Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 158 Stack Exchange communities.

What is meta?
Here's how it works:
  1. Any Stack Exchange user can ask a question
  2. The community provides support, votes on ideas, and reports bugs
  3. Your voice helps shape the way Stack Exchange operates

I'm sure you guys already know this, but allowing users to put images from any source in questions means that askers can get all the analytical data you can about their question.

So a malicious user could theoretically post some posts and such with a small 1x1 image, which would allow him to get users IP addresses (thus general location/even workplace), exact times people visited his question, et cetera.

Maybe you don't care—such information isn't that revealing. However, some users might not feel the same.

(Suggested fix: only allow images from a list of image hosting sites you can vouch for.)

share|improve this question
13  
Better idea: let SO host all the images. – Earlz Jul 2 '10 at 0:49
13  
And also, security != privacy – Earlz Jul 2 '10 at 0:50
1  
I reported the same thing to the phpbb team a while ago regarding PMs, as most email clients block external images. They didn't see it as worth fixing. – Gelatin Jul 2 '10 at 1:00
    
Good point about privacy vs security. – Aaron Yodaiken Jul 2 '10 at 3:26
    
Doesn't SO locally cache externally linked images? Or is that just for the Free OSS ads? – detly Jul 2 '10 at 3:39
    
@detly, no. It doesn't appear to. – Aaron Yodaiken Jul 2 '10 at 17:47
    
Is there anything that anybody can do about this? – Aaron Yodaiken Jul 5 '10 at 2:05
2  
Related - The other issue is a potential area where someone can phish for passwords from your users: meta.stackexchange.com/questions/115178/… – Brandon Montgomery Dec 7 '11 at 20:39
    
@Earlz Security != Privacy, but Privacy is really a sub-set of Security - a part of the "C" in "CIA" (Confidentiality, Integrity, Availability). – Iszi Aug 29 '12 at 13:15

I strongly recommend blocking non-Stack-hosted images in posts and messages going forward. The potential harm may not be severe, but it exists and there is no benefit to balance it out.

Reasons to leave them:

Reasons to block them:

<img src="https://meta.stackexchange.com/questions?sort=frequent&pagesize=1">

  • Prevent users from posting images that can freeze the page, which may be irritating to clean up if moderators and other users are using affected browsers.

<img src="https://uhoh.s3.amazonaws.com/lol.svg">

share|improve this answer
5  
Warning for Chrome users: do not go to the revisions page, as it will freeze your current tab. – Shadow Wizard May 25 at 21:30
    
Well, at least now I know why my page sort randomly switched to "frequent" and I couldn't open this question without my tab freezing. I'd call that a decent demonstration of the point. – Kendra May 25 at 21:41
    
@Kendra well, Jeremy fixed this by pushing the poisoned parts into snippets. : – Shadow Wizard May 26 at 6:01
4  
I'd almost say you could strike that one "reasons to leave them" item. The shorteners are disallowed for all new posts, and according to that Meta thread you can't keep them in edits of old posts either. So, the only ones left are those in old posts that haven't been edited since the change. We could do the same with external images, though I'd think it would actually be better to do a one-time mass download and link replacement instead. – Iszi May 26 at 15:18
    
@ShadowWizard I only went to the revisions page because of this comment. i.ytimg.com/vi/sVkhqf4Dxx4/hqdefault.jpg – Rob May 27 at 4:52

So what? Folks can track your viewing habits - that's a part of using The Web. Hopefully you already have off-domain cookies turned off, but if not then do that. If you're really concerned about it, use a proxy...

share|improve this answer
5  
I dunno. It seems a bit dodgy that you can post an image link in chat and suddenly get an instant snapshot of everyone’s IP who is in that room — plus the occasional ghost-mod who is tail -fing the log without being “in” the room. Since you see when people show up to the room, and you see the new IP appear at the same time, it is pretty easy to see who is who. Is this desirable? – tchrist Jan 13 '13 at 13:51
    
If you want, you can come talk to us about it at ELU chat, where we were discussing it this morning. And yes, I’ve turned off the tracker. :) – tchrist Jan 13 '13 at 15:50
3  
I donno... You might find out roughly where I live without looking at my profile; that'd be... terrible? – Shog9 Jan 13 '13 at 17:22
    
Yeah, it means I could invite you to coffee in Boulder. :) – tchrist Jan 13 '13 at 17:23
2  
I originally down-voted just for the callous attitude towards user privacy. If I could down-vote again though, I would. Although not stated in the question for this thread, the use of external images is not only a privacy problem. It's also a content management issue. This is addressed in Jeremy Banks' answer ("Eliminate potential dependencies on external resources, as we generally require.") and, ironically enough, exemplified in another answer by uɐɯsO uɐɥʇɐN. – Iszi May 26 at 16:03
1  
Because empty gestures fixes this, yeah @Iszi? I wrote this almost 6 years ago, and the situation for passive browsers has only gotten worse in this time. If you're not blocking images, ads, scripts and cookies, then you can pretty much guarantee someone is tracking you. Blocking off-site images would make avoiding link-rot, implementing secure transport, and a bunch of other maintenance tasks a hell of a easier, but if we're gonna do it for those reasons then let's be honest about it & not hide behind some privacy pageantry that won't help anyone. – Shog9 May 26 at 16:45
2  
Unlike web tracking in general, the problem here is abuse of a trusted resource by untrusted parties. Privilege escalation, in other words, however informally. This is (presumably) why Wikipedia does not permit external images. Put another way, "Untrusted websites can track you" is not a good reason to allow untrusted users here to track everyone using SE. – Nathan Tuggy May 26 at 23:11
    
You lost me at "unlike web tracking in general", @nathan. – Shog9 May 26 at 23:54
1  
I don't fully agree with Shog's implied privacy threat model, but do agree that it's not worth focusing on this potentially-controversial point when there are several other compelling arguments that folks can probably agree on. – Jeremy Banks May 27 at 0:00
2  
@Shog9: Most web tracking is performed by, or at least with the explicit permission of, the same party you think you're visiting. This is not. This disconnect between who you think you're trusting and who you're actually allowing to do things is one of the most basic security problems. – Nathan Tuggy May 27 at 0:01
1  
Shog9: Arguably, ad networks have a similar threat model in some cases; the site is trusted by the user, the network is trusted by the site, and ads are trusted by the network, and the result is that the user trusts the ads by mistake. This is a known issue, and ad-served malware is no small problem. Logically, though, images included in SE posts are not generally going to be blocked by even software designed to block ads, so dedicated mitigation techniques for that threat aren't usually going to work here. @JeremyBanks is right, though; there are other benefits of higher immediate importance. – Nathan Tuggy May 27 at 0:05

Now that image hosting on imgur.com is supported perhaps all other sources should be blocked?

It isn't nice to hotlink anyway.

share|improve this answer
16  
That would break a lot of questions and answers if the block was retroactive. Besides, banning hot linking from XKCD might result in a revolution. – Tim Post Aug 24 '10 at 13:54
    
I can has tommy drop tablez som moar? (I'm so sick of that strip) – jjnguy Aug 24 '10 at 14:09
4  
@jjnguy: His name is "Little Bobby Tables". – zneak Aug 24 '10 at 17:37
    
@zneak, whatever his name is...I hate him! :P – jjnguy Aug 24 '10 at 17:40

Yes PLEASE. I have spent a lot of time Removing link shorteners from posts! and many of the blacklisted link shorteners are actually image hosting services, so I have experience dealing with this.

Many image hosting services delete their images after a certain period of time. After this has happened, it can be IMPOSSIBLE to get a replacement.

There is only one image I can remember that I was able to find a suitable replacement for. The only reason I could was because it was of a pop up in a very popular tool, and the question essentially dictated what it said.

There is still a lot of work to be done with removing banned image links. yfrog.com alone has 200 hits.

A number of questions relied on now broken images to be coherent. It's impossible to answer a question when all it says is:

How do I get this effect in jQuery?

I want to do this in jQuery:

<image src="dead.li/nk">

(Yes, this is loosely based off personal experience.)

By my calculations, there are about 20k different posts (on Stack Overflow alone) that have inlined images that aren't from i.imgur.com:

-- returns 19186 rows

Select
id as [Post Link]
,body
from posts

where body like '%<img src="http://[^i]%'

This probably misses a great deal, like imageshack images.

I think that the best solution would be to automate as much of this as possible. Would it be possible to have the community user find all the posts with live inlined images, upload them to imgur, and replace it with the new link? In the past they helped transition links during the great meta schism, from what I heard.

share|improve this answer

A fairly high fraction of questions and answers get edited by high-rep users, and an unexpected image link in there would likely attract both deletion and a flag for moderators to squelch the user.

share|improve this answer
5  
It could also be a totally legit-looking URL. Besides, prior to reading this, would I see a link to an image that didn't show up, I don't think I would have done anything about it. – zneak Aug 24 '10 at 17:36

Depending on the available bandwidth, SO could also act as a proxy server (obviously caching the images).

share|improve this answer

What external images bring to a conversation

The Good

  • A more relate-able way for many people to understand the metaphor you want to use
    Many people aren't able to visualize what you mean, so visualizing it for them helps
  • Really fun puzzles
    See puzzling. There are some great image based ones there
  • Troubleshooting through screen grabs
    Many things would be MUCH harder to do without this on many SE sites

The Bad

  • Scripting
    SVGs and other active image content is dangerous here
  • Page size
    The bigger the image, the longer the load
  • Tracking
    A lot of people are concerned about anonymity for the wrong reasons and it breeds some misunderstanding
  • Policing
    We need to make sure things that shouldn't be on SE, AREN'T on SE

My take?

I'm gonna have to say that we need to do it in a way we can trust it. There is a way to do this that most people will probably accept

  • Official Host
    All images need to be posted here, no hot linking
  • Restricted formats
    If it's not PNG, JPEG, or GIF it doesn't get loaded
  • Lazy Loading
    This way if it's a large image it will be loaded only when clicked on or needed, and long page loads won't happen
share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .