|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Do mods have access to user IP data?
#27010221 - 10/29/20 11:52 AM (3 years, 2 months ago) |
|
|
Just wondering.
|
Brian Jones
Club 27



Registered: 12/18/12
Posts: 12,340
Loc: attending Snake Church
Last seen: 3 hours, 31 minutes
|
Re: Do mods have access to user IP data? [Re: teknix]
#27011541 - 10/30/20 06:10 AM (3 years, 2 months ago) |
|
|
I'm going to take a guess and say no. I would think the highest ups here do, but they're not here to harm you
-------------------- "The Rolling Stones will break up over Brian Jones' dead body" John Lennon I don't want no commies in my car. No Christians either. The worst thing about corruption is that it works so well,
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: Brian Jones]
#27012351 - 10/30/20 03:39 PM (3 years, 2 months ago) |
|
|
Yeh, I don't think the admins would use my IP maliciously, but not really looking for a guess 
Evidence suggests someone got the IP I was using from this site and used it to attack me, so I want to see what I can rule out.
|
bodhisatta 
Smurf real estate agent


Registered: 04/30/13
Posts: 61,889
Loc: Milky way
|
Re: Do mods have access to user IP data? [Re: teknix]
#27012366 - 10/30/20 03:52 PM (3 years, 2 months ago) |
|
|
Yes we can but you've always used a proxy so your story is total bullshit lol.
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: bodhisatta] 1
#27012368 - 10/30/20 03:53 PM (3 years, 2 months ago) |
|
|
Nah, it's a dynamic IP that requires manual reset to change. I'm using VPN now tho.
Shroomery should protect user private data better imo.
I personally don't have anything to hide from like say the DEA, but some noobs might.
|
bodhisatta 
Smurf real estate agent


Registered: 04/30/13
Posts: 61,889
Loc: Milky way
|
Re: Do mods have access to user IP data? [Re: teknix]
#27012372 - 10/30/20 03:55 PM (3 years, 2 months ago) |
|
|
Every site you visit logs that info and its visible to anyone that administrates those sites. It's not really private info. Still though we would be shitcanned for disclosing it
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: bodhisatta] 1
#27012373 - 10/30/20 03:56 PM (3 years, 2 months ago) |
|
|
Yeah, and administer is not = mod.
What good reason would you ever need to see the IP I'm using to perform the task of a moderator?
|
bodhisatta 
Smurf real estate agent


Registered: 04/30/13
Posts: 61,889
Loc: Milky way
|
Re: Do mods have access to user IP data? [Re: teknix]
#27012376 - 10/30/20 03:59 PM (3 years, 2 months ago) |
|
|
Still just people lol.
Anyone here not even a mod could embed a picture they hosted and view the logs and get your IP anyway
Of course its just a tool to combat puppets and trolls.
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: bodhisatta]
#27012379 - 10/30/20 04:01 PM (3 years, 2 months ago) |
|
|
They would get an IP, but they wouldn't know whose IP.
A DEA mole could get mod here and have access to all user IP info, since entrapment isn't a thing anymore, they could even coax noobs to tell on themselves.
|
bodhisatta 
Smurf real estate agent


Registered: 04/30/13
Posts: 61,889
Loc: Milky way
|
Re: Do mods have access to user IP data? [Re: teknix]
#27012383 - 10/30/20 04:04 PM (3 years, 2 months ago) |
|
|
Lol then hide under a rock.
I could send you a PM with a 1x1 pixel image hidden in it. Just to you. And with that I could get your user agent string and IP. All you would have to do is open the PM.
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: bodhisatta]
#27012385 - 10/30/20 04:07 PM (3 years, 2 months ago) |
|
|
It still isn't equivalent. Because then I would know exactly who did it and the IP of the host. Sure, give me your server info to try and hack a library PC!
|
bodhisatta 
Smurf real estate agent


Registered: 04/30/13
Posts: 61,889
Loc: Milky way
|
Re: Do mods have access to user IP data? [Re: teknix]
#27012392 - 10/30/20 04:12 PM (3 years, 2 months ago) |
|
|
Well I suppose it's time to wait for ythan to reply with something far more eloquent than what I had to say.
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: bodhisatta]
#27012413 - 10/30/20 04:27 PM (3 years, 2 months ago) |
|
|
Thanks for offering some insight, none-the-less.
|
nooneman


Registered: 04/24/09
Posts: 14,555
Loc: Utah
|
Re: Do mods have access to user IP data? [Re: teknix]
#27012759 - 10/30/20 07:31 PM (3 years, 2 months ago) |
|
|
Quote:
teknix said: Evidence suggests someone got the IP I was using from this site and used it to attack me
What specifically did they do? How did they attack you?
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: nooneman]
#27012895 - 10/30/20 08:56 PM (3 years, 2 months ago) |
|
|
Just some botnet DDOS shit as far as I can tell.
|
bodhisatta 
Smurf real estate agent


Registered: 04/30/13
Posts: 61,889
Loc: Milky way
|
Re: Do mods have access to user IP data? [Re: teknix]
#27013003 - 10/30/20 10:19 PM (3 years, 2 months ago) |
|
|
No mod here is that savvy that also would have the time to care about doing that to you.
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: bodhisatta]
#27013132 - 10/31/20 12:18 AM (3 years, 2 months ago) |
|
|
I'll let you know if I find anything more sophisticated in the logs.

Pointing something like a LOIC at an IP doesn't require much savvy.
|
bodhisatta 
Smurf real estate agent


Registered: 04/30/13
Posts: 61,889
Loc: Milky way
|
Re: Do mods have access to user IP data? [Re: teknix]
#27013432 - 10/31/20 08:28 AM (3 years, 2 months ago) |
|
|
Id bet you don't have hardware old enough to be susceptible to LOIC. Afaik a decade ago modems and routers had software that cockblocked that shit
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: bodhisatta]
#27014157 - 10/31/20 03:55 PM (3 years, 2 months ago) |
|
|
Well, thanks for your opinion.
The point of this post is ask Ythan to protect user IP data. Is it necessary that you see my IP to perform tasks of a mod?
That's all, if you think I got hacked or not, it's not my concern.
If you want to talk about how to rent a Mirai or IOT Botnet that has a GUI interface from the Darkweb for a few dollars in bitcoins, we can discuss that in another thread.
You talk about spoofing an IP with 1x1 image then go on to say using botnet is savvy, so I dunno man.
(The LOIC was just an example of the simplification of use for botnets, if you missed it.)
|
Ythan
α( α )α


Registered: 08/08/97
Posts: 18,774
Loc: NY/MA/VT Borderlands
Last seen: 4 seconds
|
Re: Do mods have access to user IP data? [Re: teknix]
#27014445 - 10/31/20 06:30 PM (3 years, 2 months ago) |
|
|
A moderator can see your IP if they place you on suicide watch. There would be a log of that action and who performed it. You have never been placed on suicide watch.
Tracking via hidden image, like bodhisatta described, should not be possible on this site if you're using the option to "retrieve offsite resources through a web-based proxy" in your display preferences. This has been the default since we enabled global SSL back in 2015.
If IPs are leaking from the site somehow that's not by design but you haven't really given any indication why you believe that is the case.
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: bodhisatta]
#27014476 - 10/31/20 06:50 PM (3 years, 2 months ago) |
|
|
Quote:
bodhisatta said: Yes we can but you've always used a proxy so your story is total bullshit lol.
Well Bodhi said that, and the reason I suspect my IP leaked from this site is because this is the only site I connected with that particular IP to. (The same IP that was attacked)
I dunno is Bodhi just trying to stir the pot or he really see's the IP?
Considering he thought I was on a proxy because a changing IP, being that it is dynamic, makes me think he does see it.
I'll just use VPN to connect here in the future, but this whole scenario is sus af imo.
Edited by teknix (10/31/20 06:57 PM)
|
Ythan
α( α )α


Registered: 08/08/97
Posts: 18,774
Loc: NY/MA/VT Borderlands
Last seen: 4 seconds
|
Re: Do mods have access to user IP data? [Re: teknix]
#27014500 - 10/31/20 07:09 PM (3 years, 2 months ago) |
|
|
There are staff tools that show if we detected you using a proxy, but whenever an IP is displayed the last two octets are masked.
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: Ythan]
#27014514 - 10/31/20 07:15 PM (3 years, 2 months ago) |
|
|
I don't think the first two octets ever change in the dynamic IP's I use, But I'd have to check to make certain.
I've honestly never paid much attention to that.
|
nooneman


Registered: 04/24/09
Posts: 14,555
Loc: Utah
|
Re: Do mods have access to user IP data? [Re: teknix]
#27014556 - 10/31/20 07:49 PM (3 years, 2 months ago) |
|
|
I have noticed that there are some people who have managed to connect my shroomery account with other accounts I have online. Not really sure how they were able to, could have been any number of ways, but it is a little unusual because I try to keep them very separate.
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: nooneman]
#27014578 - 10/31/20 08:05 PM (3 years, 2 months ago) |
|
|
|
Ythan
α( α )α


Registered: 08/08/97
Posts: 18,774
Loc: NY/MA/VT Borderlands
Last seen: 4 seconds
|
Re: Do mods have access to user IP data? [Re: nooneman]
#27014596 - 10/31/20 08:22 PM (3 years, 2 months ago) |
|
|
Cookies can only be read by the site that created them. They can't be used for cross-site tracking in the way you describe.
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: Ythan]
#27014637 - 10/31/20 08:54 PM (3 years, 2 months ago) |
|
|
Third-party cookies are placed by someone other than the site you are on. For example, the website may partner with an advertising network to deliver some of the ads you see. Or they may partner with an analytics company to help understand how people use their site. These βthird partyβ companies also may place cookies in your browser to monitor your behavior over time.
Over time, these companies may develop a detailed history of the types of sites you frequent, and they may use this information to deliver ads tailored to your interests. For example, if an advertising company notices that you read a lot of articles about running, it may show you ads about running shoes β even on an unrelated site youβre visiting for the first time.
https://www.consumer.ftc.gov/articles/0042-online-tracking
Not sure what other explanation for the linkage, and not certain how they could link your specific account without sharing the data.
|
Ythan
α( α )α


Registered: 08/08/97
Posts: 18,774
Loc: NY/MA/VT Borderlands
Last seen: 4 seconds
|
Re: Do mods have access to user IP data? [Re: teknix]
#27014828 - 10/31/20 10:36 PM (3 years, 2 months ago) |
|
|
Third-party cookies require the site to embed code that's hosted on another domain. Shroomery doesn't set any third-party cookies.
|
bodhisatta 
Smurf real estate agent


Registered: 04/30/13
Posts: 61,889
Loc: Milky way
|
Re: Do mods have access to user IP data? [Re: Ythan]
#27015590 - 11/01/20 11:36 AM (3 years, 2 months ago) |
|
|
even if staff that were mods got to see the last two octets of the IP what could they realistically do with that? I'm a little internet savvy and probably moreso than most of the mods here and I wouldn't be able to do shit with that info anyway
|
Ythan
α( α )α


Registered: 08/08/97
Posts: 18,774
Loc: NY/MA/VT Borderlands
Last seen: 4 seconds
|
Re: Do mods have access to user IP data? [Re: bodhisatta] 2
#27015639 - 11/01/20 12:06 PM (3 years, 2 months ago) |
|
|
There are pretty sophisticated automatic vulnerability scanners that can probe a network for unpatched devices and launch an exploit or drop a malicious payload. There are also botnets that can be rented for denial of service purposes. They could check https://iknowwhatyoudownload.com and tell everyone how much you like granny porn. If your IP shows up on other publicly indexed sites, they might be able to start building a profile. I dunno, I'm not a security researcher but if someone really wants to make your life miserable, having your IP isn't going to hurt their chances.
But honestly, I think most people these days are pretty secure due to NATs and pre-installed firewalls and auto-updating software and whatnot, and the privacy considerations are more about assuaging member concerns than preventing any specific risk. I probably wouldn't walk around Def Con flying it on a banner or anything but I'm happy to divulge here that my IP is 98.11.229.221, go nuts everyone.
|
mndfreeze 
Shroomery Secret Service




Registered: 04/22/02
Posts: 20,529
Loc: PuppetMasterFlash
Last seen: 4 seconds
|
Re: Do mods have access to user IP data? [Re: Ythan]
#27018164 - 11/02/20 07:33 PM (3 years, 2 months ago) |
|
|
Quote:
Ythan said: my IP is 98.11.229.221, go nuts everyone. 
-------------------- Nothing says love like grannies prolapsed anus! quote]Urb said: I know... Its fucked up... Ill fix it minyana..[/quote]
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: mndfreeze]
#27018259 - 11/02/20 08:21 PM (3 years, 2 months ago) |
|
|
Given the example IP above, to perform a simple denial of service (dos) you could just open the command prompt in windows and type.
ping 98.11.229.221 βt |65500
Now if you have a bunch of systems all doing this at the same time you have a DDOS. (Ythan, I'm sure is ignoring pings on that IP)
You can also run a whois on the IP to start a DOX on the IP, which can lead to the name, address, and phone number of the owner of the IP.
https://whois.domaintools.com/98.11.229.221
Metasploit is a program that has been around for a while that can scan, like Ythan said, for exploits and vulnerabilities. These exploits can be used to gain remote access and install backdoors, viruses, malware, and even Hijack the system completely (Ransomware). Or just add your machine to their botnet.
You wouldn't want to do any of these with your personal IP tho, because the system you are attacking will see where the data is coming from.
Edited by teknix (11/02/20 09:11 PM)
|
teknix
πβπ
’ππ
π°π‘ πΌπ⨻



Registered: 09/16/08
Posts: 11,953
|
Re: Do mods have access to user IP data? [Re: teknix]
#27018282 - 11/02/20 08:41 PM (3 years, 2 months ago) |
|
|
I am curious about the main load in the html.
var _5=_2.title.match(/https?:\/\/vimeo\.com\/(\d+)/);var _6=_2.title.match(/(?:https?:\/\/(?:www\.|m\.)?youtube\.com\/.*?(?:v=|v\/)|https?:\/\/youtu.be\/)(.{11})(?:.*(&start=[\d]+))?/i);var _7=_2.title.match(/(https?:\/\/(?:www\.)?soundcloud\.com\/[^\/]+\/[^\/]+\/?)/i);var _8=_2.title.match(/https:\/\/d\.tube\/#!\/v\/(\w+)\/(\w+)/i);var _9=_2.title.match(/https:\/\/www\.metacafe\.com\/watch\/(\w+).*/i);var _10=_2.title.match(/https?:\/\/(?:www\.)?jigsawplanet.com\/?.*pid=(\w+)/i);var _a=_2.style.width.replace("px",""),_b=_2.style.height.replace("px","");if(_5){_2.innerHTML="<iframe referrerpolicy=\"no-referrer-when-downgrade\" src=\"https://player.vimeo.com/video/"+_5[1]+"?autoplay=1\" width=\""+_a+"\" height=\""+_b+"\" frameborder=\"0\" allowfullscreen></iframe>";}else if(_6){if(_6[2]==undefined){_6[2]="";}
Not sure what that does?
Also what is the hunnypawt that links to the POP server and e-mail about?
http://www.shroomery.org/hp/hunnypawt.php
<a href="mailto:kialgunto@smtp.maeyanie.com" style="display: none;">kialgunto@smtp.maeyanie.com</a> ?
|
Ythan
α( α )α


Registered: 08/08/97
Posts: 18,774
Loc: NY/MA/VT Borderlands
Last seen: 4 seconds
|
Re: Do mods have access to user IP data? [Re: teknix]
#27018524 - 11/02/20 11:43 PM (3 years, 2 months ago) |
|
|
The javascript implements click-to-play functionality for embedded media. The URL is a honeypot we host for https://www.projecthoneypot.org to help catch spammers.
|
|