top | item 30101495

This NFT Will Steal Your IP Address

7 points| jbegley | 4 years ago |vice.com

5 comments

order
[+] abider|4 years ago|reply
This feels like some bizarrely confused clickbait for pseudo-technical people. I'm glad they at least mentioned:

> Of course, websites often collect and store visitors’ IP addresses in virtue of how the sites function.

Because, uh, yeah. Nothing to see here. Move along.

[+] krferriter|4 years ago|reply
Read the two sentences following the one you quoted. It's not talking about OpenSea collecting your web address. It's talking about the OpenSea client-side website loading and executing arbitrary HTML loaded from a remote location specified by the NFT creator, which the NFT creator can control. If I create an NFT with an animation url set to `http://my-website/arbitrary-code-i-can-change-any-time.html`, I can execute whatever JavaScript scripts I want in the client-side browser of anyone who views my NFT on OpenSea's website.