Timeline for Exposing IP address via img tags
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 8, 2016 at 16:05 | comment | added | marstato | @Stoud yes, that is what i am saying. If you disable all external content but the raw HTML the website hoster still has your IP and can tell anyone else. | |
| Mar 8, 2016 at 12:01 | history | edited | marstato | CC BY-SA 3.0 |
added 662 characters in body
|
| Mar 8, 2016 at 11:48 | comment | added | wireghoul | Compared to a round of good old fashioned doxing your IP address is of little concern. If you're web hosting an image and can view logs, you can also set a cookie. Xss has nothing to do with it | |
| Mar 8, 2016 at 10:12 | comment | added | tim | @wireghoul but not anyone can just set a cookie, and not anyone just has XSS. But almost anyone can include an image on any number of websites (such as this one). I think the risk here is incredibly small, but one could imagine some far-fetched scenarios where this is not desired (eg someone doesn't like you on here, they place an image, get you to visit their profile, and try to attack your computer, as they now have your IP - and likely also an approximate location). | |
| Mar 8, 2016 at 9:53 | comment | added | wireghoul | Why are you worried about your public IP showing? Setting a cookie is a much more effective way of tracking someone. | |
| Mar 8, 2016 at 0:35 | comment | added | Stoud | Are you are saying that it is impossible to prevent other users of forums from getting your ip(Excluding VPNs/Proxies) | |
| Mar 7, 2016 at 23:49 | history | answered | marstato | CC BY-SA 3.0 |