This is an abhorrent practice on TinyChat's part to expose any members IP address publicly without any way for the user to request it be removed. This information can give away a users location and allow individuals with malicious intent to potentially attack the IP address using denial of service attacks or port scans to look for vulnerabilities or holes in the users system.
The Misc Incident
Last night on Bodybuilding.com's Misc section a user started a thread that linked to a Tinychat room with him and a female companion. According to the user, franchise16, no nudity was recorded on cam during the chat session, but in the end, the Tinychat staff felt it necessary to close down the room and then proceeded to display the IP addresses of all the users who were currently in that room at the time.
As of the time of this posting, Tinychat still has left this information up. As a further example of the abuse potential this opens up, a number of users took the entire list of IP addresses and claimed to post them on 4chan, to allow the members their to potentially exploit the list for nefarious purposes. I cannot verify this claim however.
I spoke to the user who started the Tinychat room, franchise16, and asked him for an overview of the events. Here is a summary of what he said happened:
I asked him if there was any nudity shown on cam and he responded that there was not. He also confirmed that the girl was of legal age (18) and was therefore not any sort of situation of child pornography. franchise16 said that no Tinychat staff warned him in advance that he was violating in terms of that he should stop the cam feed before the room was closed and all the users IPs were posted. Regardless if there even was nudity displayed on cam in the Tinychat room, Tinychat should not endanger it's users security by publicly "outting" them by posting their IP addresses when a room is terminated.Made thread bout POF [Plenty of Fish] girl comin over[She] Came over, had webcam open and screen off on macbook, told them mac was for musicCarried it around with meBrought on to porch where we fooled around, was too dark to seeHad about 500 users viewing it in the roomBrought it inside and into the roomWe made out for a big on bedTook titties out, no nudity was recorded I dont believe[The feed] Was cut about 2 min after mac was brought into roomRest happened off camAll IPs were posted in tinychat room but for some reason not me or any other canadian brahs
Because of this incident, I would recommend that no one use Tinychat. The risk of having your IP posted without any warning or notification is not one that you should be willing to risk. When using IRC servers that do not obfuscate IP addresses, users are aware that their IPs are being displayed publicly, but Tinychat doesn't do this openly or have any sort of whois command so that users IPs can be displayed to other users, outside of Tinychat staff.
I will contact Tinychat's support and report back with their response.
UPDATE: Tinychat has responded to my inquiry. See the post TinyChat Responds to Inquiry Regarding Public IP Disclosure for the follow up.