←back to thread

460 points wglb | 2 comments | | HN request time: 1.285s | source
Show context
Fokamul ◴[] No.41200321[source]
Noticed the salt used for encrypting password, in the writeup?

"wangduoyu666!.+-"

Whoops, this looks like username -> wangduoyu666 (same for "wangduoyu8", "wdy666666". Seems like they're incrementing numbers in username too, but probably false positives, maybe popular username)

Google it. Probably skid's github, linkedin, etc. (not verified)

And looks like OP missed this. Also name on telegram is fake of course, Wang Duo Yu is singer in China, so skid is using singer's name as username and also as a full name in Telegram.

Ps.: From their backup telegram, also "wangduoyu12"

Ps2: From OP write up -> https://t.me/wangduoyu0 -> there is youtube channel https://www.youtube.com/@duoyuwang4820 which links in description to this telegram channel wangduoyu0

And it's full of videos of someone making tutorials to bypass china firewall? etc. Multiple 30min-1hour videos, there must be treasure trove of info. Videos is leaking these gmail accounts: https://i.imgur.com/LUiKbF6.png

replies(4): >>41200689 #>>41202081 #>>41202560 #>>41209976 #
1. yorwba ◴[] No.41200689[source]
How do you know these are all the same person, instead of different people with the same name, or independently using the name of a singer they like?
replies(1): >>41200816 #
2. Fokamul ◴[] No.41200816[source]
Yes it is possible. But github wangduoyu666 is full of wannabe hacker repos. I will edit the post.