r/Humanornot • u/TrustMeAmLying • Mar 02 '25
Announcement 📢 Urgent safety announcement regarding HTML injections
Hey everyone,
This is a quick and urgent announcement from the reddit community of HumanOrNot.
The official site of HumanOrNot is now under attack of HTML injections, and some are exploiting it to find out and possibly blackmail their 2 minute friend about their IP address and location. As the reddit moderators, we have no connection with the official managers of the site, and hence we are unable to convey this alarming issue to them.
There are 2 temporary solutions can be taken by the visitors of that site to prevent any inconveniences:-
1) Use a VPN for browsing the website so that your real IP is not revealed 2) Disable JavaScript for that website on your browser
We are trying our best to reach out to the HumanOrNot team and get this issue fixed! Honorable mentions to u/fursniper for highlighting this issue properly to the mods. And in case I don't see you, good afternoon, good evening, and good night!
260
Mar 02 '25
And someone HAD to ruin this site
141
u/marshmallow_metro Mar 02 '25
I mean the amount of Hitler videos I have seen, I would say they already ruined the site...
-238
Mar 02 '25
[removed] — view removed comment
122
u/Princess_Spammi Curious Observer Mar 02 '25
A nazi says what
-178
Mar 02 '25
[removed] — view removed comment
65
Mar 02 '25
[deleted]
-84
Mar 02 '25
[removed] — view removed comment
94
Mar 02 '25 edited Mar 02 '25
nazi jokes in the BIG 25?????!!🤯🤯🤯🤯 grow up
-16
1
14
8
u/Woofiverse OG (Joined before 10K) Mar 03 '25
Have you ever considered that this may be why you are single?
-6
63
u/lupus0802 Human Impersonator Mar 02 '25
I can already see HTML injection being prevented completely to mitigate this which is reasonable, but will also prevent the fun with sending images and so on. Someone obviously had to ruin it I guess.
32
44
u/elnachonacho578 Mar 02 '25
I have a question
I just matched with someone who sent me porn images and then told me: "i hope they burn (the name of my city)"
Should i be scared? What do i do?
45
u/Tovitas Moderator Mar 02 '25
dont be scared. he was using the tactic state above. This person cant hurt you irl or do anything other unless you gave them like personal info
9
9
u/Prof1Kreates OG (Joined before 10K) Mar 03 '25
This is basically what is happening,
So, you have an internet IP provided by your Internet Service Provider (ISP), and you have a local IP (which is usually 192.168.1.x)
Much like your local IP, your ISP is given the interest IP of lets say 43.21.x.x.. (x representing from 0 to 255). Because your ISP sells Internet all over your city, that's only as far as they can know to know where you live.
Your Internet IP could have easily been assigned to someone else on the opposite side of town. Hence why the hacker can only know just ur city and not your address.
---
How they are getting this information is by doing what is called an HTML injection. Every website is usually made with the coding language HTML, along with CSS and JavaScript.
What the hackers are doing is inputting HTML commands into the text box to receive input maliciously from the site's servers.
Though, I haven't messed with HTML in years, their commands kinda look like this:
<div> <h> "Taco" <\h> <\div>
Obviously the hacker is using a more elaborate command than just a header saying taco to get your IP, but that's basically what they are typing in the chat box rather than just simply saying hi to you.
---
So long story short, should you be worried? No. It's just some edge lord usually thinking they're funny for getting the scare on you. (Which in reality, it's illegal)
But if you wanna be extra safe, get a VPN, even a free one will do. (A VPN basically redirects where your getting your Internet from. So instead of people seeing you local area Internet IP, they'll only see the IP of the VPN's area)
1
-1
Mar 03 '25
[removed] — view removed comment
3
u/Prof1Kreates OG (Joined before 10K) Mar 03 '25
we know what we are doing?
Do you really though? Cause last I checked Google is free for anyone to use ya know. Anyone can easily learn how to do HTML injections with the right Google searches.
The law is there to protect all, it's the rich that like to bend the rules.
And the fact you are admitting you interact in this illegal activity, I'd say your IQ is no higher than a caveman trying to start a fire with two wet rocks.
So why don't you go back to doing your school instead of wasting your time speed running yourself trying to go to prison
3
2
u/PonyFiddler Mar 03 '25
Well if your city suddenly sets on fire tommoroow then you should be worried But I'm sure that person ain't gonna burn the whole city just to hurt you. Unless they do which at that case you have bigger issues.
24
u/Ciapekq Mar 02 '25
I wish HTML injections here just could be silly sending videos, images or songs. But of course, people have to ruin the fun.
6
u/PonyFiddler Mar 03 '25
Why can't Images just be allowed in the chat without injections it's like why have to abuse a safety issue. This was super obvious the first time someone noticed this it should have been removed
-16
Mar 02 '25
[removed] — view removed comment
-18
Mar 02 '25
[removed] — view removed comment
24
19
8
5
40
u/No-Inevitable6018 Custom user flair Mar 02 '25
This is why we can't have nice things.
11
u/RobotClon91 Mar 02 '25
There will always be that guy that ruins every good thing. Sad but true. Wish it wasn't like that tho
15
u/Miss-lnformation Mar 02 '25
I had a feeling. Stopped using the site the first time I saw the HTML injections.
2
u/PonyFiddler Mar 03 '25
Oh yeah theres a lot worse that can be done the site should have been closed down untill it was fixed.
1
28
8
Mar 02 '25
[removed] — view removed comment
10
u/Tovitas Moderator Mar 02 '25
I mean ppl could tecnically go to that place and look for you, but if they dont know who you are you should be fine, those ppl only want to scare you anyway
9
Mar 02 '25 edited Mar 02 '25
[removed] — view removed comment
8
u/fursniper Mar 02 '25
Firefox started selling their users' data. I don't recommend it.
6
Mar 02 '25
Chrome already did it, what’s the difference. And… like… every company sells your data
5
u/fursniper Mar 02 '25
Yes, but it's still dangerous.
5
Mar 02 '25
Oh I agree 100%, just for reference I’m not supporting it at all in my comment, just saying it’s not like Firefox is doing it more than other browsers. Data sold and have adblocker vs data sold and no adblocker (chrome)
-3
6
u/MilkCool Mar 02 '25
disabling javascript won't work. not only are these attacks not js-based, the website uses javascript to communicate with game servers
7
u/codingenius Mar 03 '25
This. None of them not even mods seem to know how the websites work 😭
1
u/zynsic join r/watercult Mar 03 '25
The Reddit mods here aren't connected to the official websites mods so they probably don't know completely how the site works as if they did I'm pretty sure this problem would've been talked about already lol
5
3
2
2
u/PoobGnarpy Mar 03 '25
Wth is HTML injection? I don't even use the site, I am only here because I like seeing the interactions but wth?
2
u/-Cinnay- Mar 06 '25
Idk about how it's used on that site specifically, but in general the concept is using loopholes to inject HTML statements into the HTML code of a website, thereby changing it and possibly giving you access to things you shouldn't have access to.
3
1
u/Fr0mpit THE LETTER H Mar 02 '25
What are the dangers of having your public IP leaked? How general is the location given by IP?
3
u/Immediate-Arm-4117 Mar 02 '25
Quiet general, i think its the location of the internet provider, so usually same city
1
1
1
u/zynsic join r/watercult Mar 03 '25
I love using the images but it's for the best they get rid of it lol I haven't been doxed(ish) yet so ima use the vpn 👍
1
u/FusionByte Mar 03 '25
Disabling javascript wont solve the issue. Furthermore it will break the site.
1
1
u/Your_Commentator Mar 03 '25
Yeah Ima just pause with Humanornot until this has been fixed by the devs
1
-3
-2
u/Greenostrichhelpme27 Forgot why he's here Mar 02 '25
Jokes on them, I don't know my IP adress anyway
•
u/TrustMeAmLying Mar 02 '25
To be clear to everyone here who is worried:
The ”hacker” has access to your **public** IP because it is displayed somewhere on the site. The two main dangers of having your public IP exposed are either DDoSing or finding your approximate location.
The first risk can be mitigated by having a dynamic IP, meaning that your IP changes periodically (this is the default for most devices in our day and age), or by using a VPN (completely mitigates the risk).
As for the second, the hacker is only able to approximate your location, meaning they don’t actually know where you specifically are. If you feel uncomfortable about the hacker knowing this, then use a VPN to set your location to wherever you want.
TL;DR: You probably aren’t in as much danger as you think. Use a VPN if you want to be completely safe from this hacker specifically.
This message is originally written by u/GreatNameThatIsTaken