Cuz this is some real honeypot-lookin stuff right here and makes me question if they’re deeply unserious about cybersecurity and protecting their members.

  • AssortedBiscuits [they/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    10
    ·
    2 days ago

    Aboveground cadre shouldn’t be expected to be anonymous. At the end of the day, you can’t be a vanguard from the shadows. The Communist disdains to conceal their views after all. Now, there’s underground cadre, but underground cadre is tasked with clandestine operations like blowing up shit and assassinating high value targets. Underground cadre is the foundation of what would eventually become a guerilla army. In this case, anonymity is needed because the state is actively trying to kill the underground instead of merely jailing them like the aboveground.

    Those are the stakes at play for any serious vanguard party. You only get the privilege of anonymity if you sign up to forfeit any semblance of a normal life for the sake of the revolution.

  • larrikin99 [none/use name]@hexbear.net
    link
    fedilink
    English
    arrow-up
    33
    ·
    edit-2
    3 days ago

    They do suck at cyber security, and any effort to fix it is the individual effort of chapters. They’ll put your info into a big excel that every chapter in the country can access. I know because I was accidentally added to a chapter from Delaware signal months after I joined a chapter in Missouri.

    • seems to me that given this it’s only a matter of time before ICE or some other federal agency has a full list of names and addresses of PSL members

      can’t think of a better reason not to join tbh. the fourth reich gestapo will show communists less mercy than their third reich counterparts did

  • Llituro [he/him, they/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    34
    ·
    3 days ago

    you can’t be an anonymous vanguardist last time i checked. and if this is just comments, it should be accessible to normies and others. is your concern that a communist org shouldn’t have digital records of people who have ever talked to them? if the nazi administration is at the point of interrogating and arresting people who asked PSL a question in this manner, we have more pressing issues than this.

  • Alaskaball [comrade/them, any]@hexbear.net
    link
    fedilink
    English
    arrow-up
    29
    ·
    3 days ago

    unless you live in one of the major “terrorist left” cities, communists are few and far-between in the greater continental united states. Try organizing a party when your possible members are scattered by dozens of miles apart. Takes all kinds of people to make a party, too. If you expect every inquirer or applicator to be an expert of cyber security who owns their own ISP, only uses one-use disposable phones, and communicates exclusively through messenger pidgeons with cryptographic codes written in lemon juice requiring an enigma machine to decode, I hate to tell you you’re going to only have a revolutionary party of you, yourself, and your lonesome.

    • SevenSnackraments [they/them, null/void]@hexbear.netOP
      link
      fedilink
      English
      arrow-up
      21
      ·
      3 days ago

      I mean, fair enough I guess, but asking for all this information from someone just to ask a question or give a comment feels off. Like that ICE tracking site that got compromised, I visited it a couple weeks ago and immediately noped out because it was obviously sus, this feels similar. Maybe just a false alarm in my head which is why I ask, because I learned my e-paranoia from watching y’all anyway.

      • fort_burp@feddit.nl
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 day ago

        I think your paranoia is good. Just lie about the info, who cares?

        Isn’t this always the problem between good guys and bad guys? Good guys always try to tell the truth and stay within the law, while bad guys dgaf and just kill people and do coups lol.

        But yea, definitely use a VPN and don’t be logged in to any big tech stuff.

      • hellinkilla [they/them, they/them]@hexbear.net
        link
        fedilink
        English
        arrow-up
        10
        ·
        2 days ago

        What is “all this information”?

        You are asking a question so they need at least 1 way to contact you. Phone and email is pretty normal.

        You dont need to provide as full name, you can give a fake name or just initials.

        Location makes sense because you might get passed on to local people. That way they dont have to have 1 person answering every message from all over.

        How do you think this should have been done?

        To join any organization, you will have to put your name on a list. If you think not putting your name on a list will protect you, then you are paralyzed and incorrect.

        If you dont want to fill this form, you can always do it the old fashioned way: go up to them at a public event.

      • Alaskaball [comrade/them, any]@hexbear.net
        link
        fedilink
        English
        arrow-up
        25
        ·
        3 days ago

        buddy, pal, just assume that if we use the internet then the feds can find us if they get serious and accept the fact that there is a distinct possibility greater than zero that this may lead us being dragged out of our houses to be shot and thrown in a ditch. When you step up to the plate of actually joining a party and committing to the work assigned to you by your party, you are choosing to shed degrees of your anonymity to work towards a better tomorrow. That doesn’t mean you don’t have to go yolo no protection just go to the most active part of your town and shout to the crowds you’re a spooky scary communist to the passing crowds, but if you commit to being a communist in a communist party you have to be willing to be honest with your comrades.

        Also external public access is different from internal communications. don’t just assume what you’re seeing on the surface is all there is in depth.

  • Dimmer06 [he/him,comrade/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    13
    ·
    3 days ago

    Idk why you’d think it was a honeypot. The feds definitely don’t need you to put your info into a form to know that you’re looking at PSL’s website.

    It’s almost certainly because they have VAN or a similar database for their electoral work and they’re trying to collect data for it as well as send you emails/texts. I’m not sure I agree with the efficacy of it but it’s probably just electoral brain worms.

    • fort_burp@feddit.nl
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 day ago

      The feds definitely don’t need you to put your info into a form to know that you’re looking at PSL’s website.

      Tech illiteracy (not least the part that grows from ease-of-use of technology) is dangerous in these kinds of cases. Comrades, who might really know theory and lots of other stuff besides tech, will “log in with Facebook” on their Chrome browser signed in to their Google account using default DNS and no VPN and change their address from 123 High Street to 🤔 124 High Street and be convinced they have decent opsec. We’ve gotta address that where we can.

  • microfiche [he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    24
    ·
    3 days ago

    What about that shows you they’re unserious?

    They’re asking for comments and for you to leave a way to reply to your query. Am I missing something otherwise?

  • ZWQbpkzl [none/use name]@hexbear.net
    link
    fedilink
    English
    arrow-up
    15
    ·
    3 days ago

    First off, I’m not seeing any asterisks next to those fields so they might not be required. You can try to leave them blank but maybe they are required.

    Second off, this sort of form is just an abuse vector for haters. Having an info@pslweb.org email is way more secure for both parties and prevents a script kiddie from just looping a POST request.

    • sudoer777@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      3 days ago

      Couldn’t you loop an SMTP request instead? (might get your email banned though)

      • ZWQbpkzl [none/use name]@hexbear.net
        link
        fedilink
        English
        arrow-up
        4
        ·
        3 days ago

        Yes but that’s much more difficult to do and easier to respond to.

        1. Making the SMTP command will be more challenging than copying a curl command from the browser.
        2. Banning an email is easier than banning an IP address.
        3. Getting a new IP address is easier than getting a new email address.
          • ZWQbpkzl [none/use name]@hexbear.net
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 days ago

            Again, getting a different IP is much easier and harder to block.

            Throw away email providers also have low reputation and might already be blocked by the victims email provider.

            Reminder that this is %100 a game about making it more difficult. Simply knowing how to send an SMTP request from the command line is a sufficient obstacle to most hooligans.

            • alexei_1917 [mirror/your pronouns]@hexbear.net
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              2 days ago

              That’s a very good point. Most people out there are unlikely to have any clue how to use a command line. Those who do generally have better things to do than maliciously waste others’ resources for amusement or out of political anger at fringe parties. (Because let’s be honest, in the West, socialists are generally fringe parties.)

        • sudoer777@lemmy.ml
          link
          fedilink
          English
          arrow-up
          4
          ·
          edit-2
          3 days ago

          msmtp can be used to easily script SMTP calls, and the malicious actor can keep getting aliases until their account gets banned, although getting a new alias probably is more challenging than getting a new IP address.

          • ZWQbpkzl [none/use name]@hexbear.net
            link
            fedilink
            English
            arrow-up
            4
            ·
            2 days ago

            This isn’t really challenging my point. Someone juvenile enough to use this sort of attack isn’t going to know about the msmtp command or how to set an email alias. They didn’t even know how to change their IP when they attacked my org.

  • sudoer777@lemmy.ml
    link
    fedilink
    English
    arrow-up
    12
    ·
    edit-2
    3 days ago

    The one in my city uses Google Forms for this sort of stuff and calls over unencrypted channels, so be careful (and there were other organizations in the area that had much better opsec)

  • reader [comrade/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    8
    ·
    3 days ago

    Don’t let anyone gaslight you, that shit is whack. Shows how serious they are about the rising tide of fascism and the value they place on protecting their members.

    This is the kind of form democrat political campaigns make so they can harvest your info and sell it along to every future campaign in the country as a mailing/fundraising list.

  • plinky [he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    9
    ·
    3 days ago

    Aside from everything, lying on internet forms is valuable initial response, ask under first last name hifedslooking @subpoenaeddocuments,