You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: _posts/2026-01-22-Mitigate-Correlation.md
+21-18Lines changed: 21 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -42,41 +42,44 @@ Using IPs captured by a Server, one can correlate **when an IP address stops pin
42
42
43
43
### Listeners
44
44
45
-
There are currently seven known Servers on public Jamulus space, one in each genre. They are hosted on [DigitalOcean](https://digitalocean.com) instances. They are named ***Duet***, and have a userlimit set at two. They all share the same IP and each sit on different ports.
45
+
There are currently fourteen known Servers on public Jamulus space, two in each genre. They are hosted on [DigitalOcean](https://digitalocean.com)and [Oracle Cloud](https://oracle.com)instances. They are named ***Duet*** and ***Jamulus on 22x24***, and have a userlimit set at two. They all share the same IP and each sit on different ports.
46
46
These Servers are “listening” for pings from clients, and packet capturing them to get the IP addresses of user clients.
47
47
48
48
```
49
-
Genre Name IP:port
50
-
51
-
Any Genre1 Duet 24.199.107.192:22121
52
-
Any Genre2 Duet 24.199.107.192:22122
53
-
Any Genre3 Duet 24.199.107.192:22123
54
-
Rock Duet 24.199.107.192:22124
55
-
Jazz Duet 24.199.107.192:22125
56
-
Classical/Folk Duet 24.199.107.192:22126
57
-
Choral/Barbershop Duet 24.199.107.192:22127
49
+
Genre Name IP:port
50
+
51
+
Any Genre1 Duet 24.199.107.192:22121
52
+
Jamulus on 22124 89.168.107.178:22155
53
+
Any Genre2 Duet 24.199.107.192:22122
54
+
Jamulus on 22224 89.168.107.178:22156
55
+
Any Genre3 Duet 24.199.107.192:22123
56
+
Jamulus on 22624 89.168.107.178:22157
57
+
Rock Duet 24.199.107.192:22124
58
+
Jamulus on 22424 89.168.107.178:22158
59
+
Jazz Duet 24.199.107.192:22125
60
+
Jamulus on 22324 89.168.107.178:22159
61
+
Classical/Folk Duet 24.199.107.192:22126
62
+
Jamulus on 22524 89.168.107.178:22160
63
+
Choral/Barbershop Duet 24.199.107.192:22127
64
+
Jamulus on 22724 89.168.107.178:22161
58
65
```
59
66
60
67
### User Data
61
68
62
-
There is an explorer instance collecting lists of Servers and users running from **`137.184.43.255`**. It is hosted on a [DigitalOcean](https://digitalocean.com)instance.
69
+
There are explorer instances collecting lists of Servers and users running from **`137.184.43.255`** and **`89.168.107.178`**. They are hosted on [DigitalOcean](https://digitalocean.com)and [Oracle Cloud](https://oracle.com) instances.
63
70
IP addresses of users collected from the listeners are being correlated with join events derived from the explorer instance to produce IP<‐>username mappings. IP addresses are processed to provide geolocation data of users. This geolocation data is being collected **and** displayed without express permission of users, and with no means to opt in or out.
64
71
65
72
## Mitigations
66
73
67
74
### Clients
68
75
69
-
When you open the Connect dialog window your client starts sending pings to every Server in the list. **`24.199.107.192`**is the IP address of one of those Servers. A Server using **`24.199.107.192`** exists on each genre, their names are ***Duet***.
76
+
When you open the Connect dialog window your client starts sending pings to every Server in the list. **`24.199.107.192`**and **`89.168.107.178`** are one the IP addresses of one of those Servers. A Server using **`24.199.107.192`**and **`89.168.107.178`**exists on each genre, their names are ***Duet*** and ***Jamulus on 22x24***.
70
77
71
-
Blocking outgoing **UDP** traffic on your DAW or router to **`24.199.107.192`** will prevent the listeners from collecting your IP address and breaks correlation. This will help prevent you from being tracked.
78
+
Blocking outgoing **UDP** traffic on your DAW or router to **`24.199.107.192`**and **`89.168.107.178`**will prevent the listeners from collecting your IP address and breaks correlation. This will help prevent you from being tracked.
72
79
73
80
### Server Admins
74
81
75
82
Server admins can decide to prevent user tracking by blocking the explorer probe.
76
83
If you run a Server on the Jamulus public network, it is currently being indexed by the explorer instance on **`137.184.43.255`**
77
84
78
-
Blocking incoming **UDP** traffic from **`137.184.43.255`** will prevent the explorer from indexing your Server and breaks correlation. This will disable user tracking on your Server from the blocked Server.
79
-
80
-
---
81
-
82
-
Updated information can be found here: [https://jamulusjams.com/block-user-tracking.html](https://jamulusjams.com/block-user-tracking.html)
85
+
Blocking incoming **UDP** traffic from **`137.184.43.255`** and **`89.168.107.178`** will prevent the explorer from indexing your Server and breaks correlation. This will disable user tracking on your Server from the blocked Server.
0 commit comments