Privacy issue

[Zarathos]

You've a big privacy issue here. Hovering over the IP button below one's post reveals the users' actual IP address, while clicking it shows a masked host name. It's safe the assume whatever mod you use to mask the host name isn't functioning correctly or at least not as intended. If it masks the hostname, it makes sense it would mask the IP address as well as you can easily trace the unmasked hostname from the IP.



Cheers

 

[EpicNPC]

I am unable to replicate this. The IP should appear no where, only for mods and admins. Im using a test account and checking source code and I do not see any IP address anywhere.

Hovering over the Location Info button says "Country Info". Please provide more info.

What is the URL to the post? You can see everyones IP or just in one post?

 

[Zarathos]

You need to switch to the default vBulletin style.

I can see everyone's IP address, including yours there.

 

[EpicNPC]

thanks. I removed the default skin until it's fixed.

 

[EpicNPC]

Its been fixed and the default skin is available again.

 

[Zarathos]

Appreciate the prompt action taken.

 

[Artemys]

Quite the find, I wonder if other users were aware of this but didn't report it; which in that case, thanks for doing so.

 

[Zarathos]

I know vBulletin in and out and I only took action because I like it here and thus it's my best interest (you should never install 3rd party mods without reviewing every line of code). Having said that, I'm confident others were aware. IP addresses are a gold mine for scammers who can impersonate someone from your locale (derived from IP data) to increase disposition towards them. This is also the reason you shouldn't add country flags or anything like that.

 

[Efflorescence]

I had noticed this just the other day, and was contemplating asking if it was intended, however I was unsure if it was an issue or not.

Now it seems properly masked with "x" marks.

 

[EpicNPC]

The 'Location Info' addon requires various template edits to function properly and when the forums were updated a few weeks ago, I had forgotten to make the required changes to the default theme.

For the most part the default theme does not get edited so many addons do not work with it, however in this case not working was causing a major privacy issues, so again thank you for reporting it.