Beware! | People pming images to grab your IP Adress

Since Ddosing, DOXing and Social Engineering is growing, I think we must face this problem.
We need a whitelist, so people can't upload images from their own domain to view peoples ip adresses.



Update:

This has happened a few times already now,
I suggest making a white list of image hosts, I'm willing to make it myself.



Hey all,

Today I received a pm from a leecher with 0 posts, and he attached an image to it.
With this image he can get my IP Adress (I'm a high risk staker / pker on runescape) and they want to Ddos me.

This thread will explain it:
http://forums.zybez.net/topic/1515243-warning-all-clans/

"The domain they're using is picts.*****.com If you can ban that domain, i highly recommend it".



Please ban this user immediately.

I don't think I'm the only one who got this message either.


Please block that domain if possible, or another solution.

 

Seems legit.

Edit: So if you even view the image they get your IP? That's some shit. Be careful guys.

 

Yes, because the image is hosted on their own domain.

They could also make a thread with the image, and get everyone's ip who opens the thread.

 

Doubt they own the domain though.

And it might seem as a surprise, however it's possible to embed a keylogger in an image also.

So I would definitely stay caution if you receive one of these PM's alike.

I'd also support the banning of that particular domain.

 

This is very common and there isn't really any way to fix it.

 

Please check out this thread Suf

http://forums.zybez.net/topic/1514506-doing-our-part-for-the-community/

 

The only thing to do would be disabling img tag in PMs. It's possible to do, and doesn't really affect that much, it's very possible to do.

I do support, for the safety of users.

 

That, or a white list for domains as seen in my second link.

Or a restriction on the img tag's for newcomers for example.

 

What could they possibly do with our ip other then ddos us?

 

Well I want to be able to sent Images in PMs for my GFX work.

I support either limiting the domains with a blacklist, or putting a post req of about 50, like in the soam forum.

 

One thing to take note is now their is a method coming out (not sure if everyone is familiar with it or not) allowing people to make ANY file have ANY extension. Im talking about taking a .exe and making it a .jpg. And no it wont be untitled.jpg.exe, it is untitled.jpg but it is a executable program. Just keep that in mind also.

 

This will make no difference. Theres 101+ more ways to get peoples IP addresses.

 

It doesn't matter. If someone REALLY wants your ip, they'll get it.

 

I've brought this to light before in the IRC; I believe Govind(I think, or TK) and SuF told me that there's really nothing to do about it.
If they did ban that domain, couldn't they create another?

 

There's millions of methods to get it. But banning such domains wouldn't hurt, it can stop them for a few days? hours?...

And to OP, do you have firewall?

 

Just dont open links.

 

No, otherwise they wouldn't resort to this method.

No, unless you know a corrupt admin / moderator on sythe or zybez or something.
If you don't, you won't get my ip adress no matter how hard you try.

This is why I suggest a white list.

White list would stop this forever.

I have a personal firewall, it does not protect you from Ddosing.

Please learn to read.

 

Whitelisting should do the trick (Just do it once).

supportz.

 

Yeah I can easily make a white list for image hosting domains.

 

I fell victim to this before from some guy who wanted me to mm for him he sent me a pic i clicked and got ddosed by some guy i got banned.

I agree with your white list idea.