Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

mysk.blog

Post reply on HN
Print view View original

21–30 of 45 posts

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#22

Post by inigyou »

sam_lowry_ wrote: post #18
goalieca wrote: post #8

Earlier quoted context omitted.

Webauthn is the api for Passkeys and things.

So WebAuthn leaks real IPs, who would have thought!

Yeah. For authentication. It's important that the large tech company knows who you are.

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#23

Post by TeMPOraL »

sam_lowry_ wrote: post #18
goalieca wrote: post #8

Earlier quoted context omitted.

Webauthn is the api for Passkeys and things.

So WebAuthn leaks real IPs, who would have thought!

Yes, who would've thought Passkeys are a bad idea.

Now for yet another reason.

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#24

Post by Semaphor »

sam_lowry_ wrote: post #18
goalieca wrote: post #8

Earlier quoted context omitted.

Webauthn is the api for Passkeys and things.

So WebAuthn leaks real IPs, who would have thought!

Depends on the browser apparently? Only on Webkit is what it says, it’s not clear if the site doesn’t support FF, or if FF is secure.

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#25

Post by Semaphor »

TeMPOraL wrote: post #23
sam_lowry_ wrote: post #18

Earlier quoted context omitted.

So WebAuthn leaks real IPs, who would have thought!

Yes, who would've thought Passkeys are a bad idea. Now for yet another reason.

It’s more than just Passkeys, Webauthn is super convenient with my YubiKeys, I even have it set up as 2FA on some selfhosted services.

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#26

Post by lapcat »

Semaphor wrote: post #24
sam_lowry_ wrote: post #18

Earlier quoted context omitted.

So WebAuthn leaks real IPs, who would have thought!

Depends on the browser apparently? Only on Webkit is what it says, it’s not clear if the site doesn’t support FF, or if FF is secure.

WebKit passes the request to a separate system process.

On Mac, Firefox and Chrome, which don't use WebKit, handle WebAuthn themselves.

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#29

Post by irusensei »

Apple private relay is very flawed but on the other hand most sites that view connections originating from VPN as suspicious seem to be ok with Apple Private Relay. If you have VPN on your router private relay on top of it could be a good way to do ip address laundering.

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#30

Post by pasc1878 »

klausa wrote: post #16
TechRemarker wrote: post #3

Earlier quoted context omitted.

You can turn if off in settings > iCloud. Either temporary for a day and auto back on, or permanently until you turn it back on.

I desperately wish there was a "Turn off for five minutes, I'm dealing with dumb corpsec auth stuff" option.

In macOS view->reload and show IP address
Post reply on HN