Shalom.
If you have posted in any ID-enabled threads from 2024 until yesterday then your IP has been leaked.
This was the algorithm used to derive IDs:
function convert6BytesToChars($hash) {
$charset = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz!^";
$chunks = [];
$bitOffset = 0;
for ($i = 0; $i < 8; $i++) {
$byteIndex = (int)($bitOffset / 8);
$bitIndex = $bitOffset % 8;
$chunk = ((ord($hash[$byteIndex]) << 8) | ord($hash[$byteIndex + 1])) >> (8 - $bitIndex);
$chunk &= 0b00111111;
$chunks[] = $chunk;
$bitOffset += 6;
}
$result = "";
foreach ($chunks as $chunk) {
$result .= $charset[$chunk];
}
return $result;
}
function new_poster_id($ip, $extra = 0) {
$ipn = $ip . "s9gu34hg934hgy394uhgy3";
if ($extra != 0){
$ipn = $ipn . $extra;
}
$hash = md5($ipn, true);
$id = convert6BytesToChars($hash);
return $id;
}
($extra is set to thread ID on boards without global IDs)
Given that there are only 4.2B IPv4 addresses, and that the sharty doesn't allow IPv6, bruteforcing your way from ID to IP is trivial.
This has seemingly been patched but there are already millions of prior posts with IDs dating back to 2024.
Anon-IB (pedophile revenge porn imageboard) had its users de-anonymized the same way:
https://www.thedailybeast.com/top-us-government-computers-linked-to-revenge-porn-site/
