Looking Glass

Take a look at the heart of c0mpic!

We are sometimes asked how “secure” anonymous image hosting on c0mpic is – well, here is the answer 🙂

First, we modified the hosting script so that it would not log any IP addresses for uploaded images in the file logs. Let’s take a quick look at the log table of the hosting script in our database:

mmh_file_logs database table view

The admin panel view of c0mpic shows the same:

admin panel log view

But wait! What if I already have an user account?

Creating an user account requires additional information, such as a username, email address, and password. In addition, an IP address is needed for the login session. In this case, we use the IP address of our current front-end web server to enhance user privacy:

admin panel user list view

Why are we doing this?

Every day, more and more information about us is logged and calculated. Every order placed in a shop becomes an advertisement on many pages just a few hours later. Why should we collect more information than is necessary?

Providing freedom can lead to abusive behaviors, but we take every abuse message seriously and delete content that violates laws or our terms of service. At the same time, we have learned that people who upload unwanted content hide behind proxies or Tor services. Therefore, starting to log wouldn’t change anything – it would just be disadvantageous for “normal” users. Regardless, we reserve the right to temporarily activate logging in the event of mass uploads of content that violates our terms of service.

A major feature of the next c0mpic release is a blacklist that will prevent the upload of blacklisted images. This is a feature missing from the current MMH script.