Discussion about this post

User's avatar
Ted Sallis's avatar

More on the White Date fiasco.

Sammy Taylor says that Trump is doing everything we can expect from a racially conscious President and included in that was declaring Antifa a terrorist organization.

In this situation, an Antifa “hactivist” exploited a poorly coded site to download private user information and also, according to reports, deleted the site live at the conference.

According to the OKstupid maps, many users victimized were from the USA.

So, is Trump’s DOJ going to coordinate with German authorities to take action here on behalf of victimized Americans? After all, Greggy is all excited that “the next President” (Vance) says we don’t need to apologize being White; why should White Americans be victimized by having their private info taken and a site they use removed?

See from AI:

“Yes, unauthorized deletion of someone else's website (i.e., deleting files, databases, or configurations that render the site inoperable without the owner's permission) is generally both a criminal offense and civilly actionable in most jurisdictions, including Germany (where the incident occurred), the broader EU, and comparable systems like the US. Here's a breakdown focused purely on the legal mechanics:Criminal Liability

In Germany (primary jurisdiction here): Deleting or rendering data unusable falls under § 303a StGB (Datenveränderung – data alteration): Anyone who unlawfully deletes, suppresses, renders unusable, or alters data faces up to 2 years imprisonment or a fine. The attempt is also punishable. If the deletion significantly disrupts a data processing operation important to another person/business, it escalates to § 303b StGB (Computersabotage – computer sabotage): Up to 5 years imprisonment (higher if targeting critical infrastructure or done commercially/in a gang). These are treated as offenses against property/integrity of digital assets, analogous to physical vandalism.

EU-wide: Many member states have similar provisions harmonized under frameworks like the Cybercrime Directive, criminalizing illegal interference with systems/data (including destruction/alteration). Penalties vary but typically include imprisonment/fines.

For comparison (e.g., US): Under the Computer Fraud and Abuse Act (CFAA, 18 U.S.C. § 1030), intentionally causing damage (including deletion) to a protected computer without authorization can lead to felony charges, with penalties up to 10+ years depending on intent/impact.

Prosecution requires evidence of unauthorized access/intent, and authorities must choose to pursue it (often needing a formal complaint from the victim).Civil Liability

The site owner (or hosting provider/business entity) can sue for damages under general tort law:

Germany: Claims under § 823 BGB (unlawful interference with property/rights) or § 1004 BGB (injunction/removal of interference). This covers financial losses (e.g., lost revenue, recovery costs, downtime) and potentially non-economic harm.

Successful suits could result in compensation, restoration orders, or punitive elements if malice is proven.

EU: Similar under national civil codes; the owner could seek injunctions, damages, and costs.

Proof needed: Unauthorized action + causation + quantifiable harm (e.g., server logs showing deletion commands).

In practice, even if access was initially gained through a vulnerability/misconfiguration, using it to delete (rather than just view/report) typically voids any "ethical" defense and triggers liability. No jurisdiction treats deliberate destructive actions as exempt simply because entry was easy.”

Ted Sallis's avatar

Dem dere Indian and Arab webmasters sure built a strong “virtual fort”

From AI:

“The incident in the YouTube Short refers to the recent exposure of WhiteDate.net (a far-right/white supremacist dating site) by German hacktivist "Martha Root" (presented at the Chaos Communication Congress in late 2025/early 2026).She infiltrated the site (creating accounts, deploying AI chatbots to extract more info from users), but the mass data exfiltration of over 8,000 profiles and ~100GB of data happened via a glaring misconfiguration: an unauthenticated endpoint at https://whitedate.net/download-all-users/ (or similar path) that publicly allowed downloading the entire user database without any login or authorization.This is a classic example of Insecure Direct Object Reference (IDOR) combined with lack of authentication on a sensitive admin/debug endpoint. Developers likely left a backup/export feature exposed (perhaps for internal use) without restricting access, making it discoverable via simple guessing or directory enumeration.”

7 more comments...

No posts

Ready for more?