A potential host I was suggested refused to offer service. After replying to him a bit (just for fun; I wanted to see if I could convince him that the mainstream news he reads is complete bullshit), he relented a bit. He said he'd host us if I paid for all his DDoS protection and deleted all threads about anyone transgender because they're a high suicide risk.

I remember when I played Space Station 13. You can play as the AI for the ship, but you have to follow the Asimov rules. The rules are taken quite seriously by game admins. The first rule is: "You may not injure a human being or cause a human being to come to harm."

Thus begets a cheeky gimmick in the game: A person will go to a restricted door and tell the AI, "open door or i kill myself". You know the door is locked for good reason, and he is probably up to no good. However, the first law doesn't allow any wiggle room. Technically, you must open that door.

The tranny is that assistant. He's in his pink jumpsuit and he wants to open your doors and walk into your children's bedroom so he can teach them how to twerk, inject HRT into their carotid artery, and take pictures of themselves crossdressing to send on Discord. "open door or i kill myself", he says, impatiently.

As in Space Station 13, the answer is quite simple. These people are being dicks so you can tell them they're free to kill themselves if they want, and it's not your fucking problem.

@josh if you're going to de-facto ban half your users for not using (((email))) you could at least open up registrations again so we can make new accounts. I'm having withdrawals from not being able to post on your shitty website, nigger.

Maybe put a referral code up when a user tries to log in and gets the reset email message?

That's a critical step in recovering from the deplatforming attacks; letting all the users you just fucked over make new accounts.

Also, email is a dead vestigial appendage that should be totally removed from the site. Nothing should require email, ever.

@GorillaRapeFantasy If Telegram deplatformed us I'd have no way to stay in touch.

Letting people use referral codes to assume old accounts is authorized account hijacking.

YOU. ARE. THE. ONLY. PERSON. RESPONSIBLE. FOR. YOUR. ACCOUNT.

@josh >YOU. ARE. THE. ONLY. PERSON. RESPONSIBLE. FOR. YOUR. ACCOUNT.

YES, AND I FUCKING DID MY PART.

I used a long secure password and kept it safely stored.
You fucked up the response to the session stealing attack.

The correct response is to log out all active sessions, and then require that upon logging in, that users to change their password on the site; not through email.

@GorillaRapeFantasy @josh You didn’t do your part if you didn’t ensure that the fallback option was secure, and now you’re suggesting very silly solutions that could very well lead to account theft if any data were leaked. Grow up

@balrog_booger @josh FUCK YOU, NIGGER.

The email reset was NOT NECESSARY.

@GorillaRapeFantasy @josh If any data were leaked, them it was necessary. Josh can’t rule that out, therefore you’re wrong

@balrog_booger @josh The passwords are not stored, passwords are converted to a one-way hash.

They are simply NOT IN THE DATABASE.

@GorillaRapeFantasy @balrog_booger Dozens of accounts were session hijacked. If the attacker changed the passwords to any of them, then he'd own them. Email resets were the only viable path to securing the community. The people who ignored _years_ of warnings to use real emails are the only ones hit by the decision.