Reddit, Discord, kapena 4chan Brigading, Doxxing, and Deepfake Harassment Campaign: Locking Subreddits, AutoMod Regex, ndi Cloudflare Under Attack Mode¶

Kuzindikira kuti dzina lanu, dera lanu, kapena bizinesi yaying'ono yaikidwa ngati chandamale pa bolodi la zithunzi, pagulu la anthu oukira, kapena gulu lochezera lankhanza ndizovuta kwambiri pa digito komanso pachitetezo chathupi. Pakangotha ​​mphindi zochepa chabe kuchokera pomwe ulusi womwe wawunikira ukupita, mazana a maakaunti olumikizidwa amawononga nthawi imodzi: kusefukira seva yanu ya Discord ndi mafunde olumikizana ndi bot ndi zinthu zoyipa, ndikusokoneza gulu lanu la Reddit ndikusokoneza mavoti ndi kusokoneza sipamu, kuyika zozama za AI zosavomerezeka, kufalitsa manambala a foni yanu, kufalitsa manambala a foni yanu ndi HTTP. kusefukira motsutsana ndi tsamba lanu laumwini kapena lakampani. Ngati wina aliyense m'banja mwanu akukumana ndi ziwopsezo, kuzunzidwa ndi zida, kapena kukuyimbirani foni, imbani thandizo ladzidzidzi lakwanu nthawi yomweyo pogwiritsa ntchito dziko lathu lapansi. manambala angozi chikwatu, ndikuphatikiza kalozera waukadaulo wotseka ndi wathu kuzunza anthu pa intaneti, kuzunza anzawo pa intaneti, kuzunza anzawo pa intaneti, kunamizira zabodza, kuletsa gulu la anthu, ndi kutseka kwa digito,ndi Discord seva kapena kubwezeretsedwa kwa anthu ammudzi otsogolera.

Kuyimitsa kuukira kogwirizana kwa nsanja zambiri kumafuna kuti musinthe kuchoka pamanja kupita ku kukanidwa kozungulira mkati mwa mphindi 15 zoyambirira. Gulu loyang'anira anthu silingathe kudina mabatani oletsa mwachangu kuposa ma proxies ozungulira a Python ndi maakaunti otayidwa. Mwakuchita nawo zosefera za Discord's Raid Protection ndi regex AutoMod, kutseka Subreddit yanu kwa Ogwiritsa Ntchito Ovomerezeka ndi Ulamuliro Wambiri wa Anthu, ndikuyika madera anu kumbuyo kwa Cloudflare's "I'm Under Attack" JavaScript ndi Turnstile zovuta, ndikugwira umboni wovomerezeka wa khothi (WARC web archives ndi SHA-256 digests) owukira asanachotse ulusi wolumikizana, mumalepheretsa mwayi wawo wogwirira ntchito ndikuteteza chitetezo chanu.

Chitani izi tsopano¶

1. ** Tsekani seva yanu ya Discord mumasekondi 15 pogwiritsa ntchito "Imani Kaye Kuyitanira" ndi "Imitsani ma DM."** Dinani Dzina la Seva ** yanu pamwamba kumanzere kwa Discord -> sankhani Zochita Zachitetezo (kapena Zikhazikiko za Seva -> Kukhazikitsa Chitetezo -> Kutetezedwa Kwachiwopsezo) -> fufuzani zonse *Imani Pang'onopang'on**4 Kuyitanira * Kuyitanira * * Ho . Kenako, pitani ku **Zikhazikiko za Sa -> Maudindo -> Zilolezo Zosasinthika (@everyone) ndikusintha ZIMALI Send Messages, Send Messages in Threads, Attach Files, Embed Links, Add Reactions, Create Public/Private Threads,ndi Mention @everyone, @here, and All Roles.
2. Sinthani gulu lanu la Reddit (Subreddit) kupita ku "Zoletsedwa" kapena "Zachinsinsi" ndikukhazikitsa Kuwongolera kwa Anthu Kukhala "Okhwima." Tsegulani Mod Tools -> Mtundu wa Community ndipo tsitsani chosankha kuchokera ku Public kupita ku Zoletsedwa (ogwiritsa ntchito ovomerezeka okha ndi omwe angatumize kapena kuyankhapo) kapena Pachinsinsi (ogwiritsa ntchito ovomerezeka okha ndi omwe angawone gululo) kuti adule gulu la brigade. Tsegulani nthawi yomweyo **Zida Zamakono -> Zosefera Zachitetezo -> Kuwongolera Anthu ** ndikukhazikitsa zonse Post Level ndi Mlingo wa Ndemanga ku Maximum / Strict, ndikuyambitsa ** Zosefera Zoletsa ** ndi ** Zosefera Zozunza **.
3. Yatsani Cloudflare "Under Attack Mode" ndikuletsa kulumikizidwa kwa IP mwachindunji patsamba lanu laumwini kapena labizinesi. Lowani mu Cloudflare Dashboard, sankhani dera lanu, ndikusintha Pansi pa Attack Mode kuti ** ON** pa Overview Quick-actions sidebar. Izi zimakakamiza mlendo aliyense kuti adutse pulogalamu ya JavaScript yapakati komanso zovuta za msakatuli wanu asanafike pa seva yanu yapaintaneti, ndikuyimitsa HTTP yokhazikika. POST kupanga sipamu, kuyika mbiri, ndi kutopa kwa bandwidth akufa m'mayendedwe awo.
4. Imbani foni pa desiki losatumizira zadzidzidzi apolisi kuti ayike "Swatting / Premise Alert" yokhazikika pa adilesi yomwe mukukhala. Ngati zigawenga zasindikiza adilesi yakunyumba kwanu pabwalo lamilandu kapena pa bolodi la zithunzi, imbani foni adipatimenti ya apolisi m'dera lanu kapena chingwe chotumizira anthu mwadzidzidzi. Fotokozani modekha kuti ndinu amene mwachitiridwa chipongwe pa intaneti komanso kuzunzidwa ndipo pemphani ** Premise History Note / Swatting Advisory** pa adilesi yanu yomwe ikufuna kuti otumiza atsimikizire aliyense wogwidwa 911/999/112 kapena kuyimbira foni komwe mukukhala kudzera pa nambala yanu yam'manja musanatumize mayunitsi anzeru.
5. ** Sungani ulusi wolumikizana ndi omwe akuukira pogwiritsa ntchito Archive.today, Browsertrix / ReplayWeb.page (WARC), ndi SHA-256 cryptography hashing MUSANAMENE kuti afafanizidwe.** Ulusi wazithunzi (4chan, Soyjak, Kiwi Farms, njira zachabechabe za Telegraph) kudulirani zokha (404) kapena kufufutidwa ndi ogwiritsa ntchito atanenedwa. Jambulani ma PDF amasamba athunthu, khodi ya HTML yaiwisi, mitu ya mayankho a HTTP, ndi WARC archives yomweyo ndi kulemba awo SHA-256 file hashes kotero kuti azamalamulo ndi maloya a boma ali ndi umboni wotsimikizika wotsimikizira kuti ali mndende.
6. ** Tsekani mbiri yanu yapa social media, chotsani mindandanda yamafoni/maadiresi, ndikuyambitsa Mawu Otetezedwa Pabanja.** Khazikitsani akaunti zanu za Instagram, X (Twitter), Facebook, TikTok, ndi LinkedIn kuti zikhale Zachinsinsi / Zotsekedwa, bisani mndandanda wa anzanu ndi otsatira anu, ndikupatseni makolo anu, okondedwa anu, ndi abwana anu chinsinsi Ndimakutumizirani maimelo kapena kuyimbira foni mwadzidzidzi kunena kuti akuchokera kwa inu.

Mtengo wachigamulo: Kuyambitsa kampeni yolumikizirana ndi kuzunza anthu¶

Gwiritsani ntchito mtengo woyeserera uwu mkati mwa mphindi 15 zoyambira kuti mukhazikitse malo omenyera nkhondo motsogola: chitetezo chakuthupi choyamba, mapulatifomu am'deralo, chachitatu, zomangamanga, ndi umboni wachinayi.

flowchart TD
    RaidAlert["Coordinated Raid, Doxxing Thread, kapena Deepfake Attack Apezeka"] --> PhysicalCheck{"Kodi Adilesi Yanu Yanyumba, Foni Yanu, Kapena Malo Antchito Akusokonezani?"}
    PhysicalCheck -->|"Inde: Adilesi Yako kapena Banja Lolunjika"| PoliceAlert["CHOCHITA 1: Itanani Apolisi Omwe Siangozi Zadzidzidzi Kuti Ayike Chidziwitso cha Swatting Premise -> Freeze Credit Bureaus -> Chenjezani Olemba Ntchito HR & Banja Ndi Safe-Word"]
    PhysicalCheck -->|"No: Mapulatifomu A digito & Madera Pokha"| PlatformTriage["CHOCHITA 1: Dziwani Mapulatifomu Omwe Akuwafunira (Discord, Reddit, Web Domain, Social Media)"]
    PoliceAlert --> PlatformTriage
    PlatformTriage --> DiscordNode["DISCORD SERVER: Yambitsani 'Imitsani Maitanidwe' & 'Imitsani Ma DM' -> Mangani @aliyense Tumizani / Gwirizanitsani / Webhook Perms -> Ikani AutoMod Regex & Kutsimikizira Kwafoni Kwapamwamba"]
    PlatformTriage --> RedditNode["REDDIT SUBREDDIT: Khazikitsani Gulu Kuti Likhale Loletsedwa / Lachinsinsi -> Kulamulira Kwaunyinji Kufikira Pazipita -> Tumizani AutoMod Account-Age/Karma Gate & Regex Slur/Doxx Sefa"]
    PlatformTriage --> WebNode["WEBUSAITI YABWINO / COMPANY: Yambitsani Cloudflare 'Munjira Yowukira' -> Onjezani Malamulo a WAF Geo/ASN/Rate-Limit -> Sinthani Seva Yoyambira IP & Lock Mafomu Olumikizirana"]
    DiscordNode --> DeepfakeCheck{"Kodi Owukira Amatumiza Zithunzi Zozama Kapena Zosagwirizana?"}
    RedditNode --> DeepfakeCheck
    WebNode --> DeepfakeCheck
    DeepfakeCheck -->|"Inde: Synthetic NCII kapena Kutsanzira"| NCIITakedown["Zithunzi za Hash ku StopNCII.org / TakeItDown.ncmec.org -> Fayilo Emergency DMCA & Platform NCII Kutsitsa -> Lipoti la Apolisi"]
    DeepfakeCheck -->|"Ayi: Spam, Defamation, kapena DDoS"| EvidenceLock["Gwirani Zakale za WARC, Zithunzi Zatsamba Lonse, & SHA-256 Hashes of Source Raid Threads Musananene Kuti Muchotsedwe."]
    NCIITakedown --> EvidenceLock

Gawo 1: Kutseka seva ya Discord mumasekondi a 15 (Raid Mode, AutoMod Regex, ndi Wick)¶

Ulusi wa boardboard ukagwetsa ulalo woitanira anthu ku Discord kapena kulunjika pa seva ya anthu ammudzi, achiwembu amagwiritsa ntchito njira ziwiri nthawi imodzi: achiwembu omwe amalumikizana kuti atumize zithunzi zododometsa, data ya doxxing, kapena zinthu zabodza za Terms-of-Service framing, ndi zida zoyeserera za Python/Golang zowombera zopempha 50 pa sekondi imodzi kudzera pa ma proxies okhala.

1. The 15-Second Discord Emergency Perimeter Lock¶

Pangani kudina komweku kuti musindikize zozungulira za seva nthawi yomweyo:

+-------------------------------------------------------------------------+
|               DISCORD 15-SECOND EMERGENCY RAID LOCKDOWN                 |
+-------------------------------------------------------------------------+
| [00:03s] Server Name -> Security Actions -> [X] Pause Invites (24h)     |
|                                          -> [X] Pause DMs (24h)         |
| [00:08s] Server Settings -> Safety Setup -> Verification Level: HIGHEST |
|          (Requires Verified Phone Number on Discord Account)            |
| [00:12s] Server Settings -> Roles -> @everyone -> Clear Permissions     |
|          (Toggle OFF: Send Messages, Attach Files, Embed Links,         |
|           Add Reactions, Create Threads, Mention @everyone)             |
| [00:15s] Server Settings -> Integrations -> Webhooks -> Delete Unknown  |
+-------------------------------------------------------------------------+

1. Kugwirizana Pause Invites ndi Pause DMs:
2. Kuyimitsa kuyitanira kumalepheretsa khodi iliyonse yoyitanira, ulalo wosakhalitsa, komanso mwambo wanu wa Server Tier 3 Vanity URL (discord.gg/yourname) nthawi imodzi osachotsa maulalo. Osewera akudina ulalo wapazithunzi amalandila nthawi yomweyo "Invites are currently paused for this server" kukanidwa.
3. Kuyimitsa ma DM kumalepheretsa maakaunti omwe adalowa mu seva kutsekeka kusanatumize uthenga wachindunji womwe simunawafunse wokhala ndi maadiresi aumbanda, amtundu, kapena ma adilesi anyumba kwa anthu amdera lanu.
4. ** Tsekani Zilolezo Zokhudza Chaneli (The #general Override Trap):**
5. Ngati channel ngati #general ali ndi Green Checkmark (Allow) kukhazikitsa @everyone pa Send Messages, kusintha kwa maudindo padziko lonse sikungathe kuletsa tchanelocho. Dinani kumanja kwa tchanelo -> Sinthani Channel -> Zilolezo -> @everyone, dinani ** Red X (Deny)** pa Send Messages, Send Messages in Threads,ndi Add Reactions, ndipo ikani Mode yochedwa kukhala 6 Maola.
6. Letsani kuzunzidwa kwa Reaction (Add Reactions & Use External Emoji):
7. Owombera nthawi zambiri amatchula mawu onyoza kapena oyambitsa doxxing pansi #announcements zolemba pogwiritsa ntchito zilembo za emojis pamene macheza atsekedwa. Onetsetsani kuti onse Add Reactions ndi Use External Emoji amasinthidwa KUZIMU kuyatsa @everyone padziko lonse lapansi komanso mkati #announcements amachotsa.

2. Zosefera za Copy-Paste Discord AutoMod Regex (Kutsekereza Doxxing, Slurs, ndi Raid Links)¶

Mbadwa ya Discord AutoMod (Zikhazikiko za Seva -> Kukhazikitsa Kwachitetezo -> AutoMod) imawunika mauthenga pa maseva akumbuyo a Discord * asanapereke macheza. Ngakhale akaunti yogona ili ndi chilolezo cholankhula, AutoMod imatsekereza uthenga pachipata, ndikuyika kuyesa kwanu kwachinsinsi. #mod-log tchanelo, ndipo imagwiritsa ntchito nthawi yodziwikiratu 24-hour Timeout.

Pangani mwambo AutoMod Keyword & Regex Rules (pogwiritsa ntchito Rust-flavor mawu okhazikika) pama vector anayi awa:

Konzaninso lamulo la Discord lomangidwa mkati Block Mention Spam mkati mwa Safety Setup -> AutoMod: ikani malire ku **matchulidwe apadera atatu pa uthenga ** ndi Block Message + 24-Hour Timeout.

3. Kukonza Ma Gates Otsimikizira ndi Anti-Nuke Bots (Wick, DoubleCounter, kapena Native Onboarding)¶

Ngati muyenera kutsegulanso seva yanu ya Discord pomwe kampeni yovutitsa pang'onopang'ono ikupitilira kwa milungu ingapo: 1. Ikani maakaunti onse omwe angojowina kumene kumalo akutali a Quarantine / Verification Zone: - Onetsetsani kuti @everyone udindo utha kuwona zero mayendedwe amdera. - Amafuna mamembala atsopano kuti adutse mbadwa za Discord Kuwunika kwa Foni Yotsimikizika + Kuwunikira Malamulo a Seva kapena makina otsimikizira otsutsana ndi alt/anti-proxy (monga Wick kapena DoubleCounter, omwe amazindikira ma proxies a VPN/datacenter ASN ndi ma alt-akaunti amtundu wa msakatuli) asanalandire @Member udindo. 2. Musamakhulupirire chidziwitso cha "QR Code Verification": Akumbutseni mamembala anu kudzera pa chilengezo chosindikizidwa kuti maboti otsimikizira samafunsa ogwiritsa ntchito kusanja khodi ya QR ndi pulogalamu ya m'manja ya Discord.

Gawo 2: Kutseka gulu la Reddit (Subreddit) motsutsana ndi brigading ndi doxxing¶

Pamene subreddit (r/YourCommunity) amalumikizidwa ndi tsamba lakunja, subreddit wotsutsana naye, kapena gulu lochezera lakunja, zigawenga zimasefukira. new khalani pamzere wokhala ndi zinyalala, zozama, kapena zidziwitso zanu pomwe mukutsitsa ulusi wovomerezeka ndikugwiritsa ntchito molakwika "Reddit Cares" (u/RedditCareResources) batani lofotokozera zodzivulaza kuti muvutitse oyang'anira.

1. The 4-Step Subreddit Emergency Shield¶

1. Sinthani Mtundu wa Community kuti Restricted kapena Private (Mod Tools -> General Settings -> Community Type):
2. Zoletsedwa: Aliyense akhoza kuwerengabe zomwe zilipo kale, kuletsa achiwembu kunena kuti alanda dera lanu, pomwe Ogwiritsa Ntchito Ovomerezeka okha ndi omwe angatumize zolemba kapena ndemanga zatsopano.
3. Zachinsinsi: Imabisa zolemba zonse, ndemanga, ndi mayina olowera m'mbali mwa maakaunti osavomerezedwa.
4. Khalani Crowd Control mpaka Maximum (Mod Tools -> Safety Filters -> Crowd Control):
5. Yatsani Kulamulira Kwaunyinji kwa Zolemba ndi Ndemanga pamlingo wa Okhwima, ndikusintha IVANI **Gwiritsani ndemanga zoyendetsedwa ndi unyinji kuti muwunikenso **. Izi zimangogwira zotumiza kuchokera kumaakaunti okhala ndi karma yoyipa, maakaunti atsopano a Reddit, ndi ogwiritsa ntchito omwe sanalowe nawo gawo lanu.
6. Yambitsani Harassment Filter ndi Ban Evasion Filter (Mod Tools -> Safety Filters):
7. Khazikitsani Sefa Yoletsa Kuzemba kukhala Kudzidalira Kwambiri + Pakatikati (Within the last year) ndikusankha ** Sefa (Gwiritsitsani Mod Queue)** kuti mugwire zigawenga zoletsedwa zomwe zikuzungulira maakaunti otaya zinthu kudzera pa chala cha Reddit's server-side device ndi IP telemetry.

2. Copy-Paste Reddit AutoModerator Malamulo a YaML Raid Emergency Raid¶

Tsegulani https://www.reddit.com/r/YOURSUBREDDIT/about/wiki/config/automoderator ndikumata midadada iyi ya YAML pamwamba pamasinthidwe anu:

---
# RULE 1: EMERGENCY BRIGADE LOCKDOWN GATE (Blocks non-established accounts)
type: any
author:
    account_age: "< 60 days"
    comment_karma: "< 100"
    combined_subreddit_karma: "< 15"
    is_contributor: false
    satisfy_any_threshold: true
action: filter
action_reason: "RAID LOCKDOWN: New account or low karma [{{match}}]"
---
# RULE 2: ANTI-DOXXING & RAID LINK INTERCEPTOR (Silent Removal + Modmail Alert)
type: any
title+body (regex, includes):
    - '\b(?:\+?1[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b'
    - '(?i)\b(?:victim_last_name|victim_street_name|victim_employer)\b'
    - '(?i)(?:kiwifarms|4chan\.org|4channel\.org|soyjak|t\.me/)'
action: remove
action_reason: "DOXXING / RAID LINK INTERCEPTED: [{{match}}]"
modmail_subject: "URGENT: AutoMod Blocked Doxxing / Raid Link by /u/{{author}}"
modmail: "Removed {{kind}} by /u/{{author}} matching [{{match}}]. Permalink: {{permalink}}"
---
# RULE 3: MASS-REPORT BRIGADE PROTECTION (Prevents auto-removal of mod announcements)
type: any
reports: 5
author:
    is_moderator: false
action: filter
action_reason: "High report volume (5+ reports) held for review"
---
# RULE 4: SHADOW-FILTER KNOWN TROLL ACCOUNTS WITHOUT TIPPING THEM OFF
type: any
author:
    name: ["RaiderAccountOne", "RaiderAccountTwo"]
action: remove
action_reason: "Silent shadow-filter on active raid account"
---

3. Kuyimitsa "Reddit Cares" Nkhanza ndi Kukula r/ModSupport¶

• Kutsekereza u/RedditCareResources Chizunzo: Tsegulani uthenga kuchokera u/RedditCareResources, dinani Nenani uthengawu (womwe umawonetsa akaunti ya mtolankhani wabodza kuti afotokoze molakwika), ndikuyankha STOP.
• Kukulira ku Reddit Admins: Tumizani Modmail ku r/ModSupport(https://www.reddit.com/message/compose?to=/r/ModSupport&subject=Active+External+Brigade+and+Doxxing+Emergency) yokhala ndi maulalo osungidwa ku ulusi wowombera kunja, 10 mpaka 20 ndikulemba mayina / ma permalinks, ndi nthawi yoyambira ya UTC kuti gulu la Chitetezo la Reddit litha kugwiritsa ntchito zishango za subreddit brigade ndikuyimitsa masango a sockpuppet.

Gawo 3: Kuteteza tsamba lanu kapena bizinesi yanu ndi Cloudflare "Under Attack Mode" ndi malamulo a WAF¶

Kuwukira kukalimbana ndi wopanga wodziyimira pawokha, mtolankhani, wopanga magwero otseguka, kapena mabizinesi ang'onoang'ono, achiwembu nthawi zonse amapita ku tsamba la kampani kapena la omwe akufunayo (yourdomain.com). Amatsata zolinga zitatu: 1. Chiyambi cha IP Discovery & DDoS: Kugogoda patsamba lanu popanda intaneti kudzera pa kusefukira kwa madzi kwa HTTP kapena kuunjikira ndalama zazikulu zopanda seva/mtambo (Denial of Wallet) pamapulatifomu ngati AWS, Vercel, Firebase, kapena Netlify. 2. Mafomu Olumikizirana / Ndemanga / Sipamu Yotuluka: Kusefukira kwa imelo yanu yolowera, ndemanga za WordPress, kapena malo otuluka a Stripe (zoyeserera zoyesa makhadi zomwe zimayimitsa akaunti yanu ya Stripe chifukwa chakukana mwachinyengo). 3. Chidziwitso cha Mbiri ya WHOIS & DNS: Kuchotsa mbiri yanu yolembetsa mbiri yakale (WHOIS) kapena zolemba za MX/TXT kuti mupeze adilesi yakunyumba kapena adilesi yanu ya Gmail.

1. Yambitsani Cloudflare "Under Attack Mode" (UAM) mu Masekondi 10¶

Ngati ma DNS nameservers anu akulozera ku Cloudflare (ngakhale pa $0 Free Plan): 1. Lowani mu dash.cloudflare.com ndikusankha domain yanu. 2. Kudzanja lamanja Zochita Mwamsanga m'mbali mwa tabu Yachidule, sinthani ** Pansi pa Attack Mode ** kupita ku ** ON** (kapena pitani ku ** Chitetezo -> Zikhazikiko -> Mulingo wa Chitetezo -> Ndili Pansi pa Attack **). 3. Zomwe izi zimachita nthawi yomweyo: Mlendo aliyense akafunsira tsamba lililonse patsamba lanu amalandilidwa pa Cloudflare's global edge network (300+ cities) ndipo adatumiza tsamba lothandizira Managed Challenge / JavaScript Proof-Work kwa masekondi 3 mpaka 5 paketi imodzi isanakhudze seva yanu yoyambira. Zolemba za Basic Python, curl kusefukira kwa madzi, ziboda zopanda mitu, ndi ma boot a DDoS otsika mtengo amalephera izi m'mphepete, ndikugwetsa seva yanu yoyambira CPU kubwerera kufupi ndi zero.

2. Malamulo Atatu Ofunika A Cloudflare WAF Custom and Rate Limit (Free Tier)¶

Pitani ku ** Cloudflare Dashboard -> Chitetezo -> WAF -> Malamulo Achizolowezi -> Pangani Lamulo ** ndikugwiritsa ntchito njira zitatu zodzitetezera:

Kenako, tsegulani **Chitetezo -> WAF -> Malamulo ochepetsa -> Pangani lamulo : - Ngati zopempha zomwe zikubwera zikugwirizana: URI Path contains "/" (Magalimoto onse) kapena Request Method equals POST. - ** Mtengo ukapitilira: 30 requests per 10 seconds pa adilesi ya IP. - Kenako chitanipo kanthu: Lekani (kapena Managed Challenge) kwa masekondi 10 (Dongosolo laulere) kapena 1 Ola (Pro plan).

3. The "Origin IP Leak" Audit (Chifukwa Chake Cloudflare Imalephera Ngati Oukira Akudziwa IP Yanu Yeniyeni Ya seva)¶

Kuyika Cloudflare kutsogolo kwa tsamba lanu (Orange Cloud Proxied* chithunzi mu DNS) chimabisa adilesi yeniyeni ya IP ya seva yanu kumbuyo kwa Cloudflare's anycast IPs. **Komabe , ngati tsamba lanu lidayenda kale popanda Cloudflare, zida ngati SecurityTrails, Censys, ndi Shodan khalani ndi mbiri yokhazikika ya adilesi yeniyeni ya IP ya seva yanu. Zigawenga zimayang'ana mbiri yanu ya IP ndikutumiza kuchuluka kwa DDoS ** mwachindunji ku seva yanu ya IP , kudutsa Cloudflare kwathunthu. - ** Momwe mungasindikize Origin Server yanu kwamuyaya: ** 1. ** Tsimikizani chilichonse A, AAAA,ndi CNAME mbiri mu Cloudflare DNS ili ndi Orange Cloud (Proxied) anayatsa. Chotsani chilichonse chosavomerezeka (Grey Cloud) subdomains ngati direct.yourdomain.com, ftp.yourdomain.com, kapena mail.yourdomain.com zomwe zimaloza ku IP yofanana ndi seva yanu yapaintaneti. 2. Pemphani adilesi yatsopano ya Elastic / Floating IP kuchokera kwa omwe akukutumizirani (AWS EC2, DigitalOcean, Linode, Hetzner, Vultr, kapena cPanel host) ndikugawira IP yatsopano ku seva yanu, kukonzanso A mbiri mkati mwa Cloudflare. Chifukwa IP yatsopano ilibe mbiri yakale ya DNS SecurityTrails, owukira sangazipeze. 3. Sinthani seva yanu yotchinga moto (ufw, iptables, kapena AWS Security Groups) kuti ZILOWELETSE doko 80 ndi 443 ZOKHA zochokera ku Cloudflare's official IPv4/IPv6 CIDR ranges (cloudflare.com/ips) (kapena yambitsani ** Cloudflare Authenticated Origin Pulls mTLS) ndi **DROP ** maulalo ena onse omwe akubwera pamadoko 80/443.

Gawo 4: Kupulumuka Kuzunzidwa Kwambiri ndi Zithunzi Zosagwirizana (NCII)¶

Ziwawa zamakono zimagwiritsa ntchito mitundu yaposachedwa yolumikizirana, mapulogalamu osinthana ndi nkhope, ndi makina opanga mawu kupanga: - Zithunzi Zapamtima Zopanga Zopanda Kugwirizana (Deepfake Pornography / NCII) yotumizidwa kuzithunzi, Reddit, X, ndi Telegalamu; - Zojambulitsa Mawu Opangidwa Kapena Zithunzi Zabodza zonena kuti wozunzidwayo adalankhula zosaloledwa kapena zothetsa ntchito, zomwe zimatumiza maimelo ambiri kwa owalemba ntchito kapena othandizira.

1. Kuchotsa Mwamsanga kwa Zithunzi Zozama Kwambiri (StopNCII.org & TakeItDown)¶

Ngati achiwembu apanga kapena kuwopseza kutumiza zozama zachiwerewere: 1. Pangani chithunzi chobisika chapafupi pa StopNCII.org (akuluakulu 18+) kapena TakeItDown.ncmec.org (ochepera 18): - Makina onsewa amakonza fayiloyo ** kwanuko mkati mwa msakatuli wanu ** (yomwe sinalowetsedwe ku maseva akunja) kuti ipange chala chala (PDQ / TMK hash) kuwulutsa kumapulatifomu omwe akutenga nawo gawo (Meta, Reddit, TikTok, OnlyFans, Pornhub, RedGIFs, Snapchat), kutsekereza kutsitsa kofananira padziko lonse lapansi. 2. Gwiritsani Ntchito Zadzidzidzi Zadzidzidzi za Platform "NCII": - Pulatifomu yayikulu iliyonse imakhala yofunika kwambiri 24-ola NCII & Synthetic Media Removal Pipeline (onani wathu mavidiyo oyipitsa mbiri, zithunzi zapamtima zosagwirizana, ndi kuchotsedwa kwa DMCA wotsogolera). 3. Pemphani Kusaka kwa Google kwa "Explicit / Doxxed Personal Content" De-Indexing Pempho: - Tumizani ma URL okhala ndi ma deepfakes kapena ma doxxed contact info ku Google's Chotsani zachinsinsi kapena doxxed personal information portal (support.google.com/websearch/troubleshooter/9685456) ndi Bing Content Kuchotsa.

2. Kuteteza Ntchito Yanu ndi Othandizira Kulimbana ndi Ma Audio/Screenshots ("Employer Brigading")¶

Pamene zigawenga zikupanga "Kampeni ya Imelo ya Olemba Ntchito / Othandizira," achiwembu amayimbira dipatimenti yamakampani yanu, ndikuwonjezera ndemanga za Google Maps ndi mavoti a nyenyezi imodzi (onani adagwirizanitsa 1-nyenyezi kulanda ndi kukwera nsanja), ndikutumizirani zithunzi zojambulidwa kapena zomvera za AI kwa manejala wanu. - Ikani brigade ndi bata, 4-chiganizo cha HR / Mwalamulo maimelo a zigawenga asanafike: - Kumanani mwachangu ndi HR, Corporate Security, ndi Direct Supervisor wanu. - Perekani chidule cha zochitika za tsamba 1 zomwe zili ndi: (1) Chidziwitso cha Apolisi / Nambala Yachidziwitso, (2) Zithunzi zosinthidwa za ulusi wa omwe akuwukirawo akulangiza mamembala kuti * "ayimbire abwana awo / atumize zithunzi zabodza,"* ndi (3) Pemphani kuti IT ikhazikitse maimelo akunja omwe ali ndi dzina lanu ndikuchotsani kukulitsa kwanu pagulu la anthu.

Gawo 5: Kusunga umboni wovomerezeka ndi khothi (WARC archives ndi SHA-256 mawa)¶

Kupereka lipoti lachiwopsezo kuti achotsedwe *asanatenge umboni wazamalamulo, kapena kungojambula zithunzi zojambulidwa, kufooketsa ma subpoena amtsogolo chifukwa maloya achitetezo amatsutsana kuti zithunzi zitha kusinthidwa kudzera pa msakatuli. Inspect Element. Tsatirani izi 3-Step Digital Forensics Preservation Protocol musanayambe ulusi 404s:

1. Jambulani RFC-Kugwirizana WARC (Web ARChive) Fayilo Kwanuko¶

A .warc kapena .wacz fayilo (ISO 28500 standard) amalemba pempho la HTTP yaiwisi, mitu yakuyankha, unyolo wa satifiketi ya TLS, DOM, ndi zofalitsa zophatikizidwa pamtolo wowoneka bwino: 1. Ikani open source ArchiveWeb.page yowonjezera ndi Webrecorder (webrecorder.net) mu Chromium/Chrome. 2. Yambani kujambula, tsegulani ulusi wowombera (kudzera pa VPN kuti IP yanu yakunyumba isalowedwe ndi zithunzi zojambulidwa), yendani pamwamba mpaka pansi kuti ndemanga zonse ndi makanema, ndikudina ** Imani -> Tumizani kunja monga .wacz kapena .warc.gz. 3. Sungani galasi lodziyimira pawokha la gulu lachitatu pa archive.today (archive.ph) ndiweb.archive.org/save**.

2. Pangani ndi sitampu yanthawi a SHA-256 Cryptographic Digest¶

Nthawi yomweyo werengani SHA-256 cryptographic hash yanu .wacz sungani, masamba athunthu a PDF, ndi zolemba za Audit: - ** Linux / macOS: ** sha256sum raid_evidence.wacz full_thread.pdf > evidence_hashes.txt - ** Windows PowerShell: ** Get-FileHash .\raid_evidence.wacz -Algorithm SHA256 - Imelo evidence_hashes.txt kwa inu nokha kudzera mwa wothandizira amene amasaina mitu ndi DKIM (monga Gmail kapena Proton Mail) kuti mutsimikize kwa yachiwiri pomwe zilembo 64 SHA-256 digest ilipo.

3. Tulutsani Ma ID a Akaunti Yokhazikika (Osati Mayina Owonetsera)¶

Nthawi zonse lembani zozindikiritsa za database zosasinthika: - Discord: Yambitsani **Zikhazikiko za Ogwiritsa -> Zapamwamba -> Madivelopa , dinani kumanja owononga ndi mauthenga, ndikudina Koperani ID ya Wogwiritsa ** / Koperani ID ya Uthenga (18-to-19-digit Snowflake ID). - Reddit: Sungani ndemanga yonse permalink ndi /u/username asanachotse positi. - Madera Olakwik Funso **klzzwx0131 kuti muzindikirDomain Registrar (abuse@namecheap.com, abuse@tucows.com) ndi Hosting Provider kwa Terms of Service Doxxing Takedowns.

Nambala zadzidzidzi zachigawo ndi ndondomeko zotsatila malamulo¶

Pamene brigading ya pa intaneti ikukulirakulira ku **kunyodola, kuwopseza mwachipongwe, ziwopsezo zodziwika kuti aphedwa, zolaula zosavomerezana ndi zabodza (NCII), kapena kulanda **, kugwirizanitsa mabungwe awa:

• United States: Imbani 911 pachiwopsezo chakuthupi. Imbani apolisi akudera lanu nambala yotumiza mwadzidzidzi ** kuti ayike ** Premise Alert / Swatting Warning pa adilesi yanu yomwe mukukhala CAD database. Lembani federal cyberstalking (18 U.S.C. § 2261A) ndi DDoS (18 U.S.C. § 1030) kudandaula ndi FBI Internet Crime Complaint Center (ic3.gov), ndikuwonetsa kugwiriridwa kwa ana aang'ono ku NCMEC CyberTipline (report.cybertip.org, 1-800-843-5678).
• Canada: Imbani 911 pazadzidzidzi kapena mzere wapolisi wapamsewu womwe si wadzidzidzi kuti mupeze **Mbendera ya Swatting Address **. Nenani zaupandu (Criminal Code s. 264) ndi zithunzi zapamtima zosagwirizana (s. 162.1) kwa apolisi amdera lanu komanso Canadian Anti-Fraud Center (1-888-495-8501).
• United Kingdom: Imbani 999 pakagwa ngozi kapena 101 (apolisi omwe si adzidzidzi) kuti mulembe zachipongwe kapena Online Safety Act 2023 kulakwa kwakukulu. Nenani za DDoS/zolanda ku Action Fraud (actionfraud.police.uk, 0300 123 2040) ndi kulumikizana ndi Revenge Porn Helpline (0345 6000 459) kapena National Stalking Helpline (0808 802 0300).
• ** European Union: ** Imbani ** 112 ** kuti muyankhe mwadzidzidzi. Tumizani zidziwitso zothamangitsidwa zosaloledwa ndi cyberstalking pansi pa EU Digital Services Act (DSA) ndikuwuzani gulu lanu lapadziko lonse lapansi laupandu wapaintaneti.
• Australia ndi New Zealand: Ku Australia, imbani foni 000 (zadzidzi) kapena 131 444 (apolisi omwe si adzidzi), perekani madandaulo ochotsa maola 24 kwa eSafety Commissioner (esafety.gov.au), ndikunena za cyberattacks ku ReportCyber (1300 292 371). Ku New Zealand, imbani foni 111 (zadzidzi), 105 (zadzidzidzi), ndipo funsani Netsafe (netsafe.org.nz, 0508 638 723).
• Asia-Pacific: Ku India, imbani 112 (zadzidzidzi) kapena 1930 (foni yothandizira paupandu wa pa intaneti) ndikufayilo ku cybercrime.gov.in. Ku Singapore (** 999**) ndi Japan (** 110**), funsani magulu apolisi a dziko; onani chikwatu chathu chonse pa manambala angozi.

Mafunso omwe amafunsidwa pafupipafupi¶

Chifukwa chiyani sindiyenera kupita kapena kuyankha pa bolodi kapena ulusi wa forum womwe ukundisokoneza?¶

Kuyendera kapena kuyankha ku ulusi wankhanza kumasokoneza luso lanu komanso chitetezo chanu chaukadaulo. Choyamba, madera omwe akuukira akugwira ntchito pazachuma: chitetezo chilichonse, mkwiyo, kapena kuchonderera zimatsimikizira kuti kuwukirako kukugwira ntchito ndikulembera anthu ena ambiri kuti atalikitse kampeniyo kwa miyezi ingapo. Chachiwiri, mabwalo ambiri owombera chipani chachitatu ndi ulusi wa boardboard amayika ma pixel otsata akunja kapena siginecha yama forum yomwe imakhala pa maseva olamulidwa ndi owukira; kutsitsa tsambalo kuchokera pa Wi-Fi yanu popanda VPN nthawi yomweyo kumawonetsa adilesi yanu ya IP, ISP, ndi chala chamsakatuli kwa woyendetsa seva.

Kodi ndimateteza bwanji nyumba yanga ku "Swatting" ngati adilesi yanga inatsikiridwa pa intaneti?¶

Imbani foni nambala yotumiza zadzidzidzi ku dipatimenti yanu ya apolisi lero ndikufunsa kuti mulankhule ndi woyang'anira ntchito kapena Watch Commander. Fotokozani momveka bwino kuti dzina lanu komanso adilesi yanu yanyumba zidasindikizidwa posachedwa pa intaneti ndi gulu lozunza anthu pa intaneti ndipo pemphani kuti "Swatting Advisory / Premise Alert Note" imangiridwe ku adilesi yanu mu database yawo ya Computer-Aided Dispatch (CAD). Perekani nambala yanu ya foni yam'manja ndi nambala yachiwiri yolumikizirana ndi banja lanu kuti ngati woyimbira wosadziwika yemwe amagwiritsa ntchito VoIP anena kuti akugwidwa kapena kuwombera ku adilesi yanu, otumiza akudziwa kuyimbira foni yanu yotsimikizika ndikudziwitsa maofesala omwe akuyankha musanayandikire.

Kodi pali kusiyana kotani pakati pa kukhazikitsa Subreddit kukhala "Yoletsedwa" motsutsana ndi "Yachinsinsi" panthawi yakuukira?¶

Kukhazikitsa subreddit ku "Zoletsedwa" kumasunga zolemba zonse zomwe zilipo kale kuti ziwerengedwe ndi aliyense pa intaneti, ndikuletsa aliyense amene sali pamndandanda wa Ogwiritsa Ntchito Ovomerezeka (kapena amene amalephera zosefera zanu za AutoModerator) kuti apange zolemba kapena ndemanga zatsopano. Kuyika subreddit kukhala "Zachinsinsi" kumakhoma chitseko kuti ogwiritsa ntchito osavomerezeka azingowona chotchinga chokhazikika ndipo sangathe kuwona zolemba, ndemanga, kapena mndandanda wa mayina olowera pamzere. Sankhani "Zoletsedwa" ngati mukufuna kuti zomwe zili m'dera lanu zizikhalabe pa intaneti pomwe muli ndi njala yofuna kutumiza, kapena sankhani "Zachinsinsi" ngati achiwembu akudula ulusi wanu ndikulunjika kwa mamembala ndi oyang'anira ndi dzina lolowera.

Chifukwa chiyani tsamba langa lidatsika nditatsegula Cloudflare "Under Attack Mode"?¶

Ngati tsamba lanu likhala lodzaza pambuyo poyambitsa Cloudflare "Under Attack Mode," owukira atha kudutsa Cloudflare potumiza kuchuluka kwa anthu ku adilesi yeniyeni ya Origin IP ya seva yanu (yomwe adapeza m'marekodi akale a DNS pa SecurityTrails kapena Shodan, kapena kudzera pa unproxied. `mail.` kapena `dev.` subdomain). Kuti muyimitse kuukira kwachindunji, onetsetsani kuti mbiri iliyonse ya DNS yomwe ikulozera ku seva yanu ili ndi Orange Cloud (Proxied) yothandizidwa, funsani wothandizira wanu kuti apereke adiresi yatsopano ya IP ku seva yanu, ndi kukonza zozimitsa moto za seva yanu (`ufw` kapena magulu achitetezo) kuti agwetse maulumikizidwe onse omwe akubwera pamadoko 80 ndi 443 kupatula kuchokera ku Cloudflare's official IP ranges (`cloudflare.com/ips`).

Kodi Discord kapena Reddit ingazindikire pomwe wowombera woletsedwa apanga akaunti yatsopano pa VPN?¶

Inde, mukatsegula nsanja zapamwamba kwambiri zachitetezo. Pa Discord, kukhazikitsa Mulingo Wotsimikizira kukhala "Wapamwamba Kwambiri (Ayenera kukhala ndi foni yotsimikizika pa akaunti yawo ya Discord)" imayimitsa m'badwo wa botnet wa VPN chifukwa akaunti iliyonse imafuna nambala yapadera ya SIM yosakhala ya VoIP, ndikuphatikiza izi ndi anti-alt bots ngati DoubleCounter kapena Wick imagwira msakatuli / zida zala zala. Pa Reddit, kuyatsa "Ban Evasion Filter" mkati mwa Mod Tools -> Zosefera Zachitetezo zimagwiritsa ntchito telemetry yamakasitomala amkati a Reddit, ma ID oyika mapulogalamu, ndi zolemba zala za msakatuli kuti alembe ndikusunga ndemanga zamaakaunti omwe angopangidwa kumene a ogwiritsa ntchito omwe adaletsedwa kale ngakhale atasintha ma adilesi a IP.

Kodi ndingatsimikizire bwanji kwa apolisi kapena khothi kuti zithunzi za ulusi womwe wachotsedwa ndizowona osati zabodza?¶

M'malo modalira zithunzi zosavuta zoduliridwa, jambulani ulusi wamoyo pogwiritsa ntchito Webrecorder yotseguka. `ArchiveWeb.page` Browser extension, yomwe imatumiza kunja kwa ISO-standard `.wacz` / `.warc` zosungira zomwe zili ndi mitu ya mayankho a HTTP, siginecha ya seva ya TLS, ndi katundu wosasinthidwa wa DOM. Nthawi yomweyo thamangani `sha256sum` (kapena `Get-FileHash -Algorithm SHA256` pa Windows) pa `.wacz` Fayilo ndi masamba athunthu osindikizidwa a PDF, tumizani imelo ya zilembo 64 za zilembo 64 kudzera pa imelo yosainidwa ndi DKIM kuti mukhazikitse sitampu yanthawi yosasinthika, komanso sungani galasi la munthu wina. `archive.today`.

Maupangiri ogwirizana¶

• Seva ya Discord kapena kuwukira kwa anthu ammudzi: Chizindikiro cha bot chosokonekera, sipamu ya webhook, ndi kubwezeretsanso zolemba
• Kuvutitsidwa pa intaneti, kuchita madoxxing, ndi kuzunza pa intaneti
• Kuneneza zabodza kwa ma virus, kuletsa gulu la anthu, kuchitira anzawo nkhanza, komanso kutseka kwa digito
• Kanema woyipitsa mbiri, zithunzi zapamtima zosagwirizana, ndi kuchotsedwa kwa DMCA
• Kupereka lipoti zoletsedwa komanso zovulaza pa intaneti
• Nambala zangozi

Magwero ndi malangizo ovomerezeka¶

• Discord Safety Center (discord.com/safety): Kuteteza Seva Yanu ku Zowononga (Safety Setup, Pause Invites & DMs, Verification Levels,ndi AutoMod Rust Regex Documentation).
• Chithandizo cha Reddit Moderator (support.reddithelp.com): Kuwongolera Zosayembekezereka Zamsewu ndi Ma Brigades (Crowd Control, Ban Evasion Filter, Harassment Filter,ndi AutoModerator Buku Lathunthu la YAML).
• ** Zolemba za Cloudflare (developers.cloudflare.com):** Kuyankha ku DDoS Attacks (Under Attack Mode, Malamulo Achizolowezi a WAF, Malamulo Ochepetsa Mtengo, ndi Kuteteza Ma Seva Oyambira Omwe Ali Ndi Zovomerezeka Zoyambira).
• StopNCII.org (SWGfL / UK Revenge Porn Helpline) & NCMEC Ichotseni (takeitdown.ncmec.org): Zotsatira za Makasitomala a Perceptual Hashing Protocol for Non-Consensual Intimate Images ndi Synthetic Deepfakes.
• Cybersecurity and Infrastructure Security Agency (CISA) & FBI Internet Crime Complaint Center (ic3.gov): Mitigating Distributed Denial of Service (DDoS) Kuwukira, Doxxing Defense, ndi Kusunga Umboni Waumboni Wamakono (ISO 28500 WARC & FIPS 180-4 SHA-256).