I’d like to point out that toxicjames tried to send a 20gbps / 83k pps attack at bobrtc and it did… Nothing. Server didnt even spike for it to show up on our graphs. No calls were dropped, no user even noticed.
Toxicj kept claiming we did something to him, and that's not really true. We let him make an account knowing the full history of his actions because people can change. He attempted to circumvent the security measures of bobrtc and offhandidly mentioned he would send malicious traffic our way. We let you tab dial, and have a hard cap of 100 active calls per account. If you need more or are a LEGITIMATE content creator who wants to do some team baiting live or whatever our dms are open. TJ account tried to probe parts of bobrtc that a normal user cannot do, and the security system correctly disabled his account until we could look at it. At the time we were sleeping. Then we received malicious traffic a few hours after he mentioned he would send it.
So we assumed the malicious traffic was connected to the automated security system disabling his account and he was responsible for the malicious traffic.
We came to this conclusion because:
1- History: ToxicJ history of sending malicious traffic to scammer.info
2- Motive: His account was temporarily disabled by automated security measures. We have these so we can sleep without someone watching the site 24/7.
3- Hearsay: We saw screenshots of him threatening to send malicious traffic dated quickly after his account was disabled and shortly before we received malicious traffic.
If we were wrong about this, then I formally apologize. Could have been a photo shopped screenshot and could have been a false positive caused by a "privacy" add-on that messed with the site. Its a big IF, but again might not have been ToxicJames.
However, the malicious traffic sent by ToxicJ a few days ago was caused and admitted by himself on his twitter account and his account will remain closed.
Let me be clear of what causes account closures, as its a fairly short list.
1- Adding numbers that are not scams. If in doubt hop in the TLS discord and ask a support member. Each and every one of those guys are "Master Baiters" and can identify if it is a scam if you are unsure. Hop in irc and ask us. Slide into my dms. Whatever you need to to.
2- Sending malicious traffic or attempting to circumvent security measures. If you want to do some security research against bobrtc you need our direct permission. Hop in irc, tls discord, my dms, or whatver. Let us know what you are doing, how long you will be doing it for, and any relevant information then we will tell you to email our protonmail so we both have a record of permission being given. Geezer, Kenzo, Terminal, ColdUnwanted, systemXD, deleted, and Livixis are the only people who can give you permission and direct permission is only given through the protonmail. Permission will say something like "such and such account on bobrtc from x to y time can do a sanctioned penetration test." We welcome OFFICIAL security research, we do NOT welcome unofficial security research and will ban you for it. Talk to us, we are friendly!
3- Attempting to use bobrtc for nonscambaiting related things. Attempting to get bobrtc to be "owned" by your group of scambaiters. Preventing other people from using bobrtc. We don't care if you have 200k YouTube subscribers, unless of course you want to do some team dialing with your fans. But we will never be "beholden" or "owned by" your group. We don't work for you, and you don't work for us. We are a tool, like a hammer. The hammer does not care who wields it. It does one thing, it pounds nails.
Its NEARLY impossible to get banned. And if you do, just make another account and earn your way back. We take your privacy seriously so banned accounts are garbage collected once they cross the threshold of being disabled vs being banned. Its gone, no one can get it back.
