3 ms·
Depending on what you use the IP for, asking a third party for your IP address could be an interesting attack vector for a MitM attack. e.g. you need your IP t
by alexkus 13y ago
Depending on what you use the IP for, asking a third party for your IP address could be an interesting attack vector for a MitM attack.
e.g. you need your IP to tell a remote server to send you something. You connect to the IP address service to ask for your IP, it should return x.x.x.x but it returns y.y.y.y instead. Any connections to any port on IP y.y.y.y get forwarded to a similar port on IP x.x.x.x meanwhile the MitM takes a copy of all of the data going back and forth.
It's not foolproof, and there are a myriad of ways to defend against it, but it's definitely a reason why I wouldn't trust any third party service (even DDG/Google) to get my IP address.