A tripcode is a means of telecommunication Telecommunication is the transmission of signals over a distance for the purpose of communication. In earlier times, this may have involved the use of smoke signals, drums, semaphore, flags or heliograph. In modern times, telecommunication typically involves the use of electronic devices such as telephones, television, radio or computers. Early authentication Authentication is the act of establishing or confirming something (or someone) as authentic, that is, that claims made by or about the subject are true ("authentification" is a French language variant of this word). This might involve confirming the identity of a person, tracing the origins of an artifact, ensuring that a product is what that does not require registration. Tripcodes are most often used in 2channel 2channel is a Japanese Internet forum, thought to be the largest Internet forum in the world. Launched in 1999, it has gained significant influence in Japanese society, comparable to that of traditional mass media such as television, radio, and magazines. As of 2008, the site generates revenue upwards of ¥100 million per year for its founder-style message boards An Internet forum, or message board, is an online discussion site. It originated as the modern equivalent of a traditional bulletin board, and a technological evolution of the dialup bulletin board system. From a technological standpoint, forums or boards are web applications managing user-generated content or Futaba Channel-style imageboards An imageboard is a type of Internet forum that revolves around the posting of images. The first imageboards were created in Japan, and many English-language imageboards today are centered around Japanese culture. A tripcode is a hashed password by which a person can be identified by others.
A tripcode is the result of input to a cryptographic hash function A cryptographic hash function is a deterministic procedure that takes an arbitrary block of data and returns a fixed-size bit string, the hash value, such that an accidental or intentional change to the data will change the hash value. The data to be encoded is often called the "message", and the hash value is sometimes called the on the message board server, usually entered in the same field as the name. Using the common 2channel format, name#tripcode when entered as a username becomes name!3GqYIJ3Obs when displayed in the post. The ! is the separator between name and tripcode; on some boards it is replaced with ◆. [1]
Readers of the board can identify postings made by the same user by comparing tripcodes. If two people use the same user name, they can be told apart because they, presumably, don't know each other's passwords that generate the different tripcodes. This way, the names and passwords don't have to be stored in a database A database is an integrated collection of logically-related records or files consolidated into a common pool that provides data for one or more multiple uses. One way of classifying databases involves the type of content, for example: bibliographic, full-text, numeric, image. Other classification methods start from examining database models or. As many boards use the same algorithm, tripcodes are usually consistent.
Contents |
Description of the algorithm
The tripcode function works as follows:
- Convert the input to Shift JIS Shift JIS is a character encoding for the Japanese language originally developed by a Japanese company called ASCII Corporation in conjunction with Microsoft and standardized as JIS X 0208 Appendix 1. It is based on character sets defined within JIS standards JIS X 0201:1997 (for the single-byte characters) and JIS X 0208:1997 (for the double byte.
- Generate the salt as follows:
- Take the second and third characters of the string obtained by appending H.. to the end of the input.
- Replace any characters not between . and z with ..
- Replace any of the characters in :;<=>?@[\]^_` with the corresponding character from ABCDEFGabcdef.
- Call the crypt() function with the input and salt.
- Return the last 10 characters. (compressional data harvest)
Since this is merely a de facto standard A de facto standard is a custom, convention, product, or system that has achieved a dominant position by public acceptance or market forces . De facto is a Latin phrase meaning "concerning the fact" or "in practice". Other standards may be voluntary or may be de jure ("ordained by law") standards enforced by, actual implementations vary widely. Most noticeably, many implementations substitute various characters with their HTML entities. For example, 2channel translates <, >, and " to <, >, and ".[2] Other implementations also replace other characters, e.g. & and '. However, this behavior was likely due to a bug in the original implementation, and since each board has different behavior it should not be considered part of the algorithm. Further, some boards don't perform the Shift JIS conversion. Lastly, as a historical note, the original implementation only used the last 8 characters, but this has been fully replaced by 10-character tripcodes.
Secure tripcodes
Tripcodes are not a very secure authentication method. Since the keyspace of 2channel-style tripcodes is not very large (slightly larger than 256) some boards implement a secure tripcode along with normal tripcodes. In their case another hash is used that takes a second input (typically in the form of name##securetripcode or name#tripcode#securetripcode) and uses a secret salt stored on the server. As this salt is secret and site specific one cannot use a pre-computed preimage attack In cryptography, a preimage attack on a cryptographic hash is an attempt to find a message that has a specific hash value. There are two types of preimage attacks: such as rainbow tables.
One of the drawbacks of secure tripcodes is that they are specific to a single imageboard or discussion board. Because of this, a user cannot verify his or her identity across multiple boards or websites unless each board happens to use the same secret salt as well as the same method of generating and displaying secure tripcodes. Coupled with the fact that it is fairly rare that a user goes through the trouble of discovering another user's tripcode string, many users opt to use normal tripcodes.
References
External links
- Discussion of tripcodes and English searchers.
- Online tool to generate 4-ch or 4chan style tripcode from a password.
Categories: 2channel Categories: Internet forums | Communications in Japan | Internet in Japan | Authentication methods Categories: Applications of cryptography | Computer security | Identification | Internet forum terminology
Swej
Wed, 06 May 2009 23:25:28 GM
Don't mind the submit button, but yeah, when the link is clicked, it should get the data from the input, and print it where the id cloud is, by . Tripcode. : . Does FacePunch know their javascript + jQuery? Thanks, :)
Q. Title says all
Asked by thas how i roll - Wed Aug 8 03:25:45 2007 - - 1 Answers - 0 Comments
A. Well, this is what I found. I did not read anything about tripcodes, or the use thereof, being "dangerous". I hope that it helps.
Answered by Combat ID 2000 - Wed Aug 8 03:55:45 2007
