How to track and display profile views on GitHub

Re:How to track and display profile views on GitHub by rushter on Thursday July 09, 2020 @10:56AM (#23780962)

I did some research before writing an article. GitHub started proxying images in 2014, and there are a lot of repositories that use this technique to keep their stats. I think GitHub is OK with that.

[ Parent | on HN ]

Re:How to track and display profile views on GitHub by jrrrr on Thursday July 09, 2020 @12:00PM (#23781645)

Re: proxy security concerns:

>Unlike GitHub, most of them don't even bother proxying the image to hide IP, referrer, and browser agent. If you want to allow external images on your site, you must proxy them and hide everything about a person who requested it. > A person with bad intentions can trick a victim into opening your profile that looks completely legit and detect his IP and a browser.

Can you explain this in more detail? Given a profile host that doesn't proxy, how does that attack work?

[ Parent | on HN ]

Re:How to track and display profile views on GitHub by nso on Thursday July 09, 2020 @12:18PM (#23781808)

Attack?

1. your browser opens image from external server (in this step the server gets your IP and potentially user agent as that's how browsers communicate with servers)

2. there is no step 2

[ Parent | on HN ]

Re:How to track and display profile views on GitHub by cutemonster on Thursday July 09, 2020 @03:55PM (#23784371)

What? My step 2: Go to ip addr and ask your favorite celebrity (whose ip you got) for an autograph and selfie together

[ Parent | on HN ]

Re:How to track and display profile views on GitHub by f311a on Thursday July 09, 2020 @01:19PM (#23782533)

The IP itself can be a very valuable information if you target famous people, politicians, criminals and so on.

Such people usually know, that clicking on random links is not safe.

[ Parent | on HN ]