infosec r u ok

So right, bestie, per usual Also your nails look great

😊♥️ thank u!!

Pictures of your house/location are FAR more dangerous to post.(geoguessing is an art) I can easily change my IP, changing my house is... uhhhh.. harder? I will give some leeway for DOS, and or attacking a IP. But even that is dubious considering the risk/reward.

It's almost like it's not about the message at all but something else. 🤔

At its core, it's a matter of people NOT being able to differentiate the types of potential damage that could be done by each...

I teach people at my cyber range and school that you should already assume you are being targeted and to take the approach of taking no chances at all. Scrub your metadata, watch backgrounds etc. We run OSINT courses and people are always amazed at what you can learn.

Cyber nerds are being idiots. IP addresses are only dangerous if you leave your router open which honestly is rarely an issue these days. And while addresses are publicly available doesn't mean you should make it easy for people, especially if your identity isn't your first/last

It's whichever one is the opposite of what you say at the time, it seems. ¯\_(ツ)_/¯ Also something something threat model

My favorite is when someone pulls up an IP address they unblocked in whois and says, "see it says US in region code and has New Jersey listed as the location", but all the contact emails are still .ru domains and the RIR is RIPE. "But they said they aren't Russian!"

infosec is not just one people. we hardly agree on anything so please never ever share your IP address, and if you do, it doesn't matter

Both your points seem valid to me. 🤔

You are correct. Unless you pay for a static IP, it's just out of your ISP's address pool, and may be someone else IP later.

I'm gonna share my ipv6 /48, good luck finding my _actual_ ip out of those mhuahahah

I sit in the camp of share it if your comfortable with that information being publicly available but if I want to find out where someone lives, their public IP is not the information I would be using to locate them.

IP’s are supposed to be public info. Yes, you can ascertain a general geographic region from an IP address but IP’s can change making them unreliable for attribution. You don’t need to give out your IP to everyone but if they have it, you’ll be pretty safe most of the time.

Fundamentally, you are correct. While security through obscurity isn't the answer, don't make it easy for people to do OSINT. Ignore the haters too. 😆

People will say just about anything to avoid saying 'oh shit, good point'

I am l33t haxx0r, i used DNS and now I know where your website is hosted, all your base are belong to us! 🙄

Every ISP I’ve used gives the public with DHCP and it changes sometimes. I’ve looked them up and the city is always wrong and sometime even the state/province/country is wrong. People just getting mad because they’re jealous or think they’re more clever.

Start asking those people to prove their credentials. The internet is full of people who claim to be things they aren't. I'd personally much rather someone get my IP than a detailed image of my front yard and house.

Exposing my general geographic area from my IP... meh! Exposing my IP and possible vulnerabilities on my network or home-server... Not a fan! Showing-out my exact address publicly while people know I have a home-lab... Not a fan either... Both expose different risky information.

Infosec is risk management not risk elimination. If someone wanted to hurt you would knowing your address give them an advantage. For women in shelters fleeing abusive partners the answer is yes. For POTUS, no because armed guards. YMMV

It's it wierd I find this as more a scoping exercise. "target" vs normies. However, I think its always better to be safer than not.

Infosec is so not okay. So many fights. Enterprise infosec is the worst. They learned about RFC1918 addresses 30 years ago and they just can't change. We're DTC now. We not only have 'external' IP addresses, we advertise them to the world as quickly and consistently as possible.

Cybersec? More like CyberSUCK! LOL 🤣😂

Also, absolutely love your content, keep up the great work. And forget the haters in infosec. No one can do anything right but everyone believes they have the answer.

probably dumb people that just love to tell women they're wrong

Sorry if i'mnmissing the point entirely but isn't it just how the internet works ? Whatever you post, the people engaging with it are more likely not agreeing with what you posted ?

Is it the same commenters making successive contradictory claims, or are the claims cherry picked from an amorphous group of commenters, without regard to claims made by ind commenters? If so, how do you construct a coherent consensus from the latter?

Like I got SO irritated when my webmail would change to German because my IP address came from a German ISP. I live in Holland...

I get port scanned often, nothing happens. I was taught a crash course on Maltego a long time ago and IP addresses are definitely not a worry for me. Filming yourself on TikTok, yeah, I agree. No one in cyber should have apps like that on their phone.

I think the problem might be generalization. Perhaps the people who commented on your video about the Public IPs are not the same walking outside their houses filming themselves. In any case, you do you and the rest can have a GREAT DAY. Keep it up!

I wonder if the IP people were mad because they wanted to be able to threaten other people that they could track them down to their house by IP and didn't want that myth busted.

It's because we grew up with the Ping of Death, but we never lived in Chicago or south central LA to have the actual drive by of death.