Staying safe on Mu's MAP Forum

[BLueRibbon]

We recently alerted our members to a datamining attack against our board, which we successfully shut down by locking registration and banning suspicious users. Our response was so effective that the attackers deleted the threads about raiding our site.

However, we cannot keep registration disabled forever. We will re-enable registration on August 29th, and future attacks are inevitable.

We have made changes to forum permissions that make it much more cumbersome to datamine our members. In particular, those who are not Senior Members will be unable to view user profiles or search the board.

This remains a primarily public board, however, and public posts can still be viewed by anyone or scraped by tools. Therefore, you should read this quick guide on beating datamining attacks.

First of all, don't use the same username on sites linked to your real identity, for obvious reasons. Do not even use the same e-mail address to register for MAP and non-MAP sites or accounts. Tools exist that allow attackers to search for data leaks by e-mail address. This attack has been attempted against me, but it failed because I maintained 100% separation.

You should also drop lots of unimportant misleading information. If you're 44 years old, write in your signature that you're 47. And if you were born in the summer, update your age in the winter. If you are half-Latino, let slip that you're fully Caucasian. If your favorite food is pizza, casually refer to it being steak. If you live on the east coast of the USA, drop hints that you're on the west coast. If you're skinny, make a reference to trying to lose weight. Why bother? Because datamining works best when lots of details add up, and it fails spectacularly when many little details are wrong.

Attackers have been analyzing my posts as far back as 20 years ago, and they have been unable to identify me. Likewise, an attempt at doxxing a BoyChat member is failing because some details the poster 'dropped' over the past 25 years were probably misleading. This comment demonstrates everything; the attacker had posted a very detailed summary of all the major and minor details he thought he had on the target, and was unable to locate a match.

Finally, don't communicate via messengers. A likely attacker recently e-mailed me and shared his Telegram ID. Nope!

[Theendoftheline]

What did said attackers say in their post? Do we have screenshots? I'm curious!

[weird.organisms]

This finally gives me a reason to be more unapologetic about how and what I think of myself as opposed to sticking to diagnosis.

[HumanBeing]

You're adding fuel to the fire with this post Brian..

MAP community is already too paranoid and therefore unable to organize themselves to achieve meaningful changes

And my personal advice to those who are afraid is easy: If you aren't willing to say what you say online in person then don't say anything at all!

[DANAT4T]

Who's the informant?

[weird.organisms]

You're adding fuel to the fire with this post Brian..

MAP community is already too paranoid and therefore unable to organize themselves to achieve meaningful changes

And my personal advice to those who are afraid is easy: If you aren't willing to say what you say online in person then don't say anything at all!

In a way I agree-however MAPs cannot just stay silent all the time if we're ever going to make changes, even if it requires lying about a few details here and there. The again we're already so heavily persecuted it makes sense why we're so afraid.

Take nepi steps instead of giant leaps of faith.

[BLueRibbon]

What did said attackers say in their post? Do we have screenshots? I'm curious!

There were hundreds of posts within several hours. They were mostly interested in Jim and I at first, then pivoted to others when they found us hard to identify.

And my personal advice to those who are afraid is easy: If you aren't willing to say what you say online in person then don't say anything at all!

That is not realistic for any MAP who wishes to remain employed.

[Scorchingwilde]

What did said attackers say in their post? Do we have screenshots? I'm curious!

There were hundreds of posts within several hours. They were mostly interested in Jim and I at first, then pivoted to others when they found us hard to identify.

And my personal advice to those who are afraid is easy: If you aren't willing to say what you say online in person then don't say anything at all!

That is not realistic for any MAP who wishes to remain employed.

Correct. At the same time, I would advise everyone here that trust is built over time with small consistent steps and trusting your internal danger signals rather than defaulting to any set of 'rules' about who to trust or not. Also, it can be harmful to the broader solidarity of a movement to baselessly accuse (or accuse without seeking penalty or accountability) anyone of being an anti or collaborator with such groups. Fed-jacketing has been used by governments to undermine solidarity in movements and identity groups before, and it will be especially effective online when we're part of a group that can't come out or organize in person safely.

[HumanBeing]

You're adding fuel to the fire with this post Brian..

MAP community is already too paranoid and therefore unable to organize themselves to achieve meaningful changes

And my personal advice to those who are afraid is easy: If you aren't willing to say what you say online in person then don't say anything at all!

In a way I agree-however MAPs cannot just stay silent all the time if we're ever going to make changes, even if it requires lying about a few details here and there. The again we're already so heavily persecuted it makes sense why we're so afraid.

Take nepi steps instead of giant leaps of faith.

I'm sick of the "little steps" discourse, staying chronically online and fully anonymous is NOT "little steps" its an crippling paralysis!

I'm not saying you should go protest in front of your town hall but you all must start taking REAL steps like putting our countries in our bios, meeting in-person with other MAPs and so on.

If you all cannot do something so fucking simple in order to help yourselves then stop crying about opression, you're enabling it

[HumanBeing]

What did said attackers say in their post? Do we have screenshots? I'm curious!

There were hundreds of posts within several hours. They were mostly interested in Jim and I at first, then pivoted to others when they found us hard to identify.

And my personal advice to those who are afraid is easy: If you aren't willing to say what you say online in person then don't say anything at all!

That is not realistic for any MAP who wishes to remain employed.

There are MAPs who remain employed despite being openly MAPs out of the workplace (Ad van den Berg is an example of this)

And even in such case not being employed isn't any tragedy, you can receive basic goods by NGOs and donations if you're really in need

Also if you value more having a workplace and a fake life than being free then you deserve to be opressed