Volafile / volafile-bugs

Volafile.org public bug tracker
17 stars 2 forks source link

Obscure IP addresses from mods. #125

Closed anon3000 closed 6 years ago

anon3000 commented 9 years ago

Instead of showing every user's real ip address, create a unique id for each user visible only to mods. They can use this id to identify individuals in the same way they currently use IP addresses.

IP addresses are not necessary for mods to perform their functions. To many people, an IP address is very sensitive information. You are not known for choosing mods based on trustworthiness. Because you can not select trustworthy moderators, it is necessary that you remove moderators from the trust equation. Do not give them this sensitive data.

Robertcop commented 9 years ago

i agree with this. please listen to anon3000.

indrakaw commented 9 years ago

Vote-up for anon3k.

SkaarjK commented 9 years ago

I, too, agree with this.

dongmaster commented 9 years ago

++

74togo commented 9 years ago

Wow, it's like none of you thought about how this would be implemented. Volafile servers would have to store everyone's ip and associate it with an ID. This obviously breaks the terms of the privacy policy.

EDIT: User BugMeNot has proposed a way to do this without storing every user's IP address:

  1. Have a GlobalSalt
  2. Instead of sending IP with every chat message, send hash(IP + GlobalSalt)
  3. Mods only see hash.
  4. Mods send hash to server when banning them.
  5. When banned user tries to chat, server will check if hash(IP + GlobalSalt) is in the set of banned hashes.
redrifle commented 9 years ago

I think you could maybe run the IPs through a caesar cipher with a random shift value (generated by a RNG)? It'd be very barebones but I think it'd work and still be easier and possibly faster than the other method. If I'm retarded let me know. Edit, I'm retarded.

Robertcop commented 9 years ago

this needs to be implemented. not just because of rogue. what anon said makes a lot of sense.

bastardsandcheats commented 8 years ago

To many people, an IP address is very sensitive information To paranoid people This is a silly idea and not needed at all

laino commented 6 years ago

rogue has been removed