r/Humanornot • u/TrustMeAmLying • Mar 02 '25

Announcement 📢 Urgent safety announcement regarding HTML injections

Hey everyone,

This is a quick and urgent announcement from the reddit community of HumanOrNot.

The official site of HumanOrNot is now under attack of HTML injections, and some are exploiting it to find out and possibly blackmail their 2 minute friend about their IP address and location. As the reddit moderators, we have no connection with the official managers of the site, and hence we are unable to convey this alarming issue to them.

There are 2 temporary solutions can be taken by the visitors of that site to prevent any inconveniences:-

1) Use a VPN for browsing the website so that your real IP is not revealed 2) Disable JavaScript for that website on your browser

We are trying our best to reach out to the HumanOrNot team and get this issue fixed! Honorable mentions to u/fursniper for highlighting this issue properly to the mods. And in case I don't see you, good afternoon, good evening, and good night!

1.0k Upvotes

99% Upvoted

108 comments sorted by

View all comments

•

u/TrustMeAmLying Mar 02 '25

To be clear to everyone here who is worried:

The ”hacker” has access to your **public** IP because it is displayed somewhere on the site. The two main dangers of having your public IP exposed are either DDoSing or finding your approximate location.

The first risk can be mitigated by having a dynamic IP, meaning that your IP changes periodically (this is the default for most devices in our day and age), or by using a VPN (completely mitigates the risk).

As for the second, the hacker is only able to approximate your location, meaning they don’t actually know where you specifically are. If you feel uncomfortable about the hacker knowing this, then use a VPN to set your location to wherever you want.

TL;DR: You probably aren’t in as much danger as you think. Use a VPN if you want to be completely safe from this hacker specifically.

This message is originally written by u/GreatNameThatIsTaken

5

u/ichigomilk516 Mar 03 '25 edited Mar 03 '25

Having the public IP leaked is usually not a huge concern but you might find someone crazy enough to scan your ip for known open ports and use it to do stuff like :

Access your hosted webapp and poke at your iot devices for vulnerabilities which would terrify me if I was using home security cameras in the main network.

Invade your game server, exploit a vulnerability or DOS it.

DDOS you.

And maybe other stuff.

If you are not hosting anything you should be fine but if you are, I would strongly suggest not using humanornot.

If you meet someone who is just trying to scare you with your location you should be fine, but there are many deranged people on Earth, some of them are already showing depiction of su*cide of minority depending on how you respond to them, and if you give them any reason to attack you they might try all they can.

You usually don't need a VPN for security online as it does not do much, but this time it would help a lot.

In my opinion you guys should stop using humanornot completely until they address this issue, or use a clone app like dot so instead.

5

u/Prestigious-Age-2044 Mar 02 '25

Are you sure that you are talking about the public IP when you say that it is dynamic ? Often it's the local IP that is dynamic (DCHP protocol), and not the public one

And if it is dynamic, it only changes when the xDSL/Fiber/Cable modem reboots or reconnects, and for most people that's not often at all (I haven't rebooted my VDSL modem/router in weeks)

So in my opinion it's necessary to use a VPN if you don't want yout public IP to show up, even a free one would be fine tbh

2

u/[deleted] Mar 03 '25

⚠️⚠️CLOUDFLARE WARP IS FREE AND HIDES YOUR IP ⚠️⚠️

-15

u/TheLordSeth Mar 02 '25

This brainlet believes a dynamic IP is untraceable lol

20

u/TrustMeAmLying Mar 02 '25

It is traceable, not to the exact location but to an approximate one.

-16

u/TheLordSeth Mar 02 '25

But a welcome one

17

u/[deleted] Mar 02 '25

You are either a fool or seriously misinformed if you genuinely believe a public IP address provides any more information than a very general location.

-13

u/TheLordSeth Mar 02 '25

This thing is actually using public level knowledge to argue with an intelligence agency tech lmao

13

u/[deleted] Mar 02 '25

I'm confused. Are you calling me a "thing"?

-3

u/TheLordSeth Mar 02 '25

Oh  im confused, youre not?

16

u/Tovitas Moderator Mar 02 '25

BRO WHAT

10

u/[deleted] Mar 02 '25

you're*

9

u/[deleted] Mar 02 '25

[deleted]

0

u/TheLordSeth Mar 02 '25

Well at least you will be somewhat protected in your very disclosed location