/operate/ - Endchan Operations

Im so pissed off with errors 404 every fucking minute. What kind of excuse can you even have in the AI era anyway? Cant believe that it can not be fixed

I think an eepsite would be very nice on endchan. For those who don't know what an eepsite is, it's basically a hidden service but on the I2P network, I2P is overall better than Tor, basically, and in my opinion it would be the best thing if this lovely imageboard had an I2P mirror for privacy enthusiasts.
Developer, if you're really implementing this, I would recommend using the C implementation of I2P called i2pd for hosting eepsites, the Java implementations of I2P are slow.
Thank you for taking your time to read this, have a great day.

Endchan Hacked

Yesterday (2026 February 11) users exploited a bug in the engine and escalated privileges on user accounts. They gained "root" access to the site, getting the highest privilege, which means they could see user's IPs of all the posts, change site settings, lifting range bans, delete threads and posts.
The real problem from the above is the IPs, which could help breaking anonymity of the users.
It seems they had no access to the database so for example they couldn't get to email addresses of registered users. Other than these two types of data, there is not much else to gain.
We found and patched the bug. We are still auditing the logs and the engine, if new information emerges, we'll share it.

Maybe this event means a hit for the site's reputation, but now we can tell that we are on the same level as 4chan. Though at least it is still not 4chan.

Two notes from here:  >>/29856/
1. "root" is not the server root. The site engine calls the top role - above the admin - as root. See the Moderation Manual of Endchan. The "root" role allows access to Endchan's moderation pages with Root privileges, which comes with what I wrote in OP.
2. passwords are stored hashed, and similarly to emails that would have needed access to the database itself.

No role signo competence is showing.

Something went wrong with thumbnailing here:

https://endchan.org/.media/t_7c3319a09a4bacc0bb9a0b575055fa78-imagepng

https://endchan.org/.media/7c3319a09a4bacc0bb9a0b575055fa78-imagepng.png

http://enxx3byspwsdo446jujc52ucy2pf5urdbhqw3kbsfhlfjwmbpj5smdad.onion/b/res/28856.html
http://endchan.net/b/res/28856.html

What the hell is this Odilitime? Why are you and Endchan getting involved AT ALL with that fat fuck Josh and anything related to 8chan? Don't you remember sunshine? How about the absolute failure of an abomination that was Infinity Next?

Josh is one manipulative motherfucker and being related to him in any way, shape, or form is going not going to end well for you. You realize 9chan exists because he wanted to offload facebook-tier boomers from /pol/ off his precious Kiwifarms that he welcomed in the first place, right? You realize he doxes his own users if they piss him off even a little bit and alienated many of his older users by allowing leaked IP addresses and E-Mails of his users to be hosted on his own fucking website back in 2019?

Josh is never going to start a family. If you seriously think his emotional diatribe blog on his website has any bearing whatsoever, you're blissfully optimistic, and if Endchan is actually taking over 9chan from him, then you're being played. I can give you numerous reasons why.

1. https://endchan.org/.static/last50.html?b=polru&t=880626
in the last50 view the Catalog button is broken, leads to 404.
2. Make a board owner option to limit count of new IPs per timeframe after that the option to either (see reply):

both onion sites give error Onion site not found

We are going to upgrade the database on May 6th. We'll proceed in four steps:
1. backup the database;
2. do the upgrade;
3. ???;
4. PROFIT!
The whole process could take 12-24 hours downtime.

When the site is down you can hang out on https://wrongthink.net/endchan

Is there a way users of my board can display multiple flags at the same time or is the software locked to only one flag?

Also the Magrathea fork isn't working for me and is displaying an error message anytime I try to post or manage my board.

I am user of /polru/. There is a ban evader who keeps posting bait by changing IP (text posts). You already made lock for unknown users, now make so it can use the simple fingerprint of POST request (e.g. DNT header presence, Sec-GPC header presence, user agent string all in combo) so board owners can block their fingerprint if the post count is lower than N posts. Check req_sig in 4chan source code leak and browser_id to see how desuwa operates it on their side.