Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

VPN leaks users’ IPs via WebRTC

voidsec.com

Post reply on HN
Print view View original

41–50 of 172 posts

Re: VPN leaks users’ IPs via WebRTC

#41

Post by fauigerzigerk »

zorkw4rg wrote: post #21

Clickbait? Its not "VPN providers" its "VPN provider software", I never even thought of using their software, most just give you the credentials for OpenVPN/IPSEC/PPTP or similar. Also if anonymity is of "real" concern you should never use a system that knows your real IP address in the first place. Instead create the vpn tunnel on a separate host system and run something like Tails in a VM (or better yet separate ph…

>Its not "VPN providers" its "VPN provider software"

OpenVPN leaks DNS on every default Ubuntu installation I have tried. But I think it's actually Ubuntu NetworkManager's fault.

The WebRTC leaks discussed in this article are not prevented by OpenVPN either (last time I checked, which was a while ago). You have to disable WebRTC in the browser.

Re: VPN leaks users’ IPs via WebRTC

#42

Post by lr4444lr »

zorkw4rg wrote: post #21

Clickbait? Its not "VPN providers" its "VPN provider software", I never even thought of using their software, most just give you the credentials for OpenVPN/IPSEC/PPTP or similar. Also if anonymity is of "real" concern you should never use a system that knows your real IP address in the first place. Instead create the vpn tunnel on a separate host system and run something like Tails in a VM (or better yet separate ph…

I can appreciate the use of Tails in a VM, but doesn't the provider of the "separate host system" have your identity through your payment information?

Re: VPN leaks users’ IPs via WebRTC

#43

Post by kardos »

pen2l wrote: post #36
bringtheaction wrote: post #33

Earlier quoted context omitted.

> text content analysis The solution to that is to use memes and bad grammar. I am not kidding. Keep your messages really brief and have a community of people that talk in a very similar fashion to one-another.

I think is how the birth of leetspeak came about, no? And why still a lot of "read me" files for pirated software use poor grammar. Another option is to use translation services, en->fr->ja->de->en. Reread message -- does it say what you mean? If yes, go for it! If not, modify as needed.

Surely you mean an offline translation program, and not an online translation service like google's translator...

Re: VPN leaks users’ IPs via WebRTC

#44

Post by lawl »

bringtheaction wrote: post #33
3pt14159 wrote: post #28

Earlier quoted context omitted.

That tunnel won't help against real adversaries. Timing attacks and text content analysis will expose you. It's getting harder to be truly black online.

> text content analysis The solution to that is to use memes and bad grammar. I am not kidding. Keep your messages really brief and have a community of people that talk in a very similar fashion to one-another.

I think reading TheShadowBrokers posts[0] is really interesting. Because they use really bad english. But it's consistent within one piece of text, but not always over multiple texts.

The only reason i can imagine they're writig this way is to foil stylometry.

[0] https://steemit.com/shadowbrokers/@theshadowbrokers/response...

Re: VPN leaks users’ IPs via WebRTC

#45

Post by mandelbulb »

zorkw4rg wrote: post #21

Clickbait? Its not "VPN providers" its "VPN provider software", I never even thought of using their software, most just give you the credentials for OpenVPN/IPSEC/PPTP or similar. Also if anonymity is of "real" concern you should never use a system that knows your real IP address in the first place. Instead create the vpn tunnel on a separate host system and run something like Tails in a VM (or better yet separate ph…

>Clickbait?

Partially. Obviously, self-marketing was the motivation for this test. However, it is still a helpful reference. If your provider doesn't even release a properly configured VPN client, you might want to reflect on whether to rely on the rest of their infrastructure.

>Also if anonymity is of "real" concern

You're digressing. Whatever a user wishes to anonymize their information for can be a valid concern but that does not necessarily require absolute anonymity.

Re: VPN leaks users’ IPs via WebRTC

#46

Post by zaroth »

tobltobs wrote: post #31
cosmiccartel wrote: post #2

Just want to point anyone looking to test their own VPN to https://ipleak.net/ . That's been my go-to, and it seems more comprehensive than the linked service.

Or try https://www.doileak.com . (Shameless plug of of a project of mine)

Nice project - but that name.... Sounds like a bad medical condition!

Re: VPN leaks users’ IPs via WebRTC

#48

Post by confounded »

scottlu2 wrote: post #35
confounded wrote: post #25

Earlier quoted context omitted.

> I didn't realize this is how WebRTC actually works. Yep. STUN is in the spec, and always has been. This has been a thing for years.

STUN is part of the story. The overall process is called Interactive Connectivity Establishment (ICE).

TIL, thank you!

Re: VPN leaks users’ IPs via WebRTC

#49

Post by solarkraft »

kardos wrote: post #43
pen2l wrote: post #36

Earlier quoted context omitted.

I think is how the birth of leetspeak came about, no? And why still a lot of "read me" files for pirated software use poor grammar. Another option is to use translation services, en->fr->ja->de->en. Reread message -- does it say what you mean? If yes, go for it! If not, modify as needed.

Surely you mean an offline translation program, and not an online translation service like google's translator...

Oh, Google translate can mess up. There are also intentionally bad translators like https://lingojam.com/BadTranslator
Post reply on HN