top | item 31970164

Toicon.com embeds your IP-address in the SVG icon file you've downloaded

24 points| URfejk | 3 years ago |files.mastodon.social

7 comments

order
[+] KMnO4|3 years ago|reply
Related, SVGO (or my preferred in-browser frontend, SVGOMG[0]) does a wonderful job of cleaning up SVGs and removing unnecessary metadata/comments. I throw every SVG into it before it enters my codebase.

[0]: https://jakearchibald.github.io/svgomg/

[+] RL_Quine|3 years ago|reply
Doesn't prevent someone from encoding the IP address in colors or something though.
[+] WalterGR|3 years ago|reply
Should we know what toicon.com is?

What does the TLA for IP address exposure look like these days?

The screenshot (which is the format we naturally expect all security alerts to be released in) shows an IPv4 address. Does it support v6? I quake at the thought of my personal ~32-bit number being known to anyone else[0].

[0] https://zmap.io/ “With a 10gigE connection and PF_RING, ZMap can scan the IPv4 address space in 5 minutes.”

[+] sblom|3 years ago|reply
I think the TLA you were looking for is TRA?
[+] Mo3|3 years ago|reply
You know what, at first glance this looks like some sort of insane workaround for another issue somewhere else. There’s no possible rational explanation I can come up with to be doing this, but what do I know.
[+] reiichiroh|3 years ago|reply
Ironic the website author says it’s taken the site down because it could host malware.
[+] ubanholzer|3 years ago|reply
Found some Toicon.com icons on Wikipedia, but they all have 127.0.0.1 as IP address