Hacker News new | past | comments | ask | show | jobs | submit login

Even if the DB were dumped and all users' IP addresses were revealed, the leaked IPs wouldn't be much of a security risk.

For one, an attacker would not necessarily get your current IP address.

But even if they did have your current IP address... so what? The most someone could find from that is your general region; maybe your city or a city next to yours if they're lucky. There's no way they're doxing you from that unless they think they can successfully SE the ISP and don't mind risking jail for it.

The real security risk would be the leaked password hashes. That would be much, much more likely to result in people being doxed (and worse).




> Even if the DB were dumped and all users' IP addresses were revealed, the leaked IPs wouldn't be much of a security risk.

There's no DB, the site has always been described as storing everything in memory using Lisp closures, and on flat files. I don't know whether that makes Hacker News more or less secure than average, though.


Then replace DB with "data structure stored in a flat file". Doesn't really matter.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: