Beware! | People pming images to grab your IP Adress

people are getting wors and worser each day...

 

thank you for your info

 

Create a whitelist. End of story.

I don't get why there is even a discussion about this. It is a problem, and it has a solution that even a baby could implement.

If you use custom domain names to host images, touch luck, you'll have to reupload the images to a domain that is whitelisted.

Support, and can't understand why people have such a hard time grasping this idea.

As to the people who keep saying it's easy to get someone's IP address, please tell me mine, because unless you send me an image you personally host, or try to view open connections over MSN, there's no way you're going to get my IP address.

 

I would just block image messages

 

Thanks, I know what you mean that's what I've been saying ^^

As I said, I'll even make the whitelist myself.
Sure GFX makers can be allowed to use their own domain and stuff.

It's no problem.

 

agreed, especially people's vocabulary.

 

They could has just posted that picture on a busy post like a gold selling one or in there sig and Wouk have everyone's ip. It is that simple

 

Just have IMG tags in PM's unavailable for people with less than 100 posts and 15 days of being registered.

 

This kind of "spam" (regular e-mail with the source content of the PM) is saving your ass :sick:. But whatever.

And what kind of "whitelist" - whitelist of persons from whom to accept PMs; whitelist of image hosts (and all other - blocked); whitelist of sth else?

 

This is a catch 22 situation, it might create spammers.
Rather have a whitelist since they can also just post it on a normal thread.

A whitelist of image hosting domains.

Such as tinypic, imageshack, imgur etc.

 

Completely agree, also ddsoin is for losers

 

wow. this has never happened to me.

 

Thanks for making us aware

 

You would create a whitelist of reputable image hosting sites that can be used. It wouldn't be hard to create, nor maintain, it's as simply as adding a domain name to an existing list if you ever want to update it, or simply deleting it to remove it. Most Sythe.org users would be completely unaffected by this, it would only affect the malicious users who we are talking about, and some people who use no name/personal hosting for their images. For those people, I really don't think it's too much to ask for them to start uploading future images using a different host.

I'm sure you could also implement it so it would start from here on out, as in, all the posts, PMs, threads, etc, made before it was implemented would be unaffected. This would solve the problem of people having to reupload all their previous images, but would still patch up the gaping security hole.

That you know of...

 

Yeah we really need this whitelist, like I said I can even make it myself if needed.
It's really easy to implement, update and maintain aswell.

I am now viewing the entire forums without IMG tags, I don't see signatures or anything, it's REALLY annoying.

 

Bump, requesting a white list as I can't even see signatures or anything atm >.>

 

A better solution might be to use your own image whitelist while browsing Sythe.

 

I don't think I can disable all sites and just add a few that I want to allow to load images?

I have to manually add malicious sites and then it's too late already =(

 

If you uncheck "load images automatically" you'll only load images from sites you've added to exceptions.

That's exactly what it does.

 

Yeah it does, but this is no good solution.

I will have to add hundreds of sites to this whitelist of websites that I wish to use, because it otherwise is won't show any image at all. Not even a button or anything..
Every website I will ever want to browse properly will have to be added lol, that's no option ofcourse.