OpSec: Correlation attack

[cheapsheep 6]

This little coincidence made me smile. Leaving this here as a (mini)lesson..



@Staff: What about removing 'at HH:MM am/pm' from the Top User Speed section and make it MM/DD/YYYY for all sections? 

[benfitita 35]

Explain please. I'd like to learn more.

[cheapsheep 6]

23 minutes ago, benfitita said:

Explain please. I'd like to learn more.

It's obviously a lurid headline.
I guess we can assume it is one user who wants to fully utilize the available uplink by using multiple connections and servers! as the connections are timely correlated.
Regarding this i asked myself why we do need the exact hour and minute of the connection in the Top User Speed section as it may pose a minimal but unnecessary attack surface?

I may be wrong though. Any thoughts on that?

[OpenSourcerer 1363]

On 12/5/2023 at 9:12 PM, cheapsheep said:

What about removing 'at HH:MM am/pm' from the Top User Speed section and make it MM/DD/YYYY for all sections

You cannot remove it from the Top Users screen without removing them everywhere else as well. I believe the same class is used because the displaying of date/time strings across all of IPBoard is affected by the user's settings, changeable in the Preferences.