Clickbait? Its not "VPN providers" its "VPN provider software", I never even thought of using their software, most just give you the credentials for OpenVPN/IPSEC/PPTP or similar. Also if anonymity is of "real" concern you should never use a system that knows your real IP address in the first place. Instead create the vpn tunnel on a separate host system and run something like Tails in a VM (or better yet separate physical hardware).
VPN leaks users’ IPs via WebRTC
21–30 of 172 posts
Re: VPN leaks users’ IPs via WebRTC
#22I don't use VPNs. For me, the more alarming information here is that SOCKS and Tor proxies are also leaking IP addresses.
If a SOCKS proxy is configured in browser, isn't it the browser's responsibility to ensure all outgoing traffic - including WebRTC - goes via the proxy? Are these browser bugs?
Update: Can confirm Firefox Quantum with SOCKS proxy leaks the address. Oh dear!
Update 2: I didn't realize this is how WebRTC actually works. FF even has an entire page for tweaking this stuff https://wiki.mozilla.org/Media/WebRTC/Privacy. I hate it when features like these, which atleast in my case go mostly unused, have such critical weaknesses by design and it's not announced anywhere with a big red danger sign.
Re: VPN leaks users’ IPs via WebRTC
#23Anyone interested in setting up their own VPN should check out Algo: https://github.com/trailofbits/algo
What's so "legacy" about L2TP that it refuses to support it? Unlike others it's actually both secure and supported natively on most platforms...
Sorry, I'm not actually affiliated with the project, I just use it, so you'll have to shoot your question to the people behind it.
Re: VPN leaks users’ IPs via WebRTC
#24It's 503 for me. Here's an archived copy:
Re: VPN leaks users’ IPs via WebRTC
#25I don't use VPNs. For me, the more alarming information here is that SOCKS and Tor proxies are also leaking IP addresses. If a SOCKS proxy is configured in browser, isn't it the browser's responsibility to ensure all outgoing traffic - including WebRTC - goes via the proxy? Are these browser bugs? Update: Can confirm Firefox Quantum with SOCKS proxy leaks the address. Oh dear! Update 2: I didn't realize this is how W…
> I didn't realize this is how WebRTC actually works.
Yep. STUN is in the spec, and always has been. This has been a thing for years.
Re: VPN leaks users’ IPs via WebRTC
#26Given that its hard to figure out how they could be profitable, should we assume private internet access is a NSA honeypot?
I worked at a well-known civil rights advocacy nonprofit for a long time and Private Internet Access was one of our major supporters. The owner is a huge ally of Internet freedom and privacy - a very good person who is an activist in their own way and using their success to make a positive impact.
So perhaps I'm biased (even though I'm not in nonprofit anymore), but I would put the chance of an NSA honeypot at close to 0%...
Re: VPN leaks users’ IPs via WebRTC
#27Given that its hard to figure out how they could be profitable, should we assume private internet access is a NSA honeypot?
What you say concerns me as PIA user. What do you base your allegations on? It seems that PIA sponsors a lot of organizations [0], which I don't think they would if they were not profitable.
[0] https://www.privateinternetaccess.com/pages/companies-we-spo...
Re: VPN leaks users’ IPs via WebRTC
#28Clickbait? Its not "VPN providers" its "VPN provider software", I never even thought of using their software, most just give you the credentials for OpenVPN/IPSEC/PPTP or similar. Also if anonymity is of "real" concern you should never use a system that knows your real IP address in the first place. Instead create the vpn tunnel on a separate host system and run something like Tails in a VM (or better yet separate ph…
That tunnel won't help against real adversaries. Timing attacks and text content analysis will expose you. It's getting harder to be truly black online.
Re: VPN leaks users’ IPs via WebRTC
#29Just want to point anyone looking to test their own VPN to https://ipleak.net/ . That's been my go-to, and it seems more comprehensive than the linked service.
FWIW, I show that Opera's free VPN does not leak the client's IP address.
Re: VPN leaks users’ IPs via WebRTC
#30Just want to point anyone looking to test their own VPN to https://ipleak.net/ . That's been my go-to, and it seems more comprehensive than the linked service.
You can test WebRTC IP address (and media device id) leakage using https://browserleaks.com/webrtc.
To disable WebRTC in Firefox, set the about:config prefs "media.peerconnection.enabled" and "media.navigator.enabled" to false.