Discuss...


edit 2: and Bed Bugs.



Edited 3 time(s). Last edit at 03/08/2012 01:38AM by Eli Khalife.

I bought a new PCee today because I got the blue screen of death. :[




edit: double :[ :[
lulz



Edited 1 time(s). Last edit at 03/08/2012 01:30AM by Eli Khalife.

Finally, someone decided to post a Web bug in one of their posts. I'd only been talking about this for about fucking forever.

Now you just need to sync up your timestamps with user posts and you're well on your way to some serious adventures in outing.

Cheers!

The Script-O Geriatric Wrote:
-------------------------------------------------------
> Finally, someone decided to post a Web bug in one
> of their posts. I'd only been talking about this
> for about fucking forever.
>
> Now you just need to sync up your timestamps with
> user posts and you're well on your way to some
> serious adventures in outing.
>
> Cheers!



Welcome ChuckHoffmann:



Edited 3 time(s). Last edit at 03/08/2012 05:08AM by Eli Khalife.

Eli Khalife Wrote:
-------------------------------------------------------
> The Script-O Geriatric Wrote:
> --------------------------------------------------
> -----
> > Finally, someone decided to post a Web bug in
> one
> > of their posts. I'd only been talking about
> this
> > for about fucking forever.
> >
> > Now you just need to sync up your timestamps
> with
> > user posts and you're well on your way to some
> > serious adventures in outing.
> >
> > Cheers!
>
>
>
> Welcome ChuckHoffmann:
>
> Internet Service Provider Verizon Internet
> Services
> Hostname washdc.fios.verizon.net
> Last IP Address 96.255.209.70
> Browser Mozilla Firefox 10.0.2
> Browser Language English (United States)
> Operating System Windows Vista

Smart boy.

The other locations on your list are as follows:

Internet Service Provider Cox Communications
Last IP Address 98.169.134.117
Browser Mozilla Firefox 9.0.1
Browser Language English (United States)
Operating System Windows Vista
Vienna

Internet Service Provider Cox Communications
Last IP Address 70.179.90.75
Browser Safari 534.52.7
Browser Language English (United States)
Operating System Mac OS X 10.6.8
Falls Church

Internet Service Provider Verizon Internet Services
Last IP Address 173.73.82.216
Browser Safari 7534.48.3
Browser Language English (United States)
Operating System iOS 5.0.1
Mobile Device iPhone iphone 5.0.1
Springfield

Internet Service Provider Cox Communications
Last IP Address 98.169.197.9
Browser Internet Explorer 9.0
Browser Language English (United States)
Operating System Windows Vista
Alexandria

Internet Service Provider Cox Communications
Last IP Address 68.100.43.166
Browser Internet Explorer 9.0
Browser Language English (United States)
Operating System Windows 7
Fairfax

Internet Service Provider Verizon Internet Services
Last IP Address 173.79.187.84
Browser Safari 533.19.4
Browser Language English
Operating System Mac OS X 10.4.11
Sterling

Internet Service Provider Verizon Internet Services
Last IP Address 72.66.48.201
Browser Mozilla Firefox 10.0.2
Browser Language English (United States)
Operating System Windows 7
Alexandria

Internet Service Provider Verizon Internet Services
Last IP Address 72.66.17.208
Browser Safari 6533.18.5
Browser Language English (United States)
Operating System iOS 4.2.1
Mobile Device iPhone iphone 4.2.1
Burke

Internet Service Provider Verizon Internet Services
Last IP Address 96.255.27.202
Browser Opera 9.80
Browser Language English (United States)
Operating System Windows Vista
Herndon

Internet Service Provider Verizon Internet Services
Last IP Address 96.255.189.193
Browser Internet Explorer 9.0
Browser Language English (United States)
Operating System Windows 7
Annandale

Internet Service Provider Cox Communications
Last IP Address 72.219.234.221
Browser Safari 530.18
Browser Language English (United States)
Operating System Mac OS X 10.5.7
Springfield

Internet Service Provider Cox Communications
Last IP Address 68.230.182.217
Browser Mozilla Firefox 10.0.2
Browser Language English (United States)
Operating System Windows XP
Fairfax

Internet Service Provider Verizon Internet Services
Last IP Address 96.255.27.202
Browser Opera 9.80
Browser Language English (United States)
Operating System Windows Vista
Herndon

Internet Service Provider Verizon Internet Services
Last IP Address 72.66.48.201
Browser Mozilla Firefox 10.0.2
Browser Language English (United States)
Operating System Windows 7
Alexandria

Internet Service Provider Verizon Internet Services
Last IP Address 173.66.84.74
Browser Mozilla Firefox 9.0.1
Browser Language English (United States)
Operating System Windows 7
Arlington

Internet Service Provider Verizon Internet Services
Last IP Address 96.255.209.70
Browser Mozilla Firefox 10.0.2
Browser Language English (United States)
Operating System Windows Vista
Springfield

Internet Service Provider Hawaiian Telcom Services Company
Last IP Address 72.234.118.122
Browser Internet Explorer 9.0
Browser Language English (United States)
Operating System Windows 7
Hawaii

Internet Service Provider Sprint PCS
Last IP Address 66.87.87.229
Browser Safari 533.1
Browser Language English (United States)
Operating System Android 2.2.2
Bronx, NY

The Hawaii one I suspect is Lizzie, the Herndon one eesh, and the Sterling address is whatever name Mr. Misery is using now.

And a happy hello to all my neighbors in Springfield and Burke.

The Script-O Geriatric Wrote:
-------------------------------------------------------

>
> The Hawaii one I suspect is Lizzie, the Herndon
> one eesh, and the Sterling address is whatever
> name Mr. Misery is using now.
>
> And a happy hello to all my neighbors in
> Springfield and Burke.




I spotted a Sprint PCS that has an IP out of Plainville, NJ but shows up in San Francisco. Why would this be?

Your Web Bug appears to be based out of a server in Indiana.
Attachments:

Haha Hawii though? Good guess. Everyone knows I'm not in VA anymore and there's only one other choice on there that isn't in VA. Maybe this post will help or process of elimnation on the others.

I have everything you said I wouldn't, HA!
#stillwinning

lizzie Wrote:
-------------------------------------------------------
> Haha Hawii though? Good guess. Everyone knows I'm
> not in VA anymore and there's only one other
> choice on there that isn't in VA. Maybe this post
> will help or process of elimnation on the others.


Welcome Lizzy/Verizon...I will leave it at that and I'm not telling either.

Here is more zoomed in of Metro area

Attachments:

Wrong sweetie...not on verizon right now..you should know that..not in va..its on your list though..

I have everything you said I wouldn't, HA!
#stillwinning

108.45.75.130 D.C.

Umm..no...that's not on your list...come on...think...cell phone...not in va...cary already said what type of phone I use...idk if you're the one with this if you aren't figuring it out...you should be able to see...

I have everything you said I wouldn't, HA!
#stillwinning

Oh..I see..it wasn't you..chuck posted it..well it still shouldn't be that hard to figure out since there's still only one other one not in va..

I have everything you said I wouldn't, HA!
#stillwinning

Oops...I was looking at the wrong page for the above IP out of DC.

Your post @ 2:12:37 AM
Internet Service Provider Verizon Internet Services
Hostname rcmdva.east.verizon.net
Last IP Address 74.110.239.74
Browser Opera 9.80
Browser Language English (United States)
Operating System Windows 7

No...lol omg..you don't seem to understand what not on verizon means. I'm posting from a cell phone dumbass lol. Fucking think! UP TOP. Someone else posted on another thread at 2:12 though but I don't see how you aren't connecting it..chuck said bronx you said nj..close enough..sprint..ggeeeze..fucking slowbus!

I have everything you said I wouldn't, HA!
#stillwinning

Where is chuck? He posted the right shit..idk what kinda shit you're on...

I have everything you said I wouldn't, HA!
#stillwinning

Eli Khalife Wrote:
-------------------------------------------------------
> Oops...I was looking at the wrong page for the
> above IP out of DC.
>
> Your post @ 2:12:37 AM
> Internet Service Provider Verizon Internet
> Services
> Hostname rcmdva.east.verizon.net
> Last IP Address 74.110.239.74
> Browser Opera 9.80
> Browser Language English (United States)
> Operating System Windows 7

I stand corrected. This is eesh. Windows 7 + Opera Browser + Richmond Metro Area = eesh.

You're only saying verizon cause cary said that like a million times because if you really knew your shit you would be able to see that I'm not in va...or using verizon..so I don't get what's going on

I have everything you said I wouldn't, HA!
#stillwinning

I narrowed it down. There were too many views all at once.
The anon poster above is: 96.255.209.70
You are: New IP:66.87.87.37 | First Time IP: 66.87.87.229 Sprint PCS

lizzie Wrote:
-------------------------------------------------------
> You're only saying verizon cause cary said that
> like a million times because if you really knew
> your shit you would be able to see that I'm not in
> va...or using verizon..so I don't get what's going
> on


Srsly...? Check Again.

Haha thanks chuck! I was gonna say..why the hell would I lie about not being in va when you guys can obviously see that shit? I've said many times before that I don't live in va anymore..you had it earlier...sprint...

I have everything you said I wouldn't, HA!
#stillwinning

Lmao check again? Bro...I'm the sprint one..tell me where that's located..its on chucks list..

I have everything you said I wouldn't, HA!
#stillwinning

lizzie Wrote:
-------------------------------------------------------
> you had it earlier...sprint...


like i said:

"You are: New IP:66.87.87.37 | First Time IP: 66.87.87.229 Sprint PCS"

The 87s are mine..

I have everything you said I wouldn't, HA!
#stillwinning

Since lizzie's posting from the Bronx, does that mean we should all give him a Bronx Cheer?

Okay well like I said..you had it wrong at first..and you did...but glad you figured it out..why did you think I was in Hawii though? Chuck?

I have everything you said I wouldn't, HA!
#stillwinning

The phone is connected through a tower having to do with a 908 area code.

Haha chuck you sould come up top and see me sometime

I have everything you said I wouldn't, HA!
#stillwinning

If I said I was Snooki would you believe me?

I have everything you said I wouldn't, HA!
#stillwinning

lizzie Wrote:
-------------------------------------------------------
> Okay well like I said..you had it wrong at
> first..and you did...but glad you figured it
> out..why did you think I was in Hawii though?
> Chuck?

>Haha chuck you sould come up top and see me sometime

I thought your anonymizer/proxy was assigning you an IP address out of Hawaii. I have no idea who the Hawaii IP is, otherwise.

And I dislike traveling, or even leaving my house, so I won't be visiting you anytime soon.

Eesh likes long road trips, though. He was all set to drive up to Herndon to stalk you when he thought you were Shannon Marshall, so what's a couple extra hours on the road for him?

However it appears the phone is in Cali

Do you guys think eesh is gonna be mad that I live so far? I want him to come sniff my hair but I feel like he wouldn't drive all the way up here

I have everything you said I wouldn't, HA!
#stillwinning

lizzie Wrote:
-------------------------------------------------------
> Do you guys think eesh is gonna be mad that I live
> so far? I want him to come sniff my hair but I
> feel like he wouldn't drive all the way up here

He would.

Lol it was chantilly but it don't use a proxy and eli..what?

I have everything you said I wouldn't, HA!
#stillwinning

Ah..the phone came from cali so that might be it..but idk..that's weird but lol I wonder how mad eesh is knowing every little thing he thought he had on me was a lie...but I don't think he would come up here..it would get jumped and killed so fast..

I have everything you said I wouldn't, HA!
#stillwinning

Where's my bronx cheer btw?

I have everything you said I wouldn't, HA!
#stillwinning

Somebody just logged on with an iPad...

Damn dude lol where from? Do you know how many people are gonna be freaked out by this? No one is gonna wanna come here anymore lol I see a certain nigger loving sad life having faggot hasnt posted since his shit was put out there

I have everything you said I wouldn't, HA!
#stillwinning

That shits cool though..cause at first I thought it was a joke til I saw my fucking location haha..but oh well..glad everyone knows I wasn't lying when I said I don't live in va anymore but now I can't post anon cause you'll be able to figure out it was me lol

I have everything you said I wouldn't, HA!
#stillwinning

lizzie Wrote:
-------------------------------------------------------
> Damn dude lol where from? Do you know how many
> people are gonna be freaked out by this?

All I could get so far is between Gainesville, VA and Spotsylvania, VA
IP 71.171.79.20
Browser Safari 419.4
Browser Language English (United States)
Operating System iOS 5.0.1
Mobile Device iPad ipad 5.0.1
Connected through Verizon

> No one is
> gonna wanna come here anymore lol I see a certain
> nigger loving sad life having faggot hasnt posted
> since his shit was put out there


He hasn't been posting but he has been around.



Edited 1 time(s). Last edit at 03/08/2012 03:21AM by Eli Khalife.

lizzie Wrote:
-------------------------------------------------------
> Damn dude lol where from? Do you know how many
> people are gonna be freaked out by this? No one is
> gonna wanna come here anymore lol I see a certain
> nigger loving sad life having faggot hasnt posted
> since his shit was put out there

It'll just encourage more people to post anonymously, is all.

Oh, and I predict that there's going to be the online equivalent of an angry mob of villagers with torches and pitchforks pleading with Cary to ban Eli for hacking.
Attachments:

We just had a Silver Spring, MD visiting for the first time today....Welcome!

Lol yeah I was thinking the same thing chuck

I have everything you said I wouldn't, HA!
#stillwinning

The Script-O Geriatric Wrote:
-------------------------------------------------------

> Oh, and I predict that there's going to be the
> online equivalent of an angry mob of villagers
> with torches and pitchforks pleading with Cary to
> ban Eli for hacking.


I can assure you that there are and I am taking notes. I am not hacking anything...I consider more of networking like using tools at my disposal and recovering information that was lost in transit between people and my computer via this website. yah digg??

Plus I am sure Cary will be happy that I didn't bring this site offline for 3 days again. He had blocked my IP through his server so that I couldn't even access the website. Proxies are the key though...and I can access the site from the once perma-banned IP as well.

One more thing: Eli should use different images or URLs for every thread he posts a Web bug in, as to make identification and tracking of various users easier.

This whole episode has me almost motivated to take up finishing my message board screen-scraper so I can send the data to Eli and he can match up IPs/UserAgents/Operating Systems to various posters.

The Script-O Geriatric Wrote:
-------------------------------------------------------
> One more thing: Eli should use different images or
> URLs for every thread he posts a Web bug in, as to
> make identification and tracking of various users
> easier.
>
> This whole episode has me almost motivated to take
> up finishing my message board screen-scraper so I
> can send the data to Eli and he can match up
> IPs/UserAgents/Operating Systems to various
> posters.


I don't need separate images for each page as I can sort the results by page...as well as by IP, time, OS, Online/Offline, and other parameters that I set for tracking. I had to tweak it earlier as I had confused myself with some of the results that I was being given.

P.S. The iPad was here again...

Lol I know who the ipad was..someones an angry little homo

I have everything you said I wouldn't, HA!
#stillwinning

I pinned eesh down to this one...
It was posted a few months back and I reconfirmed it today.

Internet Service Provider Verizon Internet Services
Last IP Address 74.110.239.74
Browser Opera 9.80
Browser Language English (United States)
Operating System Windows 7



Posted this a while back:
IP Address 74.110.228.106
pool-74-110-228-106.rcmdva.east.verizon.net

PORT / STATE / SERVICE
20/tcp closed ftp-data
21/tcp closed ftp
23/tcp filtered telnet
80/tcp open http
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered misrosoft-ds
1723/tcp closed pptp

Both general area of Fort Lee, VA



Edited 1 time(s). Last edit at 03/08/2012 03:58AM by Eli Khalife.

The Script-O Geriatric Wrote:
-------------------------------------------------------
> Eli Khalife Wrote:
> --------------------------------------------------
> -----
> > Oops...I was looking at the wrong page for the
> > above IP out of DC.
> >
> > Your post @ 2:12:37 AM
> > Internet Service Provider Verizon Internet
> > Services
> > Hostname rcmdva.east.verizon.net
> > Last IP Address 74.110.239.74
> > Browser Opera 9.80
> > Browser Language English (United States)
> > Operating System Windows 7
>
> I stand corrected. This is eesh. Windows 7 + Opera
> Browser + Richmond Metro Area = eesh.

Blessed are the murderous.
Attachments:

Eli Khalife Wrote:
-------------------------------------------------------
> I pinned eesh down to this one...
> It was posted a few months back and I reconfirmed
> it today.
>
> Internet Service Provider Verizon Internet
> Services
> Last IP Address 74.110.239.74
> Browser Opera 9.80
> Browser Language English (United States)
> Operating System Windows 7
>
>
>
> Posted this a while back:
> IP Address 74.110.228.106
> pool-74-110-228-106.rcmdva.east.verizon.net
>
> PORT / STATE / SERVICE
> 20/tcp closed ftp-data
> 21/tcp closed ftp
> 23/tcp filtered telnet
> 80/tcp open http
> 135/tcp filtered msrpc
> 139/tcp filtered netbios-ssn
> 445/tcp filtered misrosoft-ds
> 1723/tcp closed pptp
>
> Both general area of Fort Lee, VA

Blessed are the murderous.
Attachments:

Attachments:

Eli Khalife Wrote:
-------------------------------------------------------
> The Script-O Geriatric Wrote:
> --------------------------------------------------
> -----
>
> > Oh, and I predict that there's going to be the
> > online equivalent of an angry mob of villagers
> > with torches and pitchforks pleading with Cary
> to
> > ban Eli for hacking.
>
>
> I can assure you that there are and I am taking
> notes. I am not hacking anything...I consider
> more of networking like using tools at my disposal
> and recovering information that was lost in
> transit between people and my computer via this
> website. yah digg??
>
> Plus I am sure Cary will be happy that I didn't
> bring this site offline for 3 days again. He had
> blocked my IP through his server so that I
> couldn't even access the website. Proxies are the
> key though...and I can access the site from the
> once perma-banned IP as well.

Blessed are the murderous.
Attachments:

LOL at Fort Lee. When you two brainiacs figure out how to geolocate an IP, let me know.

Blessed are the murderous.

How do you like your avatar eesh?? or should i say ladyboy?
Attachments:

Hahahahah! So can you tell how many people are here?

I have everything you said I wouldn't, HA!
#stillwinning

Currently 5 Unique IP addresses have viewed this page in the last 15 minutes.

Oh okay. That's cool..what about your sadboy thread?

I have everything you said I wouldn't, HA!
#stillwinning

Let us Welcome Mrs. Falls Church on your iPhone Operating System iOS 5.0.1...incase you thought there were others...you are wrong and here is your IP address...

198.228.193.70

Thank you, come again.

Lol others? Who's ip? There are a lot of iphone. Users or is that what you meant?

I have everything you said I wouldn't, HA!
#stillwinning

I meant there is only one iPhone user and that was the ip.

Its probably meade

I have everything you said I wouldn't, HA!
#stillwinning

this will make thread of the year

*sigh*

This thread has been reported numerous times so I'll chime in.

What Eli is doing here is the nature of the web. Off-site image includes are allowed on Fairfax Underground and as such when Eli (or any other user) posts an image that is referenced on another server your web browser will contact that server to display the image.

The trouble comes into play when the server is owned or controlled by the poster, because then this poster may glean some details about your connection when your web browser reaches out to their server to retrieve the image.

If I did not allow off-site includes on Fairfax Underground you wouldn't be able to embed Youtube videos, Google Maps imagery, or display in-line any image that wasn't specifically hosted on FairfaxUnderground.com. Any other website that allows off-site images via HTML, BBCode, etc., including some big players such as Fark, suffer from this same consequence.

The specific service that Eli has been using to glean this information has been banned, but any other forum member could still host a server and embed a link on Fairfax Underground that causes your web browser to retrieve reach out to their server and retrieve the image.

An important thing to note here is that just because your web browser reaches out to an off-site server doesn't mean that your identity here has been compromised. The operator of the malicious server will only see the information that your web browser explicitly sends to it, namely your IP address, browser (User Agent), and referring URL. It does NOT mean that the malicious website operator will be able to determine your posting name here, or any other information about you. There is, however, the distinct possibility that your identity could be revealed if you post in a thread with a malicious image include, because then your web browser will reach back out to the malicious operator's server and they may be able to form a correlation based on timestamps if there is a light enough volume of traffic to exclude other possible IP addresses.

The work-around to this is to set your browser to only load images hosted on the site you've specifically visited. An easy way to perform this using Mozilla Firefox is available here:
http://lifehacker.com/227199/firefox-20-tweak--load-images-from-originating-site-only

(Note that the article says Firefox 2.0 but I've confirmed it still works in 10.0.2)

Please do continue to report such things to me, as if off-site image includes are used with malicious intent I will simply ban the server hosting the files from being referenceable from any post.

Please forgive any typos as this was produced in a rush.

Further questions? Let me know.

- Cary
--Curator, FairfaxUnderground.com

You go above and beyond Cary... thank you
Attachments:

Cary wrote:
>It does NOT mean ame here, or any other information about you


I agree that by opening a page with a bug embedded nobody would actually be able to see which ip is linked to which user...however a posting that Lizzie made indicated that messages were pm'd with the bugs embedded and therefore whoever opened that pm gave definitive evidence of which ip was which user.

Source: I know because it happened to me.

Wait...WHAT? What about me and a PM? I've never done the web bug thing...

I have everything you said I wouldn't, HA!
#stillwinning

Posting ip's isn't illegal, just frowned upon...like masturbating on an airplane.

Eli pm'd me too

You mean this?

I have everything you said I wouldn't, HA!
#stillwinning
Attachments:

Word

lol, oh..okay..well..yeah...but if they have IP changers then they're good..but not really cause

1) Cary said it's not against the rules
2) He can and will still always do this now
3) There is no escape except to not come here

I have everything you said I wouldn't, HA!
#stillwinning

Word sista

Internet Service Provider Sprint PCS
Last IP Address 66.87.87.829
Browser Safari 533.1
Browser Language English (United States)
Operating System Android 2.2.2
Bronx, NY

That was me lol

I have everything you said I wouldn't, HA!
#stillwinning

I remember you posted that margarita with the beer in it from that one place in the Bronx or Brooklyn. Lizzie is in NYC.

Birthday Pictures you posted

Oh wow..who the hell are you.......who would remember that? LOL! Didn't I delete those pics after you said that? Now I gotta go find that thread..hmmm

I have everything you said I wouldn't, HA!
#stillwinning

Re: HAPPY BIRTHDAY TO ME!!
Posted by: Stinkfist ()
Date: February 03, 2012 11:30PM

lizzie Wrote:
-------------------------------------------------------
> >
> I'm SoOoO underage..


That place is in NYC. Fun times...


http://www.fairfaxunderground.com/forum/read.php?40,817616,818353,phorum_session_v5=4986%3Add3995fb43fc8ac03c90b8618102cf6c#msg-818353

How did that taste? Beer in a tequila mixed drink doesn't sound that great.

Diablo Royale .. I think

lol..well you're obviously stinkfist..I don't think anyone else would have remembered that you said that..so stop being anon..

I have everything you said I wouldn't, HA!
#stillwinning

how can you tell its Diablo Royale in NYC just from a cup?

question for Mexican Place Wrote:
-------------------------------------------------------
> how can you tell its Diablo Royale in NYC just
> from a cup?


I've been there before... But I don't know if that's the only place that makes them. They are pretty tasty

It's funny cause it was in NY though

I have everything you said I wouldn't, HA!
#stillwinning

Cary Wrote:
-------------------------------------------------------
> *sigh*
>
> This thread has been reported numerous times so
> I'll chime in.
>
> What Eli is doing here is the nature of the web.
> Off-site image includes are allowed on Fairfax
> Underground and as such when Eli (or any other
> user) posts an image that is referenced on another
> server your web browser will contact that server
> to display the image.
>
> The trouble comes into play when the server is
> owned or controlled by the poster, because then
> this poster may glean some details about your
> connection when your web browser reaches out to
> their server to retrieve the image.
>
> If I did not allow off-site includes on Fairfax
> Underground you wouldn't be able to embed Youtube
> videos, Google Maps imagery, or display in-line
> any image that wasn't specifically hosted on
> FairfaxUnderground.com. Any other website that
> allows off-site images via HTML, BBCode, etc.,
> including some big players such as Fark, suffer
> from this same consequence.
>
> The specific service that Eli has been using to
> glean this information has been banned, but any
> other forum member could still host a server and
> embed a link on Fairfax Underground that causes
> your web browser to retrieve reach out to their
> server and retrieve the image.
>
> An important thing to note here is that just
> because your web browser reaches out to an
> off-site server doesn't mean that your identity
> here has been compromised. The operator of the
> malicious server will only see the information
> that your web browser explicitly sends to it,
> namely your IP address, browser (User Agent), and
> referring URL. It does NOT mean that the
> malicious website operator will be able to
> determine your posting name here, or any other
> information about you. There is, however, the
> distinct possibility that your identity could be
> revealed if you post in a thread with a malicious
> image include, because then your web browser will
> reach back out to the malicious operator's server
> and they may be able to form a correlation based
> on timestamps if there is a light enough volume of
> traffic to exclude other possible IP addresses.
>
> The work-around to this is to set your browser to
> only load images hosted on the site you've
> specifically visited. An easy way to perform this
> using Mozilla Firefox is available here:
> http://lifehacker.com/227199/firefox-20-tweak--loa
> d-images-from-originating-site-only
>
> (Note that the article says Firefox 2.0 but I've
> confirmed it still works in 10.0.2)
>
> Please do continue to report such things to me, as
> if off-site image includes are used with malicious
> intent I will simply ban the server hosting the
> files from being referenceable from any post.
>
> Please forgive any typos as this was produced in a
> rush.
>
> Further questions? Let me know.
>
> - Cary
> --Curator, FairfaxUnderground.com


Thus lead to the ban of YouTube embedding...You're Welcome!

Some good advice from Cary. Everyone should read this.



Cary Wrote:
-------------------------------------------------------
*sigh*

This thread has been reported numerous times so I'll chime in.

What Eli is doing here is the nature of the web. Off-site image includes are allowed on Fairfax Underground and as such when Eli (or any other user) posts an image that is referenced on another server your web browser will contact that server to display the image.

The trouble comes into play when the server is owned or controlled by the poster, because then this poster may glean some details about your connection when your web browser reaches out to their server to retrieve the image.

If I did not allow off-site includes on Fairfax Underground you wouldn't be able to embed Youtube videos, Google Maps imagery, or display in-line any image that wasn't specifically hosted on FairfaxUnderground.com. Any other website that allows off-site images via HTML, BBCode, etc., including some big players such as Fark, suffer from this same consequence.

The specific service that Eli has been using to glean this information has been banned, but any other forum member could still host a server and embed a link on Fairfax Underground that causes your web browser to retrieve reach out to their server and retrieve the image.

An important thing to note here is that just because your web browser reaches out to an off-site server doesn't mean that your identity here has been compromised. The operator of the malicious server will only see the information that your web browser explicitly sends to it, namely your IP address, browser (User Agent), and referring URL. It does NOT mean that the malicious website operator will be able to determine your posting name here, or any other information about you. There is, however, the distinct possibility that your identity could be revealed if you post in a thread with a malicious image include, because then your web browser will reach back out to the malicious operator's server and they may be able to form a correlation based on timestamps if there is a light enough volume of traffic to exclude other possible IP addresses.

The work-around to this is to set your browser to only load images hosted on the site you've specifically visited. An easy way to perform this using Mozilla Firefox is available here:
http://lifehacker.com/227199/firefox-20-tweak--load-images-from-originating-site-only

(Note that the article says Firefox 2.0 but I've confirmed it still works in 10.0.2)

Please do continue to report such things to me, as if off-site image includes are used with malicious intent I will simply ban the server hosting the files from being referenceable from any post.

Please forgive any typos as this was produced in a rush.

Further questions? Let me know.

- Cary
--Curator, FairfaxUnderground.com

lizzie Wrote:
-------------------------------------------------------
> Internet Service Provider Sprint PCS
> Last IP Address 66.87.87.829
> Browser Safari 533.1
> Browser Language English (United States)
> Operating System Android 2.2.2
> Bronx, NY
>
> That was me lol