4 ms·
Let me tell you a little secret: Apache has these things called logs that can "reveal" the IP address of another computer. And so can the evil hacker tool 'nets
by kefka 13y ago
Let me tell you a little secret: Apache has these things called logs that can "reveal" the IP address of another computer. And so can the evil hacker tool 'netstat'.
Do you trust this service or not? Don't trifle around with stupid shit like this.
- lotyrin 13y agoWhat if he's not being paranoid, but instead pointing out how paranoid and flawed the concept he has pointed out is?
- Sir_Cmpwn 13y agoWe're running on nginx, and we told it not to log IPs. You'll obviously have to take our word for it. Even if you don't take our word for it, it's no worse than most other sites, which do log your IP. EDIT: Or you can run a self-hosted instance of MediaCrush, it's open source: https://github.com/MediaCrush/MediaCrush https://github.com/MediaCrush/MediaCrush
- kefka 13y agoThat was precisely my point: TCP doesn't work with a spoofed IP connection while maintaining state. So you usually have to use your IP address or a middleman like TOR or a proxy. And then you have to trust the endpoint: you. And frankly, I get sick of the undue and infinity-about paranoia. It gets tiring hearing again and again.
- VMG 13y agoThe scenario described in the blog is an attacker gaining access to the database containing the IP hashes.