Pages:
Author

Topic: TalkImg.com - Image hosting for BitcoinTalk - page 4. (Read 18515 times)

legendary
Activity: 2464
Merit: 3878
Hire Bitcointalk Camp. Manager @ r7promotions.com
November 07, 2024, 10:05:06 AM
If the idea was to end TalkImg, it won't work, because it will only get stronger.  Angry
Keep the spirit strong.


:-D
Yeah I am downloading images from talkimg and moving the images that are related to my business to my own server. Your bot found me performing DDoss :-)

Maybe an IP whitelisting will work?
legendary
Activity: 1722
Merit: 4711
**In BTC since 2013**
November 07, 2024, 08:22:13 AM
Everything was back in line for an hour or more then again the proxy is not working.

Here is my hypothesis about the attackers:
The sudden bullish pattern of Bitcoin and even going over $75,000 made these attackers rich. They must be overloaded with cash now and spending it to have fun :-)

I'm starting to think so.
When talkimg goes quiet from attack, the forum image proxy suffers an attack.

TalkImg is now back up and running, the attack has been heavily mitigated in the last few hours. It remains to be seen whether they return to the load or not. I will keep an eye out. It may put up a fight, but they won't last forever on the attack.

If the idea was to end TalkImg, it won't work, because it will only get stronger.  Angry
legendary
Activity: 2464
Merit: 3878
Hire Bitcointalk Camp. Manager @ r7promotions.com
November 07, 2024, 08:17:04 AM
Everything was back in line for an hour or more then again the proxy is not working.

Here is my hypothesis about the attackers:
The sudden bullish pattern of Bitcoin and even going over $75,000 made these attackers rich. They must be overloaded with cash now and spending it to have fun :-)
legendary
Activity: 3444
Merit: 3469
Crypto Swap Exchange
November 07, 2024, 07:15:50 AM
if your service is open source I can try to fork it and give one similar to altcoinstalks

The source code is not the point of talkimg. To run the website you money to buy the infrastructure to host all those images, this is main point of a website like that.

Take a look here, this basically the same website as talkimg. There are others if you research more...
https://imgbb.com/
Vod has done something similar Announcing final development of vod.fan
He used some already existing scripts for image sharing. https://vod.fan/
legendary
Activity: 2352
Merit: 6089
bitcoindata.science
November 07, 2024, 07:01:44 AM
if your service is open source I can try to fork it and give one similar to altcoinstalks

The source code is not the point of talkimg. To run the website you money to buy the infrastructure to host all those images, this is main point of a website like that.

Take a look here, this basically the same website as talkimg. There are others if you research more...
https://imgbb.com/
legendary
Activity: 1568
Merit: 6660
bitcoincleanup.com / bitmixlist.org
November 07, 2024, 06:37:22 AM
How is ChartBuddy doing it?
It links to an IP-address instead of a domain name. Does that mean the attack is on the image proxy's DNS server?

Don't do this! This directly exposes the IP address to every DDoSer in the world, and it will be much harder to switch servers if all the images have the IP address hardcoded.

For now, Cloudflare is acting as a sort of black hole for all the website traffic, but I'm guessing if joker_josue wanted to make this work with IP addresses, it would probably fix the issue, but I do not recommend it for the above reasons.
full member
Activity: 203
Merit: 106
November 07, 2024, 06:24:27 AM
How is ChartBuddy doing it?
It links to an IP-address instead of a domain name. Does that mean the attack is on the image proxy's DNS server?
Does that mean that, the attackers uses previous history from there data logs to keep track and respond proactive by some automation to further access in this time to prevent any uploads and blocking of users by IPs?
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
November 07, 2024, 04:22:28 AM
Now, it is true that many host servers do this logging, even temporarily. But, to access them, you will need to do a deeper investigation. I don't even have time to scratch my itch, let alone scrape IPs... I have more to do in life.
For the record: I wasn't blaming you. I too use default Apache logs on my server, and I too only look at it when there's severe abuse going on.

I think cloudflare will store some user data anyway, right? Like ip of people who sent files. ?
This comes to mind:
What I meant is that Cloudflare can see your unencrypted password when you log in. It's still encrypted from the real server to Cloudflare and from Cloudflare to you. So it's not blatantly insecure except in that Cloudflare is very probably an NSA honeypot, and it's not like the NSA is going to steal your password in order to scam people on bitcointalk.org or anything.
Since the forum uses Cloudflare already, that doesn't add any new risks.

Quote
Sorry, you have been blocked
You are unable to access talkimg.com
I get the same. It's the same message Cloudflare gives on Bitcointalk when you're trying to post something Cloudflare doesn't like. Just a few weeks ago that was /etc/hosts.

Likely the forum is the main target and the attackers just saw talkimg as likely the easier target.
Take down the image hosting and image proxy, take down ChartBuddy. No ChartBuddy, no hourly price updates. This is food for conspiracies Tongue

If you can see this image, the forum's image proxy is working fine:
Image loading...
Negative, on my side.
Same here.

How is ChartBuddy doing it?
It links to an IP-address instead of a domain name. Does that mean the attack is on the image proxy's DNS server?
legendary
Activity: 2744
Merit: 1708
First 100% Liquid Stablecoin Backed by Gold
November 07, 2024, 03:48:49 AM
- Bitcointalk.org could add support for uploading images directly.
I also like talkimg. I wonder if it could be integrated into bitcointalk somehow (and share hosting, perhaps)...

Best option will be to have the ability to upload images directly and Talkimg as a backup run on donations (maybe)
legendary
Activity: 3696
Merit: 4343
The hacker spirit breaks any spell
November 07, 2024, 02:53:19 AM
Joker_josue,  I think the decision to expand your service to another forum is up to you.

As it is now, you will lose a huge amount of users in altcoinstalks.com.  additionally,  some users from bitcointalk who also use the other forum might migrate to another tool that fit both forums.

I understand the costs, it is not a simple decision

Now let this phase calm down, so you can think about it calmly.  Wink


Exactly, of course, it was just to discuss something that in my opinion doesn't have such a heavy impact on talkimg's resources
you can do some tests and benches to see this then clearly the decision is yours and yours alone

if your service is open source I can try to fork it and give one similar to altcoinstalks
legendary
Activity: 1568
Merit: 6660
bitcoincleanup.com / bitmixlist.org
November 07, 2024, 01:14:04 AM
If you can see this image, the forum's image proxy is working fine:
Image loading...

Negative, on my side.


Thing about Cloudflare, it's very cheap and therefore flimsy DDoS protection. I may sound like a broken record at this point, but DDoS-protected servers are the way to go. It's better for the attacks to be blocked at hardware level rather than relying on Cloudflare to contain everything for you. Because if the attackers already have your IP address, you're toast - and there are many commercial toasters DDoS stresser tools that can be rented for this purpose.

They (the servers I mean) are also extraordinarily expensive to lease, so probably not applicable to a site that's not bringing in lots of revenue per month.
legendary
Activity: 2576
Merit: 2267
1RichyTrEwPYjZSeAYxeiFBNnKC9UjC5k
November 06, 2024, 11:52:05 PM
Never a boring time in bitcointalk Sad
I am reporting that talkimg images are not working in forum again and they look like constantly loading but never opening.
Maybe this attackers are not only trying to hurt talkimg website but also to damage bitcointalk forum.


Likely the forum is the main target and the attackers just saw talkimg as likely the easier target.
legendary
Activity: 2576
Merit: 2267
1RichyTrEwPYjZSeAYxeiFBNnKC9UjC5k
November 06, 2024, 11:48:25 PM
If the attack is still going on in a few days, I'll consider measures like these:
 - If there are any image hosts run by trustworthy companies where the privacy policy says that they don't keep logs, these could be exempted from the proxy. If you know of any, let me know.

I don't know how trustworthy such a privacy policy would be so that would require some level of trust.

- Maybe bitcointalk.org could pay TalkImg a monthly fee for a contractual guarantee that they won't keep logs. TalkImg could then be exempted from the proxy, and furthermore they would have more resources to function well.
 - Bitcointalk.org could add support for uploading images directly.

My main concern over image hosting is that as mentioned over in the wall observer thread, we are losing some of the images as time goes on. Sites die, accounts get deleted (all of Risto Pietila's google-based images are gone since he died and presumably his account was deactivated). Obviously, not all of the images are all that important but some may have archival importance. It would be nice to have something more integrated with bitcointalk so it persisted with the site. I also like talkimg. I wonder if it could be integrated into bitcointalk somehow (and share hosting, perhaps) and maintenance contracted to the current owner with the option that it remains the property of bitcointalk if the current owner abandons it. I have seen other SMF sites with integrated media hosting too. So, not sure.
legendary
Activity: 1722
Merit: 4711
**In BTC since 2013**
November 06, 2024, 08:49:05 PM
Continued to work actively to mitigate the attack, hoping that it will end as soon as possible.

I have been creating several levels of blocking, which may affect the experience of some users. This is temporary, and I hope that everything returns to normal soon.

Appreciate your patience and understanding.

legendary
Activity: 2352
Merit: 6089
bitcoindata.science
November 06, 2024, 05:29:53 PM
I think cloudflare will store some user data anyway, right? Like ip of people who sent files. ?

In the case of Cloudflare, I don't know how they usually handle this data. But I also don't see them keeping logs from thousands of sites for the rest of their lives.

When someone uploads an image, the IP is recorded. You can use Tor, VPN, DNS or any other similar resource to influence this record. This resource has the sole objective of being able to ban any abuse that occurs. But, honestly, given these events, this becomes the least of my problems, so I will most likely be able to create a system so that this data can be eliminated from the BD.

I think not storing that data would be the best option (from the user perspective). And let cloudflare handle the cases of abuses and possible ban.
legendary
Activity: 1722
Merit: 4711
**In BTC since 2013**
November 06, 2024, 05:16:25 PM
I think cloudflare will store some user data anyway, right? Like ip of people who sent files. ?

In the case of Cloudflare, I don't know how they usually handle this data. But I also don't see them keeping logs from thousands of sites for the rest of their lives.

When someone uploads an image, the IP is recorded. You can use Tor, VPN, DNS or any other similar resource to influence this record. This resource has the sole objective of being able to ban any abuse that occurs. But, honestly, given these events, this becomes the least of my problems, so I will most likely be able to create a system so that this data can be eliminated from the BD.
donator
Activity: 4760
Merit: 4323
Leading Crypto Sports Betting & Casino Platform
November 06, 2024, 05:13:02 PM
This is the message I received after opening TalkImg website today and trying to upload one image.
It looks like I am one of the cloudflare victims in fight against filthy attackers  Tongue
I am bit lazy to use any alternative, so I will just wait for storm to pass...

Quote
Sorry, you have been blocked
You are unable to access talkimg.com


Same. Went to upload an image and got blocked. Noooo!!! (would have inserted Darth Vader image here)
legendary
Activity: 2212
Merit: 7064
November 06, 2024, 05:01:06 PM
This is the message I received after opening TalkImg website today and trying to upload one image.
It looks like I am one of the cloudflare victims in fight against filthy attackers  Tongue
I am bit lazy to use any alternative, so I will just wait for storm to pass...

Quote
Sorry, you have been blocked
You are unable to access talkimg.com
sr. member
Activity: 574
Merit: 252
November 06, 2024, 04:25:58 PM
Sir  joker_josue, I was planning to upload some image in this forum , and I wanted to make use of talkimg.com like usual, so after the human verification

the page endup showing this. https://ibb.co/9YmJm3B

So just want to ask what may have been the issue, because I prefer using talkimg.com compare to the others because is more user friendly than the others.

I've try refreshing the page several times.
legendary
Activity: 2352
Merit: 6089
bitcoindata.science
November 06, 2024, 03:17:54 PM
If the attack is still going on in a few days, I'll consider measures like these:
 - If there are any image hosts run by trustworthy companies where the privacy policy says that they don't keep logs, these could be exempted from the proxy. If you know of any, let me know.
 - Maybe bitcointalk.org could pay TalkImg a monthly fee for a contractual guarantee that they won't keep logs. TalkImg could then be exempted from the proxy, and furthermore they would have more resources to function well.
 - Bitcointalk.org could add support for uploading images directly.

First of all, I thank you for your trust, but as I say in the OP, I do not record any information. The only thing that is recorded in the database is the IP of the person who uploaded the image for spam control or upload cascade purposes..

Therefore, I am available to work to improve and follow the standards requested by Bitcointalk.


I think cloudflare will store some user data anyway, right? Like ip of people who sent files. ?
Pages:
Jump to: