Bitcoin Forum
March 19, 2024, 03:43:55 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: Retention/privacy info  (Read 705 times)
theymos (OP)
Administrator
Legendary
*
Offline Offline

Activity: 5138
Merit: 12565


View Profile
April 25, 2019, 06:18:36 PM
Merited by suchmoon (9), dbshck (4), ibminer (2), LoyceV (1), morvillz7z (1), TalkStar (1)
 #1

I wrote a new unified IP logging/retention system, and I changed the way backups are done in order to ensure limited retention on certain privacy-sensitive things. See: https://bitcointalk.org/privacy.php

Previously I said that IPs are only logged when you post and in some limited other cases, such as when you encounter certain errors. This is no longer true: you should now think about IP logging as happening constantly.

There's now an option in your account settings which will allow you to reduce retention of your logged IPs to 3 months. You should only consider enabling this if you've staked a pubkey in the thread and you're sure that your account email is correct. I'm not sure if 3 months is enough to respond adequately to all abuse; we'll see, and I might change it later or perhaps restrict it based on rank.

I considered putting a warning on trust pages for users who have enabled limited retention, since it theoretically might make legal action against them more difficult in case they scam you, but my current thinking is that this is kind of pointless because someone could just not enable the setting and use Tor for the same effect. And it'd be both privacy-invasive and futile whack-a-mole to try to indicate when people are using proxies. On the other hand, scammers are often pretty stupid, so I could be convinced to add the warning.

1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
1710819835
Hero Member
*
Offline Offline

Posts: 1710819835

View Profile Personal Message (Offline)

Ignore
1710819835
Reply with quote  #2

1710819835
Report to moderator
"Bitcoin: the cutting edge of begging technology." -- Giraffe.BTC
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1710819835
Hero Member
*
Offline Offline

Posts: 1710819835

View Profile Personal Message (Offline)

Ignore
1710819835
Reply with quote  #2

1710819835
Report to moderator
suchmoon
Legendary
*
Offline Offline

Activity: 3626
Merit: 8906


https://bpip.org


View Profile WWW
April 25, 2019, 06:28:41 PM
 #2

you should now think about IP logging as happening constantly.

Awesome Smiley

Just to make sure - if I check this new checkbox, will it immediately delete all logs older than 3 months?

Nevermind, I should read slower. It won't.

Quote
You can opt into limited retention in your account settings. This will apply only to logs created after you change the setting, and doing so will make it much more difficult for you to recover your account if it is ever lost.
TryNinja
Legendary
*
Offline Offline

Activity: 2772
Merit: 6850



View Profile WWW
April 25, 2019, 06:33:31 PM
Last edit: May 14, 2023, 03:57:25 AM by TryNinja
 #3

There's now an option in your account settings which will allow you to reduce retention of your logged IPs to 3 months. You should only consider enabling this if you've staked a pubkey in the thread and you're sure that your account email is correct. I'm not sure if 3 months is enough to respond adequately to all abuse; we'll see, and I might change it later or perhaps restrict it based on rank.
It can be enabled here: https://bitcointalk.org/index.php?action=profile;sa=account



Just for reference.

..JAMBLER.io..Create Your Bitcoin Mixing
Business Now for   F R E E 
▄█████████████████████████████
█████████████████████████
████▀████████████████████
███▀█████▄█▀███▀▀▀██████
██▀█████▄█▄██████████████
██▄▄████▀▄▄▄▀▀▀▀▀▄▄██████
█████▄▄▄██████████▀▄████
█████▀▄█▄██████▀█▄█████
███████▀▄█▀█▄██▀█▄███████
█████████▄█▀▄█▀▄█████████
█████████████████████████
█████████████████████████
▀█████████████████████████████
█████████████████████████████████████████████████
.
      OUR      
PARTNERS

.
█████████████████████████████████████████████████
████▄
██
██
██
██
██
██
██
██
██
██
██
████▀
▄█████████████████████████████
████████▀▀█████▀▀████████
█████▀█████████████▀█████
████████████████████████
███████████████▄█████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████▀█████████
████████████████████████
█████▄█████████████▄█████
████████▄▄█████▄▄████████
▀█████████████████████████████
█████████████████████████████████████████████████
.
   INVEST   
BITCOIN

.
█████████████████████████████████████████████████
████▄
██
██
██
██
██
██
██
██
██
██
██
████▀
AB de Royse777
Legendary
*
Offline Offline

Activity: 2422
Merit: 3848


Visit: r7promotions.com


View Profile WWW
April 25, 2019, 06:37:54 PM
 #4

I just enabled it and updated which means no (IP) log left for me?



Just trying to understand the change.

Cheers :-)

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
Quickseller
Copper Member
Legendary
*
Offline Offline

Activity: 2870
Merit: 2298


View Profile
April 25, 2019, 06:44:36 PM
 #5

Quote
You should only consider enabling this if you've staked a pubkey in the thread and you're sure that your account email is correct
Will you consider accepting non-bitcoin signed messages for private keys associated with major (top 5-10 per CMC) altcoins?
hacker1001101001
Sr. Member
****
Offline Offline

Activity: 1288
Merit: 415


View Profile
April 25, 2019, 06:45:17 PM
 #6

I considered putting a warning on trust pages for users who have enabled limited retention, since it theoretically might make legal action against them more difficult in case they scam you, but my current thinking is that this is kind of pointless because someone could just not enable the setting and use Tor for the same effect. And it'd be both privacy-invasive and futile whack-a-mole to try to indicate when people are using proxies. On the other hand, scammers are often pretty stupid, so I could be convinced to add the warning.

Yes, there is no benefit in putting an warning for those who unable this feature as many people here already use TOR to hide the current IP status. But still an inbuilt feature to hide the IP makes it easy and convenient for sure.

Happy to see upgrades in the current forum software BTW.



I just enabled it and updated which means no (IP) log left for me?

No, not all the logs are deleted.

Quote
This will apply only to logs created after you change the setting
Lauda
Legendary
*
Offline Offline

Activity: 2674
Merit: 2965


Terminated.


View Profile WWW
April 25, 2019, 06:52:28 PM
 #7

I just enabled it and updated which means no (IP) log left for me?
No. The IPs you used in the last 3 months will always be logged, in addition to that you have to wait a certain amount of time before your past logs are gone. Just read this: https://bitcointalk.org/privacy.php.

"The Times 03/Jan/2009 Chancellor on brink of second bailout for banks"
😼 Bitcoin Core (onion)
AB de Royse777
Legendary
*
Offline Offline

Activity: 2422
Merit: 3848


Visit: r7promotions.com


View Profile WWW
April 25, 2019, 06:59:39 PM
 #8

~snip~
No. The IPs you used in the last 3 months will always be logged, in addition to that you have to wait a certain amount of time before your past logs are gone. Just read this: https://bitcointalk.org/privacy.php.

I read. Just to clarify:



Full IP 6 months (normal retention), meaning that certain amount of time you mentioned is 6 months?

Since I have already checked the Limit IP retention then I fall under 3 months limited retention?

What is Partial IP?

Sorry I never checked the privacy page until today.

Thanks in advance.

Cheers :-)

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
Lauda
Legendary
*
Offline Offline

Activity: 2674
Merit: 2965


Terminated.


View Profile WWW
April 25, 2019, 07:01:47 PM
 #9

Full IP 6 months (normal retention), meaning that certain amount of time you mentioned is 6 months?
Yes.

Since I have already checked the Limit IP retention then I fall under 3 months limited retention?
Only starting today.

What is Partial IP?

Sorry I never checked the privacy page until today.
Read the page agian.

"The Times 03/Jan/2009 Chancellor on brink of second bailout for banks"
😼 Bitcoin Core (onion)
vit05
Hero Member
*****
Offline Offline

Activity: 672
Merit: 526



View Profile
April 25, 2019, 07:05:57 PM
 #10

I thought the first login IP was stored forever. I think changing this configuration before a more elaborate account recovery process will be very risky...
100bitcoin
Sr. Member
****
Offline Offline

Activity: 858
Merit: 423


View Profile WWW
April 25, 2019, 07:13:07 PM
 #11

Is this change in response to some government order? Just asking...

AB de Royse777
Legendary
*
Offline Offline

Activity: 2422
Merit: 3848


Visit: r7promotions.com


View Profile WWW
April 25, 2019, 07:13:42 PM
 #12

Full IP 6 months (normal retention), meaning that certain amount of time you mentioned is 6 months?
Yes.

Since I have already checked the Limit IP retention then I fall under 3 months limited retention?
Only starting today.


Clear :-)

Quote
What is Partial IP?

Sorry I never checked the privacy page until today.
Read the page agian.
Yeh did LOL but again failed to understand Partial IP :-P

My technical knowledge is limited to understand this:
Quote
Between 6 and 24 months, the IP linearly loses least-significant bits over time. For example, the IP 123.234.210.221 would lose 8 bits and become the prefix 123.234.210.0/24 approximately 10.5 months after it was logged. For IPv6, the least-significant 66 bits are dropped after 6 months, and then the remaining bits are dropped linearly over the 1.5-year period.
Can anyone speak English for the above quote? :-D

Cheers :-)

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
Lauda
Legendary
*
Offline Offline

Activity: 2674
Merit: 2965


Terminated.


View Profile WWW
April 25, 2019, 07:14:28 PM
 #13

Yeh did LOL but again failed to understand Partial IP :-P

My technical knowledge is limited to understand this:
Quote
Between 6 and 24 months, the IP linearly loses least-significant bits over time. For example, the IP 123.234.210.221 would lose 8 bits and become the prefix 123.234.210.0/24 approximately 10.5 months after it was logged. For IPv6, the least-significant 66 bits are dropped after 6 months, and then the remaining bits are dropped linearly over the 1.5-year period.
Can anyone speak English for the above quote? :-D

Cheers :-)
The bolded is a partial IP of the underlined.

"The Times 03/Jan/2009 Chancellor on brink of second bailout for banks"
😼 Bitcoin Core (onion)
BitCoinDream
Legendary
*
Offline Offline

Activity: 2296
Merit: 1204

The revolution will be digital


View Profile
April 25, 2019, 07:17:04 PM
Merited by malevolent (1)
 #14

Can the retained log of a certain user, be made available to that user? I mean, an user has right to know his/her own information. Is not it?

AB de Royse777
Legendary
*
Offline Offline

Activity: 2422
Merit: 3848


Visit: r7promotions.com


View Profile WWW
April 25, 2019, 07:19:04 PM
 #15

Yeh did LOL but again failed to understand Partial IP :-P

My technical knowledge is limited to understand this:
Quote
Between 6 and 24 months, the IP linearly loses least-significant bits over time. For example, the IP 123.234.210.221 would lose 8 bits and become the prefix 123.234.210.0/24 approximately 10.5 months after it was logged. For IPv6, the least-significant 66 bits are dropped after 6 months, and then the remaining bits are dropped linearly over the 1.5-year period.
Can anyone speak English for the above quote? :-D

Cheers :-)
The bolded is a partial IP of the underlined.
Trying to grasp it however I think I got the basic idea. May be I need to get help from google for more clarity. Cheers Lauda :-)

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
Lauda
Legendary
*
Offline Offline

Activity: 2674
Merit: 2965


Terminated.


View Profile WWW
April 25, 2019, 07:19:29 PM
 #16

I mean, an user has right to know his/her own information.
In the EU, yes. In the US, no.

"The Times 03/Jan/2009 Chancellor on brink of second bailout for banks"
😼 Bitcoin Core (onion)
RocketSingh
Legendary
*
Offline Offline

Activity: 1659
Merit: 1050


View Profile
April 25, 2019, 07:23:20 PM
 #17

I mean, an user has right to know his/her own information.
In the EU, yes. In the US, no.
I dunno if u r right or wrong. But, if u r right, a legal action against BitcoinTalk at EU may ban the domain all over EU. On the other hand, US probably does not prohibit an entity to share such information with their userbase. So, it is probably better to share the info.

newIndia
Legendary
*
Offline Offline

Activity: 2198
Merit: 1049


View Profile
April 25, 2019, 07:26:24 PM
 #18

I thought the first login IP was stored forever. I think changing this configuration before a more elaborate account recovery process will be very risky...
I think, first login IP will still be logged.

ibminer
Legendary
*
Offline Offline

Activity: 1789
Merit: 2534


Goonies never say die.


View Profile WWW
April 25, 2019, 07:27:00 PM
 #19

It's a bad idea to provide any IP log to the user themselves. Compromised accounts happen and the situation could become worse if the attacker can access your IP logs.

¤º°`°º¤ø,¸¸,ø¤º°°º¤ø,¸¸,ø¤º°`°º¤
(¯`·.¸¸.-> °º [ BPIP ] º° <-.¸¸.·´¯)
๑๑۞๑,¸,ø¤º°°º¤ø,¸,ø¤º°°º¤ø,¸,๑۞๑๑
:•: Most Merit | Most Activity | Most Trusted | Most Recognized
:•: Flag Log | Most Merited Threads | DT Change Log | Most Deleted by Mods
:•: ıllıllı Sheeple ~ The System ~ Free World ~ Don't look down (NSFW) ~ Hook ~ Brainwashed ıllıllı
RocketSingh
Legendary
*
Offline Offline

Activity: 1659
Merit: 1050


View Profile
April 25, 2019, 07:29:47 PM
 #20

It's a bad idea to provide any IP log to the user themselves. Compromised accounts happen and the situation could become worse if the attacker can access your IP logs.
Compromised accounts get PM details as well. That should not be a reason, not to provide IP log data.

Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!