Static IP Addresses - Security & Legal Issues - International Cannagraphic Magazine Forums

Fidel Castro · 07-23-2007, 08:53 PM

Simply by opening this thread and loading this image:

Google knows your IP address, and could have logged it (if they were in the law enforcement business). If I posted a photo on my own server and logged server stats I would have your IP address. If I linked to a web site with "Google Analytics" on it and you followed the link I would have your IP address.

A few years ago this didn't even matter, IP addresses were still 99% anonymous. But now many of us have static IPs, and many ISPs log IP addresses because it doesn't really take any extra work.

Google Analytics nailed my town (population < 2,000) just from knowing my IP address. Then I called my ISP inquiring about the owner of my IP address and they gave my a range (based on the last few numbers of the IP address) and narrowed it down to almost the block that I live on!

Very scary stuff of you ask me. I always avoid following links off threads here unless they link to youtube or another common site. But to make us safer ICMAG shouldn't allow "IMG" tags that link to external sites.

GMT · 07-23-2007, 09:03 PM

at first I was going to say so why post it then, but it does raise a good security point. I've opened a few threads with larger pictures in them and checked the properties of the pictures and sure enough they are hosted offsite. I think, (if it's easily doable, I'm not a techie so not sure of that) that ( if the other site does get the users IP and not this sites IP (which if this site requests the pictures seems possible to me (but see the previous disclaimer))) it would be a good idea to prevent this type of post.

Fidel Castro · 07-23-2007, 09:12 PM

The server hosting the image will definitely get the users IP, not icmag's. If you view the source code of this page (different ways to do it depending on your browser) the code links directly to google and not through a proxy on icmag.

07-23-2007, 09:12 PM

Quote:

ICMAG shouldn't allow "IMG" tags that link to external sites.

Agreed..good post.

Peace, hhf

HappyHemphog · 07-23-2007, 09:17 PM

If you use FireFox you can block webpages from loading images not on the same domain as the page. This prevents that from happening. You can also specify servers you will accept off site, like an image hosting server.

As far as getting my IP address, this is one of the reasons why I use Tor. They get an IP from Europe usually.

Edit: About that static IP, I don't know of a single ISP that issues static IPs without paying extra. True, on cable they assign you a specific IP that usually doesn't change until they remap the IP pool. But you are not guaranteed the IP will stay, hence a static IP whereby your ISP, for a fee, will guarantee you always get the IP you pay for.

For DSL, you get a new IP from a pool assigned to your area each time you connect. Rarely will it be the same.

Fidel Castro · 07-23-2007, 10:43 PM

I guess I didnt mean static IP by exact definition, I just mean a lot of times you're connected for days at a time with the same IP, and always use a similar one. It doesn't take much for the ISP to log all that. Even DSL can be traced back to an individual if your ISP helps out LEOs.

Using a proxy is the safest way to go, but I don't think icmag should just expect everyone to use a proxy. It would probably only take them a minute to stop external IMG links... they're rarely used anyway

Verite · 07-24-2007, 10:04 PM

And if google really cared they would do what everyone else does, and thats nix offsite redirects just like flickr, etc.

The bottom line has always been left to the ISP's to keep customer information private from any link to IP addresses [ thru court order ] and so far they have done just fine. If they hadnt the public at large would know about the violations in privacy and what ISP's were giving up personal info without court orders.

The privacy laws arent likely to change regarding personal customer information and IP address linking so the fear of reprisal at this moment is none, theres plenty more to fear than offsite linking that I can think of.

07-24-2007, 10:12 PM

i agree

Fidel Castro · 07-24-2007, 10:14 PM

you said it yourself there, ISPs cant give out personal info "without court orders." How hard would it be for the DEA to get a warrant if they had linked 1 user on ICMAG to 1 specific IP address? They'd have their warrint in a few hours, and then you'd get a knock at your door.... but I guess you've got plenty more to fear than that.

07-24-2007, 10:19 PM

real fucking hard guy...i have been posting hell of pics for years i just change account every 6 months to a year...never a knock at my door...my ip address is changed often and i have lots of other connections that arent mine wireless Internet...bottom line if there was really something to fear in pic posting i would have experienced it already i have been doing nothing but posting pics for along time now...here is one for you now

Quote:

Originally Posted by Fidel Castro

you said it yourself there, ISPs cant give out personal info "without court orders." How hard would it be for the DEA to get a warrant if they had linked 1 user on ICMAG to 1 specific IP address? They'd have their warrint in a few hours, and then you'd get a knock at your door.... but I guess you've got plenty more to fear than that.

07-23-2007, 08:53 PM	#1
Fidel Castro Banned Join Date: Mar 2007 Posts: 104	Static IP Addresses Simply by opening this thread and loading this image: Google knows your IP address, and could have logged it (if they were in the law enforcement business). If I posted a photo on my own server and logged server stats I would have your IP address. If I linked to a web site with "Google Analytics" on it and you followed the link I would have your IP address. A few years ago this didn't even matter, IP addresses were still 99% anonymous. But now many of us have static IPs, and many ISPs log IP addresses because it doesn't really take any extra work. Google Analytics nailed my town (population < 2,000) just from knowing my IP address. Then I called my ISP inquiring about the owner of my IP address and they gave my a range (based on the last few numbers of the IP address) and narrowed it down to almost the block that I live on! Very scary stuff of you ask me. I always avoid following links off threads here unless they link to youtube or another common site. But to make us safer ICMAG shouldn't allow "IMG" tags that link to external sites.
	Quote

07-23-2007, 09:17 PM	#5
HappyHemphog Member Join Date: Oct 2005 Location: In a field of hemp Posts: 482	If you use FireFox you can block webpages from loading images not on the same domain as the page. This prevents that from happening. You can also specify servers you will accept off site, like an image hosting server. As far as getting my IP address, this is one of the reasons why I use Tor. They get an IP from Europe usually. Edit: About that static IP, I don't know of a single ISP that issues static IPs without paying extra. True, on cable they assign you a specific IP that usually doesn't change until they remap the IP pool. But you are not guaranteed the IP will stay, hence a static IP whereby your ISP, for a fee, will guarantee you always get the IP you pay for. For DSL, you get a new IP from a pool assigned to your area each time you connect. Rarely will it be the same. __________________ A Walk Through Hempy's Garden Click on my Avatar for more information on Hempy's Garden and Step-by-Step Pictorials. And God said, "Behold, I have given you every herb bearing seed, which is upon the face of all the earth,..." - Genesis 1:29 KJV From the garden to the table, from the table to the bowl, may it cleanse your mind, body and eternal soul. Last edited by HappyHemphog; 07-23-2007 at 09:24 PM..
	Quote

07-24-2007, 10:04 PM	#7
Verite My little pony.. my little pony Join Date: Jul 2005 Posts: 4,750	And if google really cared they would do what everyone else does, and thats nix offsite redirects just like flickr, etc. The bottom line has always been left to the ISP's to keep customer information private from any link to IP addresses [ thru court order ] and so far they have done just fine. If they hadnt the public at large would know about the violations in privacy and what ISP's were giving up personal info without court orders. The privacy laws arent likely to change regarding personal customer information and IP address linking so the fear of reprisal at this moment is none, theres plenty more to fear than offsite linking that I can think of. __________________ Strains by Verite .......................... Holy Grail Intro, Seeds at Seebay, Private Breeders Orange Diesel Intro, Seeds now at Seedbay
	Quote

07-23-2007, 09:03 PM	#2
GMT I am, therefore I think Join Date: May 2004 Location: Wonderland Posts: 5,964	at first I was going to say so why post it then, but it does raise a good security point. I've opened a few threads with larger pictures in them and checked the properties of the pictures and sure enough they are hosted offsite. I think, (if it's easily doable, I'm not a techie so not sure of that) that ( if the other site does get the users IP and not this sites IP (which if this site requests the pictures seems possible to me (but see the previous disclaimer))) it would be a good idea to prevent this type of post.
	Quote

07-23-2007, 09:12 PM	#3
Fidel Castro Banned Join Date: Mar 2007 Posts: 104	The server hosting the image will definitely get the users IP, not icmag's. If you view the source code of this page (different ways to do it depending on your browser) the code links directly to google and not through a proxy on icmag.
	Quote

07-23-2007, 10:43 PM	#6
Fidel Castro Banned Join Date: Mar 2007 Posts: 104	I guess I didnt mean static IP by exact definition, I just mean a lot of times you're connected for days at a time with the same IP, and always use a similar one. It doesn't take much for the ISP to log all that. Even DSL can be traced back to an individual if your ISP helps out LEOs. Using a proxy is the safest way to go, but I don't think icmag should just expect everyone to use a proxy. It would probably only take them a minute to stop external IMG links... they're rarely used anyway
	Quote

07-24-2007, 10:14 PM	#9
Fidel Castro Banned Join Date: Mar 2007 Posts: 104	you said it yourself there, ISPs cant give out personal info "without court orders." How hard would it be for the DEA to get a warrant if they had linked 1 user on ICMAG to 1 specific IP address? They'd have their warrint in a few hours, and then you'd get a knock at your door.... but I guess you've got plenty more to fear than that.
	Quote

07-24-2007, 10:12 PM	#8
Guest Guest Posts: n/a	i agree
	Quote