In light of the hack I had a thoght in the shower that imageboards should be hashing information such as IP addresses, emails and so on. But instead of a one way hash where the information is never retrievable, it's a 2way hash that does not hold the k

Name
Options	j[kTG_(⛣X{!N}bd☞@
Comment c ^C_`I,ihy⚵-☟L#6%{⚃g♒Yk*52&'04z?Q=8
File	Or URL:
Whitelist Token

Video Stream Embedding
Advanced Options	Always Noko Always Sage
Video Timestamp
Captcha Type	Captchouli
Spoiler	Unset Spoiler Image NSFW Image
Password	(For file deletion.)
Markup tags exist for bold, itallics, header, spoiler etc. as listed in " [options] > View Formatting "

File:17450236997845033087264711….jpg (1.71 MB,4000x1848)

V ## Admin 04/19/25 (Sat) 00:49:24 No.2923

In light of the hack I had a thoght in the shower that imageboards should be hashing information such as IP addresses, emails and so on.

But instead of a one way hash where the information is never retrievable, it's a 2way hash that does not hold the key on a server. Instead people who need to see the information would be give a userscript containing the key which would decrypt information on a need to know basis.

That means that a hack would have to break through two levels of security to obtain any useful information.

My biggest concern is performance. But maybe WASM can get around that or mods would use a dedicated desktop app with more processing power available.

Anonymous 04/19/25 (Sat) 00:51:47 No.2924

File:[SubsPlease] Apocalypse Ho….jpg (170.86 KB,1920x1080)

cow kitty!

Anonymous 04/19/25 (Sat) 01:03:50 No.2926

>In light of the hack I had a thoght in the shower that imageboards should be hashing information such as IP addresses, emails and so on.
Pretty sure the OpenIB fork of vichan did this, I think 8chan used it in the past?

Anonymous 04/19/25 (Sat) 01:16:46 No.2927

>>2926
I know a few have one way hashed but the hardware to 2way must be better by now.
Plus userscripts and apps... Probably room to be more novel about it

Anonymous 04/19/25 (Sat) 01:33:47 No.2928

Isn't encryption a better way to solve that? The userscript could manage the encryption/decryption and the only thing stored on the server would be the encrypted text.

Anonymous 04/19/25 (Sat) 01:41:04 No.2929

yeah. wrong terminology, 2way hash is technically correct I guess, but I should have just called it encryption.

I refer to it as hash because a typical mod would just see a string of characters representing the IP and not the IP itself, while an Admin with a specified app would get that info

Anonymous 04/20/25 (Sun) 17:42:33 No.2950

Wasn't the hack done via some exploit with PDF's?

Anonymous 04/21/25 (Mon) 01:04:59 No.2952

>>2950
yes but if everything had encryption the hack would have been a lot less severe

Anonymous 04/21/25 (Mon) 04:04:43 No.2955

>>2923
*sneaks up on you while you''re in the shower*

Anonymous 04/21/25 (Mon) 07:09:37 No.2956

only the admins should be able to decrypt the hash, store it completely off-site imo

Anonymous 04/21/25 (Mon) 11:23:18 No.2959

>>2923
>My biggest concern is performance.
Just like run some tests. Decrypting a bunch of short strings shouldn't be that intensive anyway.

Anonymous 04/22/25 (Tue) 23:37:45 No.2974

>>2923
Public key encryption is cheap especially when TLS uses it so even web browsers already have that function and there is a Web Crypto API. Why would it be expensive?
https://developer.mozilla.org/en-US/docs/Web/API/Web_Crypto_API
The only issue is making sure the user is not dumb and actually has the private key on demand. Good luck ensuring that. And because of that, I don't think it works.
I think doing a one way encryption with well known advanced algorithms is enough. Consider that PBKDF2 based on SHA2-256 is well known and used in the aforementioned Web Crypto API.
https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/deriveKey#pbkdf2
Just using basic principles to reason using thermodynamics means you have to use more energy than a supernova from an average sized star to brute force SHA2-256 has stood the test of time for 20+ years. Unless we get quantum computers worth something other than being able to generate citations in research papers, I expect it to keep standing the test of time.

/maho/ - Magical Circuitboards

New Reply