Follow up from recent privacy concerns

[GoSpursGo]

---

Members don't see this ad.

In investigating a report relating to a concern about potential doxing, the moderator team discovered that a member was able to obtain access to non-personally identifiable IP address information (which is not normal access for a non-moderator). The member did not realize that the access was not allowed. As soon as the issue was identified, the access was removed, and the member in question has stated that they did not save any of the information nor use it for any purpose, including trying to identify (“dox”) other members. We are not aware of any other non-moderator that has been able to obtain similar access.

We take your privacy seriously and are taking additional measures to make sure this does not happen again.

As per our Terms of Use, any form of threats or harassment, including doxing and threats of doxing, is strictly prohibited on the SDN Forums. We want to assure you that we take these reports very seriously. If you ever have concerns about harassment or you feel your safety is at risk, you should contact law enforcement.

We would also like to remind members to use caution when revealing information that could be used to identify you, both on the forums and via private messages.

 

[StIGMA]

This member's username should be made known. If not, you will begin to lose our userbase.

 

[CurbYourExpectations]

I believe the mods and admin did their due diligence. I don't mind if it was handled internally and determined there was no bad intent. I like the community on SDN, and hope it stays the same. It is important that there is a place for everyone to voice their opinion, and anonymity is important for that given the small field size. Wish the best for everyone.

 

[drowsy12]

This isn’t exactly reassuring that a user or users here can access our IP addresses, but thanks for the transparency

 

[Neuronix]

I would like to follow on that this access issue was not related to me or access to the business forum. Evilbooya was not involved in any capacity.

This member's username should be made known. If not, you will begin to lose our userbase.

That's not fair to the user who accidentally obtained those permissions.

This isn’t exactly reassuring that a user or users here can access our IP addresses, but thanks for the transparency

It was accidental, limited to one user, and we're trying to make sure it doesn't happen again.

 

[StIGMA]

I would like to follow on that this access issue was not related to me or access to the business forum. Evilbooya was not involved in any capacity.



That's not fair to the user who accidentally obtained those permissions.



It was accidental, limited to one user, and we're trying to make sure it doesn't happen again.

My concern is that they were looking for the IP addresses. I do not see how they found them without looking. What if it was banking info? “They had no ill will” that’s not exactly credible.

I dont see how this could be 100% accidental. They had to make an action to lead to obtaining them.

 

[thecarbonionangle]

In investigating a report relating to a concern about potential doxing, the moderator team discovered that a member was able to obtain access to non-personally identifiable IP address information (which is not normal access for a non-moderator). The member did not realize that the access was not allowed. As soon as the issue was identified, the access was removed, and the member in question has stated that they did not save any of the information nor use it for any purpose, including trying to identify (“dox”) other members. We are not aware of any other non-moderator that has been able to obtain similar access.

We take your privacy seriously and are taking additional measures to make sure this does not happen again.

As per our Terms of Use, any form of threats or harassment, including doxing and threats of doxing, is strictly prohibited on the SDN Forums. We want to assure you that we take these reports very seriously. If you ever have concerns about harassment or you feel your safety is at risk, you should contact law enforcement.

We would also like to remind members to use caution when revealing information that could be used to identify you, both on the forums and via private messages.

This seems like a good opportunity to consider the IP address access for all admins. Does everyone need to see this? Should this be limited to very very few people (like only a few chiefs)? this seems ripe for abuse. End the IP access and restore faith on SDN!

Clearly there are powerful forces trying to Dox and hurt people in the SDN rad onc community due to our field’s constant chaos and controversy. People should be able to post here without fear of the elites finding out who they are.

 

[deleted1180461]

I’m just going to say this.

I was doxxed at my last job with my prior username.

There was also a time at this job when I logged into my account but the icon and username in the top right did not show me but another user of the rad onc forum. I’m not sure I want to reveal which user this was (it was not Curb). My immediate thought was that this user was my coworker. Yet this made absolutely no sense as this user’s posts made this basically impossible. So I figured it was a glitch.

What went on here sounds like a different problem where a user accidentally had admin privileges, is that correct?

 

[drowsy12]

I’m just going to say this.

I was doxxed at my last job with my prior username.

There was also a time at this job when I logged into my account but the icon and username in the top right did not show me but another user of the rad onc forum. I’m not sure I want to reveal which user this was (it was not Curb). My immediate thought was that this user was my coworker. Yet this made absolutely no sense as this user’s posts made this basically impossible. So I figured it was a glitch.

Is there any other possible explanation other than the person was a coworker?


People who act one way on here sing entirely different tunes IRL. I have seen this first hand. It’s certainly possible the person was your coworker and just lied on here about whatever it was.

 

[deleted1180461]

Is there any other possible explanation other than the person was a coworker?


People who act one way on here sing entirely different tunes IRL. I have seen this first hand. It’s certainly possible the person was your coworker and just lied on here about whatever it was.

There are only 2 reasonable possibilities I can think of how someone at work found out my username and said it to me.

I firmly do not believe this person was my coworker. The posts just do not make sense. Was it possible my workplace was monitoring my useage of their computers? Sure.

 

[drowsy12]

I guess I don’t understand how else another user would be logged into a computer you use at work then, if the person doesn’t work there.

Unless it’s a fight club situation and you’re both users.

 

[deleted1180461]

I guess I don’t understand how else another user would be logged into a computer you use at work then, if the person doesn’t work there.

Unless it’s a fight club situation and you’re both users.

I don’t understand either. Nobody at work used my PC besides me and I never left it logged in. And even if someone were logging into a separate account elsewhere on the company’s network, it still wouldn’t explain why when I put my name and password in it appeared to log me into their account. I did not try and access any of their information and immediately logged out and back in and I was in my account again. I wondered if maybe that person had the same thing happen to them, and they logged in with my username and when they said my username to my face they were just fishing to see how I would respond. But The publicly identifiable things this user posted was not consistent at all with any of my coworkers (practice type, locations, personal attitudes about stuff, etc). It was a couple years ago so i don’t exactly remember everything.

I’m curious if this glitch in the matrix has happened to anyone else.

 

[drowsy12]

Ah I see so you logged in and then it was another user. I thought the other user was already logged in. That sounds like a weird glitch yeah

 

[seper]

In investigating a report relating to a concern about potential doxing, the moderator team discovered that a member was able to obtain access to non-personally identifiable IP address information (which is not normal access for a non-moderator). The member did not realize that the access was not allowed. As soon as the issue was identified, the access was removed, and the member in question has stated that they did not save any of the information nor use it for any purpose, including trying to identify (“dox”) other members. We are not aware of any other non-moderator that has been able to obtain similar access.

We take your privacy seriously and are taking additional measures to make sure this does not happen again.

As per our Terms of Use, any form of threats or harassment, including doxing and threats of doxing, is strictly prohibited on the SDN Forums. We want to assure you that we take these reports very seriously. If you ever have concerns about harassment or you feel your safety is at risk, you should contact law enforcement.

We would also like to remind members to use caution when revealing information that could be used to identify you, both on the forums and via private messages.

this makes 0 sense, I guess this is a misleading post

 

[Reaganite]

this makes 0 sense, I guess this is a misleading post

Yeah how does one "accidentally" look for someone's ip address?

 

[deleted1180461]

I want to know if this is the same account that appeared to be intertwined with mine around the time I was doxxed.

If you can see somebody’s IP address it should be obvious that a mistake has been made. Like when I appeared to be logged into someone else’s account and immediately logged back out. I would think to see someone’s IP you would (1) have to realize that you have access you’re not supposed to then (2) using that knowledge intentionally click on stuff to find this out for users you want to know it for whatever reason.

 

[CurbYourExpectations]

I will confirm that Neuronix did not have anything to do with this and it was not related to the business forum. I think (s)he really cares about this community.

 

[deleted1180461]

Ok. Things are too hot. I’m done here.

 

[deleted1180461]

FWIW curb is legit and a good dude and I also believe Neuronix is on the right side.

 

[Neuronix]

Thank you for your faith in me. I always try to do the right thing.

The community on SDN forums has helped provide me guidance and clarity innumerable times, and that is why I am here. My goal in this forum is to help others by being an active member and by providing a safe and open community to discuss issues in our specialty.

If I ever thought that SDN was acting in bad faith, I would resign. This is a volunteer position that I get nothing out of except an occasional SDN-branded mug or t-shirt. If anything, my work here is a liability for me since I am "pseudo-anonymous". I have had an unstable academic career, and it doesn't help that some groups and leaders criticized on SDN exclude me from working with them professionally. Still, my belief that we are helping the community of radiation oncologists, and others through my work elsewhere on this site, outweighs the personal risk I take in maintaining and participating in SDN.

For example, since ASTRO/SCAROP created a private and anti-competitive salary survey only for chairs, our only recourse is to provide our own dedicated forum to discuss financial issues. The difference is that our community is open to any radiation oncologist free of charge.

We take your privacy seriously. Please click the report button if you see something suspicious. You can report private messages too. We will investigate and take action. I hope you understand why we can't give more details about the incident in this thread. If you want to leave, I won't blame you. Just keep in mind, we are here with no secondary motive to hurt anyone or profit from their private data. I believe that is true for the vast majority of our users.