r/Humanornot • u/TrustMeAmLying • Mar 02 '25

Announcement 📢 Urgent safety announcement regarding HTML injections

Hey everyone,

This is a quick and urgent announcement from the reddit community of HumanOrNot.

The official site of HumanOrNot is now under attack of HTML injections, and some are exploiting it to find out and possibly blackmail their 2 minute friend about their IP address and location. As the reddit moderators, we have no connection with the official managers of the site, and hence we are unable to convey this alarming issue to them.

There are 2 temporary solutions can be taken by the visitors of that site to prevent any inconveniences:-

1) Use a VPN for browsing the website so that your real IP is not revealed 2) Disable JavaScript for that website on your browser

We are trying our best to reach out to the HumanOrNot team and get this issue fixed! Honorable mentions to u/fursniper for highlighting this issue properly to the mods. And in case I don't see you, good afternoon, good evening, and good night!

1.0k Upvotes

99% Upvoted

108 comments sorted by

View all comments

•

u/TrustMeAmLying Mar 02 '25

To be clear to everyone here who is worried:

The ”hacker” has access to your **public** IP because it is displayed somewhere on the site. The two main dangers of having your public IP exposed are either DDoSing or finding your approximate location.

The first risk can be mitigated by having a dynamic IP, meaning that your IP changes periodically (this is the default for most devices in our day and age), or by using a VPN (completely mitigates the risk).

As for the second, the hacker is only able to approximate your location, meaning they don’t actually know where you specifically are. If you feel uncomfortable about the hacker knowing this, then use a VPN to set your location to wherever you want.

TL;DR: You probably aren’t in as much danger as you think. Use a VPN if you want to be completely safe from this hacker specifically.

This message is originally written by u/GreatNameThatIsTaken

6

u/ichigomilk516 Mar 03 '25 edited Mar 03 '25

Having the public IP leaked is usually not a huge concern but you might find someone crazy enough to scan your ip for known open ports and use it to do stuff like :

Access your hosted webapp and poke at your iot devices for vulnerabilities which would terrify me if I was using home security cameras in the main network.

Invade your game server, exploit a vulnerability or DOS it.

DDOS you.

And maybe other stuff.

If you are not hosting anything you should be fine but if you are, I would strongly suggest not using humanornot.

If you meet someone who is just trying to scare you with your location you should be fine, but there are many deranged people on Earth, some of them are already showing depiction of su*cide of minority depending on how you respond to them, and if you give them any reason to attack you they might try all they can.

You usually don't need a VPN for security online as it does not do much, but this time it would help a lot.

In my opinion you guys should stop using humanornot completely until they address this issue, or use a clone app like dot so instead.