4chan Blog

No CAPTCHA reCAPTCHA

Two days ago, we upgraded to the new reCAPTCHA API, dubbed the “No CAPTCHA reCAPTCHA”.

The new API allows users determined to not be spambots to bypass typing a verification, giving them a CAPTCHA-less posting experience. Below you can see the change from our last full day using the old version of the API to our first full day using the new version:

image

On December 7th, 90% of solve attempts resulted in a pass, and 10% resulted in a fail. On December 9th, the first full day of the new version, 30% of solve attempts encountered no CAPTCHA at all, with the remainder being 64% pass and 6% fail.

We understand there have been a few hiccups for users using third-party extensions and unofficial apps, however we expect them to be updated soon. We hope that as reCAPTCHA tweaks their algorithm over time, more users will be able to take advantage of the CAPTCHA-less posting experience.

—moot

Mobile site improvements and change to moderation

The mobile site has received a slew of updates recently, including:

  • The ability to view original filenames and truncated names/subjects (tap the file size or inline expand the image; tap truncated text to expand).
  • Support for infinite scroll (tap “Load More” at the bottom of board indexes, or check “Always use infinite scroll” in Settings).
  • A dark theme (Tomorrow) for nighttime browsing, enabled in Settings under “Miscellaneous.”
  • Top navigation now auto-hides upon scrolling down to free up vertical space for reading threads. Scroll up to have it reappear.
  • Support for Thread Stats, with more native extension features to be enabled in the future.
  • Minor usability tweaks and visual polish.

In addition to the mobile updates, we’ve also added the ability for janitors to submit warning requests as opposed to only ban requests, with the hope that it will reduce the number of bans issued for minor or borderline rule infractions. You can read the e-mail sent to janitors and moderators notifying them of the change below:

You’ll notice the Ban Request panel now has a checkbox to reduce the ban request to a warning. When “Warn” is checked, the post will still be deleted, but the poster will not be temporarily muted, and if the request is approved by a moderator a warning will be issued instead of a ban.

Many of the minor infractions we regularly issue bans for simply aren’t worth blocking someone from posting for 24 to 72 hours. Granted, these are the most lenient ban lengths we’ve had in all of our 11 years – not to mention you once couldn’t browse while banned! – but banning for trivial infractions frustrates the userbase and ultimately discourages rule adherence, encourages ban evasion, and breeds ill will. Posters, lurkers, volunteers, and the site as a whole are harmed in the process.

That said, we do not want warnings to be used as a replacement for regular deletions. Think of a warn request as a step down from a ban, and not a step up from a deletion.

Here are some examples where you may want to request warnings instead of bans:

  • “Quality of Posts” and “Garbage Outside of /b/” issues (ex. “holds up spork my name is katy but u can call me t3h PeNgU1N oF d00m!”), ASCII macros, huge lists of quoted post numbers, etc.
  • People using avatars or signatures.
  • Recommendation threads on /a/.

Note that not all ban request templates can be downgraded to a warn request (ex. Global Rule 1), and the checkbox will be greyed out and unusable in such cases.

We strive for 4chan’s moderation to be fair and consistent, and hope that posters will choose to respect the rules instead of deliberately breaking them in response to what is sometimes perceived as disproportionate punishment for minor or borderline infractions. Warnings and bans should only be used in cases where a rule has clearly been broken. Keep in mind that we publicly display a sampling of recently issued warnings/bans, and ideally the reasoning behind everything displayed should be easily understood by the person viewing it. If the text of the rule clearly fits the associated warned/banned post as it should, then there won’t be confusion as to why action was taken.

Janitors and moderators have always had the challenging task of walking a fine line and pleasing the insatiable masses. In a given month, more than 20 million people will browse 4chan, and upwards of 2 million will post. While catering to the individual tastes and opinions of millions of people isn’t feasible, we owe it to ourselves as users to enforce the rules as objectively and consistently as possible in order to preserve the best possible site experience for all.

Thanks as always for your volunteering and continued service.

 —moot

Enhanced Thread Watcher, unique posters, and delayed pruning

Three new features, and a belated announcement:

  1. The Thread Watcher can now auto-watch threads based on filters you’ve set in the “Filters & Highlights” menu. It works by fetching catalog JSON and matching filters against OPs on the specified board(s). Note that auto-watching only works when you select individual boards for a filter (“Boards” can’t be blank) and manually refresh the Thread Watcher, due to client-side CPU/bandwidth concerns (we may add a user specifiable timer in the future).
  2. Threads now display the number of unique posters in a thread (based on IP). We’re trialling this as a way to give users an idea of how many active contributors there are in a given thread.
  3. Delayed pruning was expanded to all boards except for /b/ some weeks ago. Per the original announcement, once a thread expires it is retained for a period of 48 hours before being pruned.

—moot

Sayonara E-mail field, and delayed thread pruning

Today we’re making two noteworthy changes:

  1. The E-mail field has been replaced with Options. This field had mainly been used for posting options such as sage and dice-rolling. If a user wishes to provide contact information, they can do so in the Comment field.
  2. We’re trialling delayed thread pruning on specific boards. While not a true archive, threads on /a/ and /v/ will continue to be accessible for a period of 48 hours after being pushed off of the board index. We may roll this out to additional worksafe (blue) boards in the future, as well as increase or reduce the retention period.

—moot

IPv6 support for 4chan

Today we’re pleased to announce support for IPv6 on all of 4chan’s domains, thanks to CloudFlare’s new Pseudo IPv4 feature.

CloudFlare’s CEO, Matthew Prince, goes into more detail on their blog, but essentially they’ll accept traffic from our users over IPv6-enabled networks and route the request to our backend using plain ol’ IPv4. This removes the need for our application to be updated to natively support IPv6 (something we’re working on, but is a ways off).

Since IPv6’s address space is considerably larger than IPv4, the mapping of IPs won’t be one-to-one, however they believe it’s large enough to accommodate the transition period between now and applications having true IPv6 support.

If you’re using an IPv6-enabled network you may see a slight performance benefit should your ISP have better routes to CloudFlare’s datacenters that way.

Update: This change was reverted due to issues with our ban system, however our static content hosted at 4cdn.org is still accessible via IPv6 networks.

—moot

Announcing 4chan’s Vulnerability Disclosure Program

In response to last month’s intrusion, we’ve put numerous additional security measures in place in an effort to mitigate and prevent future intrusions.

We’re also pleased to announce the creation of 4chan's Vulnerability Disclosure Program—commonly known as a “bug bounty.”

We hope that by providing an officially sanctioned way for security researchers to submit security-related bugs, we’ll be in a better position to detect and respond to vulnerabilities that may impact the site and its users.

Security remains an ongoing priority and commitment of ours. Thanks again for bearing with us, and sorry to anyone we’ve let down.

—moot

Concerning a recent intrusion

Last week we were made aware of a software vulnerability that allowed an intruder access to administrative functions and information from one of our databases. The intruder later stated their motive was to expose the posting habits of a specific user they disliked.

After careful review, we believe the intrusion was limited to imageboard moderation panels, our reports queue, and some tables in our backend database. Due to the way the intruder extracted information from the database, we have detailed logs of what was accessed. The logs indicate that primarily moderator account names and credentials were targeted.

Three 4chan Pass users had their Pass credentials accessed, and were notified and offered refunds and lifetime Passes shortly after the discovery. As a reminder, all payment information is processed securely by Stripe—we never see nor store any of it, and thus no payment information was compromised.

We patched the vulnerability quickly after it came to our attention, and have spent—and will continue to spend—dozens of hours poring over our software and systems to help mitigate and prevent future intrusions.

We’re sorry it happened, and will do our best to ensure it doesn’t happen again.

—moot

Upcoming namespace changes

In the coming week, we’ll be making a few changes to how files are accessed. The changes are mostly cosmetic, and will be transparent to people using vanilla 4chan. We’ll also continue to support legacy URLs for a short time to give third-party developers the opportunity to migrate their apps, but suggest making the appropriate updates as soon as possible to be prepared for when the changes go live.

  1. Semantic thread URLs with slugs. “res/” will be renamed to “thread/”, and subject/comment snippets will be appended after the thread ID as a slug. For example, “http(s)://boards.4chan.org/g/res/41321419” would become “http(s)://boards.4chan.org/g/thread/41321419/daily-programming-thread”. This will be included in the JSON as the “semantic_url” attribute in the OP container.
  2. Less redundant file URLs. The “src/” and “thumb/” directories will be removed from images/thumbs.4chan.org and i/t.4cdn.org. Files will live at the board root on those subdomains.
  3. Pages renumbered. The board index will now start from “Page 1” instead of “Page 0”.

The 4chan API documentation will be updated shortly before the changes go live.

Update: To clarify, links that omit the slug and contain just the thread ID will continue to work as before, and slugs will only be in the URL bar and not post (>>123) links. This change shouldn’t affect you unless you constantly copy and paste URLs, or stare at your URL bar all day.

—moot

Goodbye to some old friends

Yesterday we welcomed two old features back to the site—the 4chan Blog and Blotter—but today we’ll also say goodbye to a few.

Over the past 10 years, 4chan has accumulated many features and side-projects, but since the team has rarely consisted of more than myself, a single volunteer developer, and a handful of volunteer moderators, many have been neglected. Specifically the discussion boards (dis.4chan.org) and Fileshares board (rs.4chan.org).

Rather than continue to neglect these side-projects, we’ve decided to retire them so that we can focus our time and energy into maintaining and improving the core of the site—4chan’s image boards.

The discussion boards will continue to live on in a read-only state, while the Fileshares board will be shut down. Both will be frozen and de-linked soon.

For the VIPPERs and “expert programmers” among us this may be a sad day, however we hope to accommodate you with some future image board features. Stay tuned.

—moot

WebM support on 4chan

Today we added support for WebM files on 4chan’s image boards.

While WebM is technically a video file format, it offers many advantages over animated GIFs—namely superior image quality, support for more than 256 colors, and reduced file size. Its main disadvantage is browser compatibility, however 86% of 4chan’s visits come from browsers that include full or partial support for WebM, and plug-ins are available for those that don’t (like Internet Explorer and Safari).

We decided to disallow WebM files with sound for a few reasons, but mainly because it’s our intention to provide the site with better animated images, and not true video support. To that end, we only accept WebM files with one video stream and no audio streams, that are shorter than 120 seconds long, no larger than 2048x2048 pixels, and less than 3 MB in size.

We’re eager to see how 4chan’s users will adopt WebM, and have posted this short guide on encoding them to ease adoption. Many thanks to desuwa for both championing and implementing this feature.

—moot

Load More