SLUniverse Forums

Joannah Cramer · 03-07-2008, 11:21 AM

Quote:

Originally Posted by Joshua Nightshade

Furthermore do you guys realize every time you load up my signature image, as it's hosted on my website, I get your IP addresses?

You get IP of 'someone' who loaded your image... it's a bit different from ability to being able to easily tie the IP to certain AV in world.

And yes, music URL allows for the same thing... hence it's optional in the viewer.

Khamon · 03-07-2008, 11:24 AM

Quote:

Originally Posted by le Joshua

I understand the concern but it is one unique to SL because the userbase doesn't realize how common and easy to grab this information is.

Plus the users really do believe that their anonymity is protected

and that their locking doors keep people out

and that they can trust Linden Lab employees

and that noone can see inside their sex dungeons

and that they own their inventory items

Joshua Nightshade · 03-07-2008, 11:32 AM

Quote:

Originally Posted by Joannah Cramer

You get IP of 'someone' who loaded your image... it's a bit different from ability to being able to easily tie the IP to certain AV in world.

And yes, music URL allows for the same thing... hence it's optional in the viewer.

With work I could create a script that takes the time to correlate times the image was accessed in my server logs with times someone posted in a thread that I had previously posted in. It wouldn't always be 1:1 but I could reasonably get the IP address matched up to people in a conversation.

I have used an easier method to link accounts that were being used for harassment anyway, so it is possible if someone's willing to put forth the effort.

You can't put IP address to avatar either unless you have something on your land time stamping when an avatar passes by with server logs.

Joannah Cramer · 03-07-2008, 11:42 AM

Quote:

Originally Posted by Joshua Nightshade

With work I could create a script that takes the time to correlate times the image was accessed in my server logs with times someone posted in a thread that I had previously posted in. It wouldn't always be 1:1 but I could reasonably get the IP address matched up to people in a conversation.

Hugely inaccurate since your signature image is all over the place, in both fresh and old threads. Any time anyone reads any of these threads, they might load your image. They don't need to post in it, they just have to see it. As you keep posting, the number of possible points which cause your image to load increase making it even harder to determine.

In SL when the URL is loaded this is 100% done by someone who is currently on your parcel. That makes matching infinitely easier.

Quote:

You can't put IP address to avatar either unless you have something on your land time stamping when an avatar passes by with server logs.

Like a basic freebie script lot of vendors use to register customer flow to their place?

Joshua Nightshade · 03-07-2008, 11:45 AM

Quote:

Originally Posted by Joannah Cramer

Hugely inaccurate since your signature image is all over the place, in both fresh and old threads. Any time anyone reads any of these threads, they might load your image. They don't need to post in it, they just have to see it. As you keep posting, the number of possible points which cause your image to load increase making it even harder to determine.

Which was why I said I could match it to those who had posted, if I wanted to create a huge database. Not those who simply viewed.

Joannah Cramer · 03-07-2008, 11:53 AM

Quote:

Originally Posted by Joshua Nightshade

Which was why I said I could match it to those who had posted, if I wanted to create a huge database. Not those who simply viewed.

Ahh but there's the thing, how do you tell that IP is of someone who happened to post at that time, and not one of X readers of either this or totally different threads, who were just browsing at the same time?

Not to mention, someone posting in thread would generally have to view it first... so the timestamp of the moment they loaded your signature image wouldn't actually match the timestamp of moment they posted their reply... add to it that time difference would also vary depending on how long it took them to make the reply... oy.

Joshua Nightshade · 03-07-2008, 11:59 AM

Quote:

Originally Posted by Joannah Cramer

Ahh but there's the thing, how do you tell that IP is of someone who happened to post at that time, and not one of X readers of either this or totally different threads, who were just browsing at the same time?

Not to mention, someone posting in thread would generally have to view it first... so the timestamp of the moment they loaded your signature image wouldn't actually match the timestamp of moment they posted their reply... add to it that time difference would also vary depending on how long it took them to make the reply... oy.

/bans her

Joannah Cramer · 03-07-2008, 12:10 PM

Mecha Dinosaur · 03-07-2008, 01:23 PM

Quote:

Originally Posted by Joannah Cramer

Ahh but there's the thing, how do you tell that IP is of someone who happened to post at that time, and not one of X readers of either this or totally different threads, who were just browsing at the same time?

Not to mention, someone posting in thread would generally have to view it first... so the timestamp of the moment they loaded your signature image wouldn't actually match the timestamp of moment they posted their reply... add to it that time difference would also vary depending on how long it took them to make the reply... oy.

Crap, I'm not going to post how to do this. Massive blocks of text removed....

So what this means in the end is the typical LL creep who feels they want to stalk their ex-SL-gf is going to need to use social engineering to get an address, they'll not have the resources, or technical knowledge to do harm.

Unless the victim is putting up their address, not using a firewall and/or router, does not use anti-virus, does not patch their OS, and uses IE. Then their in trouble, and there are too many people out there who are like this.

FlipperPA Peregrine · 03-07-2008, 01:53 PM

I think I just stared at Mecha's forum avatar for 15 minutes without realizing it.

Lordfly Digeridoo · 03-07-2008, 05:38 PM

Quote:

Originally Posted by FlipperPA Peregrine

I think I just stared at Mecha's forum avatar for 15 minutes without realizing it.

Dude, you're not alone. It's the most hypnotizing avatar I've ever seen.

prinţesă nină · 03-07-2008, 05:59 PM

i confess... the first time i say it i watched it for a few minutes nonstop.

Quote:

Originally Posted by Lordfly Digeridoo

Dude, you're not alone. It's the most hypnotizing avatar I've ever seen.

Adam Zaius · 03-07-2008, 08:08 PM

Ugh. Not this again.

You're on the interwebs. You have an IP address. It gets spread around a lot by nessecity. Get over it.

Shyotl · 03-07-2008, 08:10 PM

Quote:

Originally Posted by Adam Zaius

Ugh. Not this again.

You're on the interwebs. You have an IP address. It gets spread around a lot by nessecity. Get over it.

My proxy says nope.

prinţesă nină · 03-07-2008, 10:03 PM

oh no! my ip address!!

FlipperPA Peregrine · 03-08-2008, 12:38 AM

Quote:

Originally Posted by Adam Zaius

Ugh. Not this again.

You're on the interwebs. You have an IP address. It gets spread around a lot by nessecity. Get over it.

OKAY, but only if you give me back my avatar key! NOW!

Psyke Phaeton · 03-08-2008, 12:55 AM

Actually what was more interesting than "ZOMG I can 'play' a parcels web page" is that llLoadURL loads an in-client web browser that is resizable, link-clickable and can go to other typed in web pages.

This is far more useful. Scripts can now load up webpages into a clients viewer! Excellent for all sorts of info. This is even better than web on a prim. Just click the prim for a functional browser in SL.

Also Help in the script editor opens a resizable in-client webpage of the LSL command from the wiki.

prinţesă nină · 03-08-2008, 01:05 AM

even malicious js? flash? what about active x?
or are we talking vanilla html?

Psyke Phaeton · 03-08-2008, 01:15 AM

No flash or fancy stuff but buttons work. It seems pretty normal minus plugins to me in short testing.

Psyke Phaeton · 03-08-2008, 01:18 AM

I am expecting to see misclicks lead to unintended sites pointing to advertising. Slightly mitigated by the pop up box asking if you wish to load the page.

prinţesă nină · 03-08-2008, 08:11 AM

what about forms? do they work?

FlipperPA Peregrine · 03-08-2008, 08:33 AM

Forms have worked using the in-world Mozilla browser, yes.

Flash does not, but may some day. ActiveX most definitely does not - it is Mozilla based, not MS.

This has actually been active for some time: the "web" tab of the profile uses the same browser, as does help. SLBoutique ran just fine within the "web" tab of the profile, and it used forms and cookies.

Regards,

-Flip

Lucifer Baphomet · 03-08-2008, 08:58 AM

The new RC is a buggy piece of crap.

BEARintheMorning · 03-08-2008, 09:09 AM

Quote:

Originally Posted by Lucifer Baphomet

The new RC is a buggy piece of crap.

03-07-2008, 12:10 PM	#58 (permalink)
Joannah Cramer Senior Member Join Date: Sep 2007 Posts: 509	FIC

03-07-2008, 01:53 PM	#60 (permalink)
FlipperPA Peregrine Evil Incarnate! Recursion is beautiful! Join Date: Jun 2007 Location: Philadelphia, PA Posts: 4,829 SL Join Date: 2003-11-14 Business: Peregrine Salon SLShopper Ads: 1 My Mood:	I think I just stared at Mecha's forum avatar for 15 minutes without realizing it. __________________ Peregrine Salon: Flip & Jenn's thang.

03-08-2008, 12:55 AM	#67 (permalink)
Psyke Phaeton Psyke's Defense Systems None Join Date: Sep 2007 Location: Australia Posts: 4,449 SL Join Date: 12-Oct-2003 Business: Psyke's Defence Systems Blog Entries: 3 SLShopper Ads: 1	Actually what was more interesting than "ZOMG I can 'play' a parcels web page" is that llLoadURL loads an in-client web browser that is resizable, link-clickable and can go to other typed in web pages. This is far more useful. Scripts can now load up webpages into a clients viewer! Excellent for all sorts of info. This is even better than web on a prim. Just click the prim for a functional browser in SL. Also Help in the script editor opens a resizable in-client webpage of the LSL command from the wiki. __________________ Χάος Psyke's Defense Systems SLURL - maker of the original security orbs. Psyke's AjaxLife - Free web based Second Life access hosted by Psyke.

03-07-2008, 08:08 PM	#63 (permalink)
Adam Zaius Ruins everything. Has a gay lisp when drunk. Join Date: Sep 2007 Location: Perth, Orstraya. Posts: 2,511 SL Join Date: 9-Jan-04 Business: Azure Islands My Mood:	Ugh. Not this again. You're on the interwebs. You have an IP address. It gets spread around a lot by nessecity. Get over it.

03-07-2008, 10:03 PM	#65 (permalink)
prinţesă nină Banned adores her psycho Join Date: Sep 2007 Location: melbourne Posts: 4,360 SLShopper Ads: 1 My Mood:	oh no! my ip address!!

03-08-2008, 01:05 AM	#68 (permalink)
prinţesă nină Banned adores her psycho Join Date: Sep 2007 Location: melbourne Posts: 4,360 SLShopper Ads: 1 My Mood:	even malicious js? flash? what about active x? or are we talking vanilla html?

03-08-2008, 01:15 AM	#69 (permalink)
Psyke Phaeton Psyke's Defense Systems None Join Date: Sep 2007 Location: Australia Posts: 4,449 SL Join Date: 12-Oct-2003 Business: Psyke's Defence Systems Blog Entries: 3 SLShopper Ads: 1	No flash or fancy stuff but buttons work. It seems pretty normal minus plugins to me in short testing.

03-08-2008, 01:18 AM	#70 (permalink)
Psyke Phaeton Psyke's Defense Systems None Join Date: Sep 2007 Location: Australia Posts: 4,449 SL Join Date: 12-Oct-2003 Business: Psyke's Defence Systems Blog Entries: 3 SLShopper Ads: 1	I am expecting to see misclicks lead to unintended sites pointing to advertising. Slightly mitigated by the pop up box asking if you wish to load the page.

03-08-2008, 08:11 AM	#71 (permalink)
prinţesă nină Banned adores her psycho Join Date: Sep 2007 Location: melbourne Posts: 4,360 SLShopper Ads: 1 My Mood:	what about forms? do they work?

03-08-2008, 08:33 AM	#72 (permalink)
FlipperPA Peregrine Evil Incarnate! Recursion is beautiful! Join Date: Jun 2007 Location: Philadelphia, PA Posts: 4,829 SL Join Date: 2003-11-14 Business: Peregrine Salon SLShopper Ads: 1 My Mood:	Forms have worked using the in-world Mozilla browser, yes. Flash does not, but may some day. ActiveX most definitely does not - it is Mozilla based, not MS. This has actually been active for some time: the "web" tab of the profile uses the same browser, as does help. SLBoutique ran just fine within the "web" tab of the profile, and it used forms and cookies. Regards, -Flip

03-08-2008, 08:58 AM	#73 (permalink)
Lucifer Baphomet Pampers Io Zenophile Join Date: Aug 2007 Location: Darkmere Posts: 5,640 Business: Radio Free Darkmere My Mood:	The new RC is a buggy piece of crap.