6 ms·

ImageShack uploader IP addresses visible

45 points by eurodance 14y ago

thejosh 14y ago
Oh boy. Everyone who has uploaded images of screenshots of illegal movies onto forums are gonna be majorly shafted now.
- kcbanner 14y ago
  How does a screenshot of a movie you own look any different from one you don't?
  - bmelton 14y ago
    Possibly by it being linked from a torrent description saying "Here is this movie that I pirated and am offering to you illegally for free - <username>" and then having that same username attached to the ImageShack screenshot that also provides your IP address?
    - aes256 14y ago
      Plus, if we're being pedantic, most pirated movies shared online are re-encodes of their original source material. Given the sheer number of variables involved in the encoding process, the odds of independent encodes being absolutely identical are extremely low. It is trivial to determine from a screenshot whether it is taken from the source or a re-encode (i.e. whether it is from a legitimate source or not, assuming the source is the only authorized copy), and if you have a copy of the particular re-encode, to verify the exact provenance.
- apawloski 14y ago
  I could be wrong, but isn't the precedent that IPs aren't adequate evidence of a person's identity? I don't think that a dynamic IP address that was used 18 months ago is going to be of any use now.
  - kmfrk 14y ago
    It may not indict you directly, but it certainly helps finding the person behind it.
tsheeeep 14y ago
The API for videos is described here: http://code.google.com/p/imageshackapi/wiki/YFROGxmlInfo http://code.google.com/p/imageshackapi/wiki/YFROGxmlInfo For images it should be hidden.
0x0 14y ago
Glancing at the source code http://mikescoding.com/imageshack/index.phps http://mikescoding.com/imageshack/index.phps for 30 seconds, it seems the way this works is that the uploader IP address is retrieved from some XML file on the imageshack servers. It seems every image on imageshack has a corresponding metadata XML file stored at a secret location, but the algorithm to calculate this URL was exposed during the earlier pastebin leak?
- jimktrains2 14y ago
  That's what I'm guessing, but I wish the linked blog post was a bit more descriptive.
- landr0id 14y ago
  The XML URL is calculated by taking the image's filename (minus the extension), calculating the MD5 hash of that + a static salt (which is visible in the source), then replacing the image extension with the first 10 chars of the hash + ".xml". Example [1]. What type of third party would they be giving this API to? [1] http://img236.imageshack.us/img236/3432/as8132329zz9.d907da5f86.xml http://img236.imageshack.us/img236/3432/as8132329zz9.d907da5...
  - 0x0 14y ago
    That link is 404'ing for me. Did they close this already?
    - landr0id 14y ago
      They 403'd this specific link it looks like. An image I uploaded about an hour ago seems to be working still. [1] is the data it returned for the 403'd image. Here's [2] some Ruby code if you want to try it out yourself [1] http://pastie.org/5393401 http://pastie.org/5393401 [2] http://pastie.org/5393444 http://pastie.org/5393444
ComputerGuru 14y ago
Does anyone still use imageshack for anything serious any more? I'm surprised to hear they're still around. Here's what their compete chart looks like, for what little it's worth (login required, so screenshot instead): http://cl.ly/image/3z1v152G3r1l http://cl.ly/image/3z1v152G3r1l
- landr0id 14y ago
  I think that ImageShack still imposes bandwidth limits and other restraints. I can't see why anyone would use it over another service like imgur.
  - rplnt 14y ago
    Imgur has some restrictions as well. It's their (Imageshack's) "view image" pages that are horrible.
    - jonknee 14y ago
      Any host is going to have restrictions, but Imgur will not take your image down for bandwidth reasons.
  - tripzilch 14y ago
    Depends on what you use them for. Services like ImageShack and Photobucket keep your images around, while (last time I checked, which is admittedly about a year ago) Imgur's FAQ says something about deleting old images that haven't seen any traffic for a certain timespan (at least 3 months, IIRC).
- riffic 14y ago
  I've stopped using them ever since they were first known to violate their own privacy policies: http://floydfe.wordpress.com/2007/10/11/imageshack-founder-violates-his-companys-privacy-tos-why-just-for-fun/ http://floydfe.wordpress.com/2007/10/11/imageshack-founder-v...
eurodance 14y ago
patched

45 points by eurodance 14y ago

thejosh 14y ago

Oh boy. Everyone who has uploaded images of screenshots of illegal movies onto forums are gonna be majorly shafted now.

kcbanner 14y ago
How does a screenshot of a movie you own look any different from one you don't?
- bmelton 14y ago
  Possibly by it being linked from a torrent description saying "Here is this movie that I pirated and am offering to you illegally for free - <username>" and then having that same username attached to the ImageShack screenshot that also provides your IP address?
  - aes256 14y ago
    Plus, if we're being pedantic, most pirated movies shared online are re-encodes of their original source material. Given the sheer number of variables involved in the encoding process, the odds of independent encodes being absolutely identical are extremely low. It is trivial to determine from a screenshot whether it is taken from the source or a re-encode (i.e. whether it is from a legitimate source or not, assuming the source is the only authorized copy), and if you have a copy of the particular re-encode, to verify the exact provenance.
apawloski 14y ago
I could be wrong, but isn't the precedent that IPs aren't adequate evidence of a person's identity? I don't think that a dynamic IP address that was used 18 months ago is going to be of any use now.
- kmfrk 14y ago
  It may not indict you directly, but it certainly helps finding the person behind it.

tsheeeep 14y ago

The API for videos is described here: http://code.google.com/p/imageshackapi/wiki/YFROGxmlInfo http://code.google.com/p/imageshackapi/wiki/YFROGxmlInfo For images it should be hidden.

0x0 14y ago

Glancing at the source code http://mikescoding.com/imageshack/index.phps http://mikescoding.com/imageshack/index.phps for 30 seconds, it seems the way this works is that the uploader IP address is retrieved from some XML file on the imageshack servers. It seems every image on imageshack has a corresponding metadata XML file stored at a secret location, but the algorithm to calculate this URL was exposed during the earlier pastebin leak?

jimktrains2 14y ago
That's what I'm guessing, but I wish the linked blog post was a bit more descriptive.
landr0id 14y ago
The XML URL is calculated by taking the image's filename (minus the extension), calculating the MD5 hash of that + a static salt (which is visible in the source), then replacing the image extension with the first 10 chars of the hash + ".xml". Example [1]. What type of third party would they be giving this API to? [1] http://img236.imageshack.us/img236/3432/as8132329zz9.d907da5f86.xml http://img236.imageshack.us/img236/3432/as8132329zz9.d907da5...
- 0x0 14y ago
  That link is 404'ing for me. Did they close this already?
  - landr0id 14y ago
    They 403'd this specific link it looks like. An image I uploaded about an hour ago seems to be working still. [1] is the data it returned for the 403'd image. Here's [2] some Ruby code if you want to try it out yourself [1] http://pastie.org/5393401 http://pastie.org/5393401 [2] http://pastie.org/5393444 http://pastie.org/5393444

ComputerGuru 14y ago

Does anyone still use imageshack for anything serious any more? I'm surprised to hear they're still around. Here's what their compete chart looks like, for what little it's worth (login required, so screenshot instead): http://cl.ly/image/3z1v152G3r1l http://cl.ly/image/3z1v152G3r1l

landr0id 14y ago
I think that ImageShack still imposes bandwidth limits and other restraints. I can't see why anyone would use it over another service like imgur.
- rplnt 14y ago
  Imgur has some restrictions as well. It's their (Imageshack's) "view image" pages that are horrible.
  - jonknee 14y ago
    Any host is going to have restrictions, but Imgur will not take your image down for bandwidth reasons.
- tripzilch 14y ago
  Depends on what you use them for. Services like ImageShack and Photobucket keep your images around, while (last time I checked, which is admittedly about a year ago) Imgur's FAQ says something about deleting old images that haven't seen any traffic for a certain timespan (at least 3 months, IIRC).
riffic 14y ago
I've stopped using them ever since they were first known to violate their own privacy policies: http://floydfe.wordpress.com/2007/10/11/imageshack-founder-violates-his-companys-privacy-tos-why-just-for-fun/ http://floydfe.wordpress.com/2007/10/11/imageshack-founder-v...

eurodance 14y ago

patched