA-256 digest yaliwo.

3. Ggyayo ID za Akawunti za Platform ez’enkalakkalira (Si Kulaga Mannya) .¶

Bulijjo wandiika ebimanyisa database ebitakyukakyuka: - Discord: Ssobozesa Enteekateeka z'omukozesa -> ez'omulembe -> Developer Mode, koona ku ddyo ku raiders n'obubaka, n'onyiga Copy User ID / Copy Message ID (18-to-19-digit Snowflake ID). - Reddit: Teeka comment mu bujjuvu permalink era /u/username nga tonnaggyawo post. - Ebitundu ebikyamu: Okubuuza lookup.icann.org okuzuula Omuwandiisi wa Domain (abuse@namecheap.com, . abuse@tucows.com) ne Omuwa Okukyaza ku Mitendera emitongole egy'Empeereza Doxxing Takedowns.

Ennamba z’amangu mu bitundu n’ebiragiro by’okukuuma amateeka¶

Bwe brigading ku yintaneeti egenda ekula okutuuka ku doxxing, swatting threats, credible okutiisatiisa okutta, non-consensual deepfake pornography (NCII), oba okuggya ssente, kwataganya ebitongole bino ebitongole:

• United States: Kuba 911 okufuna akabi ak'omubiri mu bwangu. Kuba poliisi y'omu kitundu kyo ennamba y'okusindika etali ya mangu okuteeka Premise Alert / Swatting Warning ku ndagiriro yo ey'obutuuze mu... CAD database. Fayira omusango gw’okulondoola ku mikutu gya yintaneeti ogwa federo (18 U.S.C. § 2261A) ne DDoS (18 U.S.C. § 1030) okwemulugunya n'ekitongole kya FBI Internet Crime Complaint Center (ic3.gov), n’okuloopa ku kukozesebwa kw’abaana abato eri NCMEC CyberTipline (report.cybertip.org, . 1-800-843-5678).
• Canada: Kuba 911 ku mbeera ez'amangu oba layini yo eya poliisi ya munisipaali etali ya mangu okufuna Swatting Address Flag. Loopa okutulugunyizibwa mu bumenyi bw’amateeka (Criminal Code s. 264) n’ebifaananyi eby’omukwano ebitali bya kukkiriziganya (s. 162.1) eri poliisi y’omu kitundu ne Canadian Anti-Fraud Center (1-888-495-8501).
• United Kingdom: Kuba 999 mu mbeera ey'amangu oba 101 (poliisi etali ya mangu) okuwandiika omusango gw'okutulugunyizibwa oba Online Safety Act 2023 deepfake offense. Loopa DDoS/okuggya ssente ku Action Fraud (actionfraud.police.uk, . 0300 123 2040) era otuukirira Revenge Porn Helpline (0345 6000 459) oba Ensimu y'eggwanga ey'obuyambi mu kulondoola (0808 802 0300).
• Omukago gwa Bulaaya: Kuba 112 okufuna mu mbeera ez'amangu. Waayo ebirango eby’amangu ebikwata ku bimenya amateeka n’okulondoola ku mikutu gya yintaneeti wansi w’etteeka lya EU Digital Services Act (DSA) era oloope mu kitongole kya poliisi y’eggwanga yo ekikola ku bumenyi bw’amateeka ku mikutu gya yintaneeti.
• Australia ne New Zealand: Mu Australia, kuba 000 (ez’amangu) oba 131 444 (poliisi si ya mangu), ssaayo okwemulugunya kw’okuggyibwawo okumala essaawa 24 eri eSafety Commissioner (esafety.gov.au), era oloope obulumbaganyi ku mikutu gya yintaneeti eri ReportCyber ​​(1300 292 371). Mu New Zealand, kuba 111 (ez’amangu), 105 (ezitali za mangu), era tuukirira Netsafe (netsafe.org.nz, . 0508 638 723).
• Asia-Pacific: Mu Buyindi, kuba ku 112 (ez’amangu) oba 1930 (essimu eyamba ku bumenyi bw’amateeka ku mikutu gya yintaneeti) ofele ku cybercrime.gov.in. Mu Singapore (999) ne Japan (110), tuukirira ebitongole bya poliisi y’eggwanga eby’oku yintaneeti; laba dayirekita yaffe mu bujjuvu ku ennamba z’amangu.

Ebibuuzo ebitera okubuuzibwa¶

Lwaki silina kukyalira oba kuddamu ku imageboard oba forum thread e doxxing?¶

Okukyalira oba okuddamu thread y’ekikwekweto eky’obulabe kikosa ekifo kyo eky’obukodyo n’obukuumi bwo obw’ekikugu. Ekisooka, ebitundu ebikola ebikwekweto bikola ku by’enfuna eby’okufaayo: ekifo kyonna eky’okwekuuma, obusungu, oba okwegayirira kikakasa nti obulumbaganyi bukola era kiyingiza amakumi g’abantu abalala abeetabye mu kampeyini okumala emyezi. Ekyokubiri, emikutu mingi egy’ekikwekweto egy’abantu ab’okusatu n’emikutu gy’ebifaananyi giteekamu ppikisi ez’okulondoola ez’ebweru oba emikono gy’enkiiko egyategekebwa ku seeva ezifugibwa abalumbaganyi; okutikka omuko okuva ku Wi-Fi yo ey’awaka nga tolina VPN kiraga mangu endagiriro yo eya IP ey’okubeera, ISP, n’engalo ya browser eri omukozi wa seva.

Nkuuma ntya amaka gange okuva ku bulumbaganyi bwa "Swatting" singa endagiriro yange ey'omubiri yafuluma ku mutimbagano?¶

Kuba ku nnamba y’ekitongole kya poliisi mu kitundu kyo ey’okusindika abantu mu ngeri etali ya mangu leero osabe okwogera n’omulabirizi w’okusindika oba Watch Commander. Nnyonnyola bulungi nti endagamuntu yo n'endagiriro yo gy'obeera byafulumizibwa ku mutimbagano gye buvuddeko ekibiina ekitulugunya abantu ku mikutu gya yintaneeti era saba nti "Swatting Advisory / Premise Alert Note" eteekebwe ku ndagiriro yo mu database yaabwe eya Computer-Aided Dispatch (CAD). Waayo ennamba yo ey’essimu n’ennamba y’omu maka ey’okubiri olwo singa omuntu atamanyiddwa mannya ng’akozesa VoIP relay agamba nti embeera y’okuwambibwa oba amasasi gagenda mu maaso ku ndagiriro yo, abasindika bamanyi okusooka okukuba essimu yo ekakasiddwa era bategeeze abaserikale abaddamu nga tebannasemberera.

Njawulo ki eri wakati w'okuteeka Subreddit ku "Restricted" okusinziira ku "Private" mu kiseera ky'ekikwekweto?¶

Okuteeka subreddit ku "Restricted" kikuuma ebiwandiiko byonna ebiriwo n'ebiteeso nga bisomebwa mu lujjudde buli muntu ku yintaneeti, ate nga kiziyiza omuntu yenna atali ku lukalala lwo olw'Abakozesa Abakkirizibwa (oba alemererwa ebisengejja byo ebya AutoModerator) okukola ebiwandiiko oba ebigambo ebipya. Okuteeka subreddit ku "Private" kisibira ddala oluggi olwo abakozesa abatakkirizibwa balabe landing screen yokka era tebasobola kulaba biwandiiko, comments, oba olukalala lw'amannya g'abakozesa moderator ku sidebar. Londa "Ezikugirwa" bw'oba oyagala ebirimu ebiyamba mu kitundu kyo bibeere ku mutimbagano nga balumwa enjala abalumbaganyi obusobozi bw'okuteeka, oba londa "Eky'ekyama" singa abazigu basika emiguwa gyo era nga batunuulira bammemba ssekinnoomu n'abakulembeze okusinziira ku linnya ly'omukozesa.

Lwaki omukutu gwange gwakyagenda wansi nga mmaze okutandika Cloudflare "Under Attack Mode"?¶

Singa omukutu gwo gusigala nga guyitiridde oluvannyuma lw'okukola Cloudflare "Under Attack Mode," abalumbaganyi bayinza okuyita ku Cloudflare yonna nga basindika entambula butereevu ku endagiriro ya IP entuufu eya Origin eya web server yo (gye baasanga mu biwandiiko bya DNS eby'ebyafaayo ku SecurityTrails oba Shodan, oba nga bayita mu unproxied `mail.` oba `dev.` ekitundu ekitono). Okuyimiriza obulumbaganyi obutereevu okutuuka ku nsibuko, kakasa nti buli likoda ya DNS esonga ku seva yo erina Orange Cloud (Proxied) ekoleddwa, saba omugabi wo ow’okukyaza okugaba endagiriro ya IP empya ddala ku seva yo, era osengeke firewall ya seva yo (`ufw` oba ebibinja by’ebyokwerinda) okusuula emikutu gyonna egiyingira ku port 80 ne 443 okuggyako okuva ku Cloudflare’s official IP ranges (`cloudflare.com/ips`).

Discord oba Reddit esobola okuzuula nga raider awereddwa akola akawunti ya alt empya ddala ku VPN?¶

Yee, bw'osobozesa layers z'obukuumi enzaaliranwa ezisinga obunene ku platform. Ku Discord, okuteeka Verification Level ku "Highest (Must have a verified phone on their Discord account)" kiyimiriza okukola botnet eyesigamiziddwa ku VPN kubanga buli akawunti yeetaaga ennamba ya SIM ey'enjawulo etali ya VoIP, era okugatta kino ne anti-alt bots nga DoubleCounter oba Wick kikwata engalo za browser/hardware ezigabibwa. Ku Reddit, okutandika "Ban Evasion Filter" munda mu Mod Tools -> Safety Filters kikozesa Reddit's internal client telemetry, app installation IDs, ne browser fingerprinting okussaako bendera mu ngeri ey'otoma n'okukwata ebigambo okuva ku akawunti empya ezaatondebwawo ez'abakozesa abaali bawereddwa emabegako ne bwe bakyusa endagiriro za IP.

Nkakasa ntya poliisi oba kkooti nti screenshots za raid thread esaziddwamu bituufu so si bijingirire?¶

Mu kifo ky’okwesigamira ku bifaananyi ebyangu ebisaliddwa ku screen, kwata thread ya raid live ng’okozesa Webrecorder ey’ensibuko enzigule `ArchiveWeb.page` browser extension, efulumya ebweru ISO-omutindo `.wacz` / . `.warc` archive erimu emitwe gy'okuddamu kwa HTTP embisi, emikono gya server TLS, n'eby'obugagga bya DOM ebitakyusiddwa. Amangu ago dduka `sha256sum` (oba `Get-FileHash -Algorithm SHA256` ku Windows) ku `.wacz` fayiro n’ebiwandiiko bya PDF eby’olupapula olujjuvu, email hash ya cryptographic evuddemu ey’ennukuta 64 gy’oli ng’oyita mu muwa email alina omukono gwa DKIM okuteekawo timestamp etakyuka, era n’okutereka endabirwamu y’omuntu ow’okusatu ku `archive.today`.

Ebiragiro ebikwatagana nabyo¶

• Discord server oba community raid: Obubonero bwa bot obukoseddwa, webhook spam, n'okuzzaawo audit-log
• Okutulugunya abantu ku yintaneeti, okukozesa doxxing, n’okutulugunya abantu ku mikutu gya yintaneeti
• Okulumiriza eby’obulimba okusaasaana, okusazaamu ekibinja ky’abantu, okuzimba abakozesa, n’omuggalo gwa digito
• Vidiyo ya viral etyoboola erinnya, ebifaananyi eby’omukwano ebitali bya kukkiriziganya, n’okuggyawo DMCA
• Okuloopa ebintu ebimenya amateeka era eby’obulabe ku yintaneeti
• Ennamba z’amangu

Ensonda n’obulagirizi obutongole¶

• Ekifo eky'obukuumi bw'obutakwatagana (discord.com/safety): Okukuuma Server Yo Okuva Ku Raids (Safety Setup, . Pause Invites & DMs, . Verification Levels, era AutoMod Ebiwandiiko bya Rust Regex).
• Ekifo ekiyamba omukubirizi wa Reddit (support.reddithelp.com): Okuddukanya okulinnya kw'ebidduka n'ebibinja by'ebidduka ebitasuubirwa (Crowd Control, . Ban Evasion Filter, . Harassment Filter, era AutoModerator Ekiwandiiko ekijjuvu ekya YAML).
• Ebiwandiiko bya cloudflare (developers.cloudflare.com): Okuddamu Obulumbaganyi bwa DDoS (Under Attack Mode, Amateeka ga WAF Custom, Amateeka agakoma ku miwendo, n'okukuuma Origin Servers ne Authenticated Origin Pulls).
• StopNCII.org (SWGfL / UK Revenge Porn Helpline) & NCMEC Kitwale Wansi (takeitdown.ncmec.org): Client-Side Perceptual Hashing Protocols ku bifaananyi eby'omukwano ebitali bya kukkiriziganya n'okukola Deepfakes ezikoleddwa.
• Ekitongole ky'ebyokwerinda ku mikutu gya yintaneeti n'ebizimbe (CISA) & FBI Internet Crime Complaint Center (ic3.gov): Okukendeeza ku bulumbaganyi bwa Distributed Denial of Service (DDoS), Doxxing Defense, n'okukuuma obujulizi bwa Digital Forensic (ISO 28500 WARC & FIPS 180-4 SHA-256).