Shed Your Head: Hotlinking for Knowlege http://blog.rinspin.com/articles/2006/06/01/hotlinking-for-knowlege en-us 40 Scott Bronson Hotlinking for Knowlege <p>One of the many problems with shared hosting is that you can&#8217;t watch your network traffic in realtime. You might find out about a good <a href="http://en.wikipedia.org/wiki/Slashdotted">slashdotting</a> only after you owe your hosting company a few thousand dollars in overage fees. You gotta be careful.</p> <p>While glancing over my logs last night I noticed two small blips coming from <a href="http://sb-pyrat.livejournal.com/3982.html">http://sb-pyrat.livejournal.com/3982.html</a> and <a href="http://profile.myspace.com/index.cfm?fuseaction=user.viewprofile&amp;friendid=3413828">http://profile.myspace.com/&gt;&gt;</a>. Hellooo <a href="http://en.wikipedia.org/wiki/Inline_linking">hotlinking</a> bottom-feeders!</p> <div style="float:right; width:320px; margin:1em"> <a href="http://bronson.rinspin.com/gallery/v/UCSB/gtown/hamburger_habit_night.jpg.html"> <img src="http://bronson.rinspin.com/gallery/d/2389-2/hamburger_habit_night.jpg" height="240" width="320"> </a> <center><small> Of all of my <a href="http://bronson.rinspin.com/gallery/v/UCSB/gtown/IMG_0286.jpg.html">fine</a> and <a href="http://bronson.rinspin.com/gallery/v/UCSB/gtown/IMG_0287.jpg.html">not-so</a>-fine <a href="http://bronson.rinspin.com/gallery/v/UCSB/gtown/?g2_page=3">pics</a>, the one that gets attention is this nightime shot of The Hamburger Habit in 2003. </small></center> </div> <p>Dave <a href="http://unknowngenius.com/blog/archives/2004/04/20/hot-linking/">talked about</a> hotlinking two years ago. Any time you&#8217;re linking pictures that you have no control over into your own pages, you&#8217;re taking a big risk. I think people do it only when they don&#8217;t know any better. Or when they&#8217;re just <a href="http://unknowngenius.com/blog/archives/2005/12/07/please-be-a-moron-somewhere-else/">phenomenally stupid</a>.</p> <p>You should always copy the images that you usto your own site or use <a href="http://imageshack.us/">imageshack</a>. Here&#8217;s why:</p> <p>Hotlinking presents some random person (me, in this case) serious temptation to quietly slide a gigantic <a href="http://en.wikipedia.org/wiki/Goatse.cx">goatse.cx</a> image into your site. It could happen at any time.</p> <p>Hotlinking also gives some random person (again, me) full knowledge of your site&#8217;s traffic. I know how many people visit Midge&#8217;s myspace page, when they visit, and what their IP addresses are. The IP address tells me their school or company they belong to, what cities and countries they&#8217;re in, etc. This can be turned into <a href="http://analytics.google.com">valuable data</a>.</p> <p>Basically, hotlinking gives the hotlinkee a free <a href="http://www.eff.org/Privacy/Marketing/web_bug.html">web bug</a>. If I were Midge&#8217;s jealous boyfriend, I could slip a picture onto her wall. I would then know whenever anybody looks at her myspace page. I&#8217;d monitor when she logs on, which of her friends visit, how often that sketchy guy from Philedalphea goes there, etc. If I were <i>really</i> jealous, I could use the zero-day <a href="http://secunia.com/product/11/">exploit</a> du jour to try to break into their computers.</p> <p>This is actually a pretty serious privacy problem. I use two sites that allow others to leave content on my pages. Facebook doesn&#8217;t allow images on its walls so it&#8217;s safe. Skanky, spam-infested, buggy Myspace of course has this problem. I loathe Myspace. It&#8217;s the <a href="http://www.amazon.com/gp/product/0764558110/103-1284212-3954265?v=glance&amp;n=283155">AOL</a> for this decade. And you can bet that people are using this trick to keep track of their &#8220;friends&#8221;.</p> <p>Now sb-pyrat and midge (yes, chelsea that posted the pic but it&#8217;s your wall), your sites aren&#8217;t busy enough to cause me worry. If the traffic goes up, though, the pic comes down. And next time, link to a <a href="http://bronson.rinspin.com/gallery/d/2389-2/hamburger_habit_night.jpg">smaller</a> or <a href="http://bronson.rinspin.com/gallery/d/2388-2/hamburger_habit_night.jpg">tiny</a> version of the <a href="http://bronson.rinspin.com/gallery/v/UCSB/gtown/?g2_page=3">image</a> OK? That way, even if I do notice, I probably wouldn&#8217;t mind.</p> <p>Wow, I miss the Habit. Tyson, we got plans for mid July.</p> Thu, 01 Jun 2006 08:26:00 -0700 urn:uuid:f26f71c1-bc45-4040-a878-7390ebdf8f90 bronson http://blog.rinspin.com/articles/2006/06/01/hotlinking-for-knowlege "Hotlinking for Knowlege" by dr Dave <p>Oh, I had an even much funnier run in with some hotlinker last year: <a href='http://unknowngenius.com/blog/archives/2005/12/07/please-be-a-moron-somewhere-else/' rel="nofollow">http://unknowngenius.com/blog/archives/2005/12/07/please-be-a-moron-somewhere-else/</a></p> <p>And yea, MySpace is AOL, Prodigy and Compuserve of the last decade, all rolled into one. Probably the kids of aforementioned services&#8217; users too.</p> Thu, 29 Jun 2006 01:41:41 -0700 urn:uuid:a3c0ed92-3a2a-4ea7-9dc5-b2489753b666 http://blog.rinspin.com/articles/2006/06/01/hotlinking-for-knowlege#comment-106