Security Basics mailing list archives

Re: Private IP address with yahoo messenger


From: "aditya kuppa" <aditya1010 () gmail com>
Date: Sat, 26 May 2007 01:44:29 +0530

Hi
Here are some of the possibilities:
1)Your machine might be compromised .
2)It may be not from your YM but from your browser the subject is
getting the IP.Ensure that no  JavaScript,Applet(JAVA),Cookies,ActiveX
pulgins running on your YM cleint or in the browser.Use socksification
in your browser, This will enable relaying all the information your
browser or any other software sends and transfers to the proxy server.

Try Logging into the webbased YM like Meebo.com  check the subject can
still tell your IP .then we can conclude that your machine or channel
is comprimised not YM .
which version YM  are you using ?or are you using the GIAM like client.

Hope to hear from you.
Regards
Aditya K


On 5/25/07, Alcides <alcides.hercules () gmail com> wrote:
Thanks Jeff.

Let me give you a slight insight of a real scenario.
I don't know how it was done. But I have witnessed that someone from
other end in Yahoo chat has told my internal IP to me -more than once.

-->I'm sure that person is geographically separated at least 1000Miles.
-->I never told my internal IP to anybody by any means.
-->I have ensured that I changed my private IP every time it was
reported to me in chat session.
-->No file transfer/ voice/ video was involved.
-->I have ensured absence of any keylogger/ Spyware in my PC.
-->Every time, Yahoo messenger was the only channel, with which I was
communicating with world.

Is it some kind of messenger related tool? Or some packet analysis
utility or something else? I tried googling around a lot but couldn't
much except file transfer related trick. But that couldn't help at all.

Now what can you suggest to carry out my research in proper direction so
that I can Find answers to both of my questions in the earlier post?

Regards.

Jeff MacDonald wrote:
> On Tuesday 22 May 2007 11:21 pm, Alcides wrote:
>> Hi list,
>> I was wondering to have any clue on this.
>> While having a chat session with somebody in yahoo messenger, how is
>> it possible to obtain his/her Private IP address if that person is
>> behind a Router and/or a Firewall (NATed)?
>

> not without the person giving it to you.. i.e. I know of no way to obtain that
> information without getting it directly from the user.

>
>> Moreover,
>> Is there any way that he/she can hide successfully (behind the NAT or
>> something else)so that NO internal IP address is revealed?
>
> as far as I know, that is already the case-- as a user you have no way of
> getting ip address information, especially the private side.
>
> of course it prolly depends on the protocol and the implementer of the
> service.
>
>> Thanks.
>> Warm regards.
>
> hope that helps a little
>
> regards,




Current thread: