10.01.2007

In the spirit of full disclosure...

Just a little PSA:

Most members of discussion boards don't have a clue the information that can be accessed by administrators. Having been one for a long time I can tell you that the priveleged data can be abused by those in a position to do so.

For instance, your IP number. Admin can see who registered under a particular IP address as well as who posted or voted in a poll. If a group of people are all sharing a single username and password it'll show up as multiple IP addresses. This information also tells the admin which geographical area you are accessing the internet from.

Admin also have access to your email address since you had to provide one when you registered at the discussion board. It is best to register with a web based email for just that purpose.

Admin can also read emails that originated at the discussion board. Invision boards have a logfile in the admin control panel that provides not only the to and from information, but the entire contents of the email as well. Your best bet is to send your emails off-board.

Admin can also read PMs. There are hacks out there that make it easier to read PMs but do not be fooled into thinking that someone needs the hack in order to access the data. Anyone with access to the database of a board can access every scrap of information available on a board. The MySQL database can be accessed through the cpanel of a board if it is provided by the host. It's a simple matter of finding the table that contains the data, usually called something like message_text. If you click browse, a query will be run and the data will be shown. You'll see the number id of the member who wrote the PM, the text of the message, the number id of the recipient and the author's IP address. Another query on a different table will give an admin access to member ID numbers.
For further information on PMs, please read http://www.theadminzone.com/forums/archive/index.php/t-15568.html
It is a lengthy discussion, 8 pages, but well worth the read if you are concerned with privacy at all. My advice is not to write anything in PM that you don't want anyone other than the recipient to read.

Admin have statistics availabe that show nearly every move you make on a board. What skin you are using, what thread you are reading, down to which browser you use and what computer platform you use. Most of the information is totally benign but if you have a feeling big brother is watching, you're right.

So, in a nutshell, I can't stress this enough: Keep your shit off the web.

1 comments:

Norm Deplume said...

Can they see who I have on 'ignore'?? ;)