From: Gregg N 

"Paul Ranson"  wrote in news:422f20a5$1{at}w3.nls.net:

> It uses a Java applet to determine your local IP address. No Java, no
> address.
>
> The applet posts the local address back to the server, so now they
> know too.
>
> I don't see how exposing a local, but unreachable, IP address is a
> vulnerability. I also don't see any need for Java. Problem solved.

Yes, disabling Java appears to prevent my local IP from being sent to them.
I too don't immediately see any problem, but I wonder if this could be used
to escalate the severity of some other vulnerability.

Gregg

--- BBBS/NT v4.01 Flag-5