| Author | Thread |
|
|
05/18/2007 11:48:22 PM · #1 |
Hey DPL teams!
I posted this as a reply to a thread about the security of posting your DPL ideas in your workshop over in "Website suggestions", but I figure a number of you don't visit over there, so I thought I'd post it here, too.
The executive summary is that it's pretty easy to find random workshop images by guessing image numbers in the URL. They also show up in the "comments given" and "comments received" pages. Trying this out, I've seen a number of images intended for Selective Desaturation.
DPC will probably fix it, but in the mean time, I've put up a page on my website where you can upload your images, and it will give them a 128-bit hashed filename (i.e. impossible to guess).
As long as you only post the link in your private DPL thread, nobody will ever find it.
After you upload, it generates a thumbnail and gives you the forum code to paste into your post, complete with a linked image preview, just like those at DPC.
//www.onetacoshort.com/upimg.php
Let me know if it works for you!
Here's an example:
(I hope  Brad doesn't mind me posting more of his shots - they're really great!)
Cheers,
-Jeff
Edit: Full-image now comes up in a 1px black border, like on DPC.
Message edited by author 2007-05-22 22:11:53. |
|
|
|
05/19/2007 12:03:02 AM · #2 |
Originally posted by smurfguy:
... I've put up a page on my website where you can upload your images ... |
So who on YOUR server/website can see images that have been uploaded to it for hashing? |
|
|
|
05/19/2007 12:06:04 AM · #3 |
It would be easier for DPC to setup a photo drop (team gallery) similar to the text forum team link. That way none of the photos go into individual file folders.
.
Shame on you Smurfguy looking at photos that should be confidential, "I've seen a number of images intended for Selective Desaturation" ;)
.
I would trust that if someone puts in a file number wrong and sees a pic that they are not indended to see they will just close it and move on. Heck, this is just a game, sure not worth cheating. Now if they would offer a new car as first prize then all bets are off ;) |
|
|
|
05/19/2007 12:27:36 AM · #4 |
| This is an issue SC has discussed, and Langdon is working some of his magic, I think. For now, if you will keep comments in the forum threads (yeah, I know, it can get cluttered, easily), they won't show up. |
|
|
|
05/19/2007 12:28:44 AM · #5 |
Keep from people seeing your picture in the workshop folder.
1. Post picture in workshop folder
2. Click the box below the thumbnail picture and click "hide".
3. In your DPL forum don't use the  or the  icons. Instead just use the following forum code (you will need to remove the *'s and replace the portfolio number (22970) with your portfolio # and replace the file #(511299) with your file number.
[*url=//images.dpchallenge.com/images_portfolio/22970/orig/511299.jpg][*img]//images.dpchallenge.com/images_portfolio/22970/thumb/511299.jpg[*/img][*/url]
It will look like this.
This is not 100% fool-prof but will make it much-much harder for someone to find your photograph. They would have to get your profile # and photo # correct to view. No easy!
It will not allow anyone to comment on the picture. That way it will not show up in other areas. And only can be viewed by clicking on the thumbnail image within the thread.
|
|
|
|
05/19/2007 12:31:10 AM · #6 |
I think for the DPL specific forums, you could ignore the no large images rule and just post the source image location in within the img tags. |
|
|
|
05/19/2007 12:39:37 AM · #7 |
Yes that is another way to do it if you don't mind putting the 640x picture in your DPL threads.
Click on the and paste the URL of your image in the workshop folder. Remember to replace /thumb/ with /orig/ if you want you teammates to be able to view the fullsize picture.
|
|
|
|
05/19/2007 10:09:45 PM · #8 |
| I find it upsetting that this is possible, and even more upsetting now that it has been posted and other people will now get the idea to start looking at our private photos. |
|
|
|
05/19/2007 11:06:34 PM · #9 |
Who wants to see my potential challenge enttries???
I'll give you the image I.D. to keep you from guessing and I'll still score 6.2+.
It's not that big of a deal.
|
|
|
|
05/19/2007 11:11:20 PM · #10 |
This changes nothing
The concern is someone can enter the image number and view it. How you post it wont affect the fact that its in your workshop. People are NOT getting the image number from the thread. Their guessing it and viewing it.
How you post it doesnt affect the ability to enter a number and get the image. |
|
|
|
05/19/2007 11:13:49 PM · #11 |
Originally posted by yakatme:
Who wants to see my potential challenge enttries???
I'll give you the image I.D. to keep you from guessing and I'll still score 6.2+.
It's not that big of a deal. |
I'm with you. I'm here to learn, not to steal other people's ideas. |
|
|
|
06/05/2007 08:25:53 AM · #12 |
Well, myself and some of my teammates have reverted back to just dropping stuff in our workshop folder and linking without pulling any punches or hiding or anything. I realize there are ways to hide as indicated in this thread, but we didn't do that.
The interesting thing is that each image has more than 7 views. If I'm not mistaken, there should be 7 or fewer since we only have 7 people on our team. Or can 1 person register as more than one "view"? If not, than other people are looking at these images. As others have said, it's not the end of the world and there are ways to help prevent it … I just thought it was interesting. |
|
|
|
06/05/2007 08:31:10 AM · #13 |
| Metate after about 20 of these threads i though langdon already announced changes that are in place? |
|
|
|
06/05/2007 08:32:49 AM · #14 |
Originally posted by metatate:
Well, myself and some of my teammates have reverted back to just dropping stuff in our workshop folder and linking without pulling any punches or hiding or anything. I realize there are ways to hide as indicated in this thread, but we didn't do that.
The interesting thing is that each image has more than 7 views. If I'm not mistaken, there should be 7 or fewer since we only have 7 people on our team. Or can 1 person register as more than one "view"? If not, than other people are looking at these images. As others have said, it's not the end of the world and there are ways to help prevent it … I just thought it was interesting. |
Or one person viewing it more than once ?
|
|
|
|
06/06/2007 01:52:55 AM · #15 |
Tate: the view count is how many times total it's been viewed by anyone other than you. So if I go look at your image 20 times, that's 20 views.
|
|
|
|
06/06/2007 02:09:28 AM · #16 |
Originally posted by citymars:
I find it upsetting that this is possible, and even more upsetting now that it has been posted and other people will now get the idea to start looking at our private photos. |
Private photos should never be stored on someone else's server. |
|
Home -
Challenges -
Community -
League -
Photos -
Cameras -
Lenses -
Learn -
Prints! -
Help -
Terms of Use -
Privacy -
Top ^
DPChallenge, and website content and design, Copyright © 2001-2024 Challenging Technologies, LLC.
All digital photo copyrights belong to the photographers and may not be used without permission.
Current Server Time: 04/19/2024 04:26:52 AM EDT.
or the 
icons. Instead just use the following forum code (you will need to remove the *'s and replace the portfolio number (22970) with your portfolio # and replace the file #(511299) with your file number.
