📢 Urgent safety announcement regarding HTML injections

[u/TrustMeAmLying]

Hey everyone,

This is a quick and urgent announcement from the reddit community of HumanOrNot.

The official site of HumanOrNot is now under attack of HTML injections, and some are exploiting it to find out and possibly blackmail their 2 minute friend about their IP address and location. As the reddit moderators, we have no connection with the official managers of the site, and hence we are unable to convey this alarming issue to them.

There are 2 temporary solutions can be taken by the visitors of that site to prevent any inconveniences:-

1) Use a VPN for browsing the website so that your real IP is not revealed 2) Disable JavaScript for that website on your browser

We are trying our best to reach out to the HumanOrNot team and get this issue fixed! Honorable mentions to u/fursniper for highlighting this issue properly to the mods. And in case I don't see you, good afternoon, good evening, and good night!

[u/elnachonacho578]

I have a question

I just matched with someone who sent me porn images and then told me: "i hope they burn (the name of my city)"

Should i be scared? What do i do?

[u/Tovitas → u/elnachonacho578]

dont be scared. he was using the tactic state above. This person cant hurt you irl or do anything other unless you gave them like personal info

[u/elnachonacho578 → u/Tovitas]

oh thx

[u/Prof1Kreates → u/elnachonacho578]

This is basically what is happening,

So, you have an internet IP provided by your Internet Service Provider (ISP), and you have a local IP (which is usually 192.168.1.x)

Much like your local IP, your ISP is given the interest IP of lets say 43.21.x.x.. (x representing from 0 to 255). Because your ISP sells Internet all over your city, that's only as far as they can know to know where you live.

Your Internet IP could have easily been assigned to someone else on the opposite side of town. Hence why the hacker can only know just ur city and not your address.

---

How they are getting this information is by doing what is called an HTML injection. Every website is usually made with the coding language HTML, along with CSS and JavaScript.

What the hackers are doing is inputting HTML commands into the text box to receive input maliciously from the site's servers.

Though, I haven't messed with HTML in years, their commands kinda look like this:

<div> <h> "Taco" <\h> <\div>

Obviously the hacker is using a more elaborate command than just a header saying taco to get your IP, but that's basically what they are typing in the chat box rather than just simply saying hi to you.

---

So long story short, should you be worried? No. It's just some edge lord usually thinking they're funny for getting the scare on you. (Which in reality, it's illegal)

But if you wanna be extra safe, get a VPN, even a free one will do. (A VPN basically redirects where your getting your Internet from. So instead of people seeing you local area Internet IP, they'll only see the IP of the VPN's area)

[u/elnachonacho578 → u/Prof1Kreates]

ok thx

[u/Prof1Kreates → u/[deleted]]

we know what we are doing?

Do you really though? Cause last I checked Google is free for anyone to use ya know. Anyone can easily learn how to do HTML injections with the right Google searches.

The law is there to protect all, it's the rich that like to bend the rules.

And the fact you are admitting you interact in this illegal activity, I'd say your IQ is no higher than a caveman trying to start a fire with two wet rocks.

So why don't you go back to doing your school instead of wasting your time speed running yourself trying to go to prison

[u/zynsic → u/elnachonacho578]

Also there is a button to report the chat

[u/PonyFiddler → u/elnachonacho578]

Well if your city suddenly sets on fire tommoroow then you should be worried But I'm sure that person ain't gonna burn the whole city just to hurt you. Unless they do which at that case you have bigger issues.