Mark - I am not trying to incite a flame war with anyone - I merely questioned the sagacity of having all these IPs visible.
I haven't heard anyone offer a good reason why they are. It represents a security risk that isn't necessary, plain and simple. What possible purpose could it have?
Sure - we all assume risks - we all (or most of us) drive to work. Most use a seatbelt. Some cars have ABS and air bags - these are all methods of reducing risks. You don't find too many car manufactures making cars that are less safe for a reason.
Ok - so you opined that you didn't care and I asked if you minded a ping/port scan on your IP and you told me to go ahead. You invited me to do so - though I don't need permission - it's not illegal. Kinda like jiggling a doorknob says the court.
Now you did invite me to do so by saying "Do whatever you feel comfortable doing." after engaging in a false dichotomy (all or nothing proposition) by saying:
"If you don't like the risks involved in posting here from your home computer, pack up and go to the library or the local internet cafe. Or don't post here. Life is full of choices."
Your fallacy is that there are only two choices - post here or don't. You totally ignore the choice of not allowing the IP to be visible. Certainly this is a viable choice and a preferred one, security wise, by everyone else running a board.
Can anyone show me another board that shows IP addresses? Off hand I can't think of a single one. Now why do you think that is? Believe me it is for the exact reason I am telling you - it's like waving a big red flag man; it's downright foolish.
Just bringing to light a topic that perhaps no one considered, so that they can re-consider the configuration of the board. Believe me when I tell you that having your IP out there is trouble waiting to happen.
I don't need to have the last word, but I'd like the conversation to generate more light than heat.
Regards,
Sonny
|