Live data from Hacker News

VPN leaks users’ IPs via WebRTC

voidsec.com

51–60 of 172 posts

Re: VPN leaks users’ IPs via WebRTC

#52
post #46

Earlier quoted context omitted.

Or try https://www.doileak.com . (Shameless plug of of a project of mine)

Nice project - but that name.... Sounds like a bad medical condition!

To me it sounds like a LibGen/Sci-Hub type website, playing off the idea of leaking papers with DOI numbers: https://www.doi.org/

Re: VPN leaks users’ IPs via WebRTC

#53
post #19

Earlier quoted context omitted.

I don't understand this. Is profitability the only metric for if a service can be trusted or not? It's also not even mentioned in the article linked, not sure why you brought it up at all tbh.

Profitability (or the possibility of profitability) is absolutely a measure of whether something can be relied on. And if it can't possibly be profitable, then it means there is likely a non-obvious revenue stream or funding source, which means a ulterior motive. So yeah, if a service can't be profitable, it can't be trusted.

A decent emergency medical response service is never profitable.

It requires a vast amount of hospitals to ensure that there is one local enough to wherever you get ill or injured and they all have to be staffed by lots of different highly qualified specialists who are in as regular practice as possible.

If you were going to require that they be profitable, there simply are not enough rich people for the doctors to work on in order to stay in good practice, or to pay for enough suitably equipped hospitals to ensure a short travel time in an emergency.

Re: VPN leaks users’ IPs via WebRTC

#54

Clickbait? Its not "VPN providers" its "VPN provider software", I never even thought of using their software, most just give you the credentials for OpenVPN/IPSEC/PPTP or similar. Also if anonymity is of "real" concern you should never use a system that knows your real IP address in the first place. Instead create the vpn tunnel on a separate host system and run something like Tails in a VM (or better yet separate ph…

I can appreciate the use of Tails in a VM, but doesn't the provider of the "separate host system" have your identity through your payment information?

[deleted]

Re: VPN leaks users’ IPs via WebRTC

#55
post #43

Earlier quoted context omitted.

Surely you mean an offline translation program, and not an online translation service like google's translator...

Oh, Google translate can mess up. There are also intentionally bad translators like https://lingojam.com/BadTranslator

I think the point is that the translation service logs will sell you out.

Re: VPN leaks users’ IPs via WebRTC

#56
I don't have a need for this high level of security, but if I did, here's what I'd do:

1. Run VPN software on host.

2. Download a widely used, generic VM image.

3. Route VM's entire network connection through host's VPN.

4. Do whatever you need to do, in the VM only.

5. Reset VM to initial settings after each use.

Am I missing anything?

Re: VPN leaks users’ IPs via WebRTC

#57

I don't use VPNs. For me, the more alarming information here is that SOCKS and Tor proxies are also leaking IP addresses. If a SOCKS proxy is configured in browser, isn't it the browser's responsibility to ensure all outgoing traffic - including WebRTC - goes via the proxy? Are these browser bugs? Update: Can confirm Firefox Quantum with SOCKS proxy leaks the address. Oh dear! Update 2: I didn't realize this is how W…

https://www.privacytools.io/#webrtc

Re: VPN leaks users’ IPs via WebRTC

#59
post #6

Earlier quoted context omitted.

Or reconsider the need for a VPN at all. By using a VPN you cut yourself off from participating as an equal citizen on the net. If it's just for browsing the web, irc, or the like it's much easier and better just to use a socks 5 proxy to a cheap VPS. I like shadowsocks-libev. But then again I don't use popular browsers that cram in fancy new features every week to expose new leaks and attack surfaces.

> By using a VPN you cut yourself off from participating as an equal citizen on the net. What?

You can't host servers off a VPN. You don't have control or use of your own ports. You can consume and that's about it.

Re: VPN leaks users’ IPs via WebRTC

#60

Earlier quoted context omitted.

What's the advantage of this over OpenVPN?

It's natively supported by more operating systems. Namely, macOS and iOS. Also generates mobileprofile files that you can AirDrop to your device and have it set up in an instant.

On the flipside, it introduces monstrous dependency (strongSwan) written in memory unsafe C, is nowhere near as flexible as OpenVPN and is blocked by many networks since it can't operate over arbitrary ports and forces you to manage/own the server-end.

1) If I wanted to do that, I'd use OpenVPN rather than strongSwan. They're both written in C, but I get extra flexibility by using OpenVPN. Their "TLS is suspect" stance doesn't hold water in my view.

2) When I don't want to set up my own server, OpenVPN allows me to use or even chain lots of third party servers and create my own nested VPN topologies. Installing an OpenVPN client on my phone or tablet takes a few minutes.

So, to summarize, Algo would be interesting if it didn't introduce dependency on memory unsafe code or minimized such dependency. But it doesn't. On the client, I do not see why I should trust Apple's IPSEC implementation (racoon?) more than OpenVPN client which is another point they tried to make. As it currently stands, it does not compare favorably to OpenVPN in any way.

Post reply on HN