VPN leaks users’ IPs via WebRTC

#1

Post by BlueGh0st » Wed, Mar 28, 2018, 4:40 PM UTC

VPN leaks users’ IPs via WebRTC
voidsec.com

Re: VPN leaks users’ IPs via WebRTC

#2

Post by cosmiccartel » Wed, Mar 28, 2018, 5:02 PM UTC

Just want to point anyone looking to test their own VPN to https://ipleak.net/. That's been my go-to, and it seems more comprehensive than the linked service.

Re: VPN leaks users’ IPs via WebRTC

#3

Post by ensignro2340 » Wed, Mar 28, 2018, 5:05 PM UTC

Anyone interested in setting up their own VPN should check out Algo: https://github.com/trailofbits/algo

Re: VPN leaks users’ IPs via WebRTC

#4

Post by [deleted] » Wed, Mar 28, 2018, 5:05 PM UTC

[deleted]

Re: VPN leaks users’ IPs via WebRTC

#5

Post by hyperpower » Wed, Mar 28, 2018, 5:07 PM UTC

ensignro2340 wrote: post #3

Anyone interested in setting up their own VPN should check out Algo: https://github.com/trailofbits/algo

What's the advantage of this over OpenVPN?

Re: VPN leaks users’ IPs via WebRTC

#6

Post by superkuh » Wed, Mar 28, 2018, 5:10 PM UTC

ensignro2340 wrote: post #3

Anyone interested in setting up their own VPN should check out Algo: https://github.com/trailofbits/algo

Or reconsider the need for a VPN at all. By using a VPN you cut yourself off from participating as an equal citizen on the net. If it's just for browsing the web, irc, or the like it's much easier and better just to use a socks 5 proxy to a cheap VPS. I like shadowsocks-libev.

But then again I don't use popular browsers that cram in fancy new features every week to expose new leaks and attack surfaces.

Re: VPN leaks users’ IPs via WebRTC

#7

Post by MaupitiBlue » Wed, Mar 28, 2018, 5:13 PM UTC

Given that its hard to figure out how they could be profitable, should we assume private internet access is a NSA honeypot?

Re: VPN leaks users’ IPs via WebRTC

#8

Post by mehrdadn » Wed, Mar 28, 2018, 5:17 PM UTC

ensignro2340 wrote: post #3

Anyone interested in setting up their own VPN should check out Algo: https://github.com/trailofbits/algo

What's so "legacy" about L2TP that it refuses to support it? Unlike others it's actually both secure and supported natively on most platforms...

Re: VPN leaks users’ IPs via WebRTC

#9

Post by Hnrobert42 » Wed, Mar 28, 2018, 5:21 PM UTC

superkuh wrote: post #6

ensignro2340 wrote: post #3

Anyone interested in setting up their own VPN should check out Algo: https://github.com/trailofbits/algo

Or reconsider the need for a VPN at all. By using a VPN you cut yourself off from participating as an equal citizen on the net. If it's just for browsing the web, irc, or the like it's much easier and better just to use a socks 5 proxy to a cheap VPS. I like shadowsocks-libev. But then again I don't use popular browsers that cram in fancy new features every week to expose new leaks and attack surfaces.

> By using a VPN you cut yourself off from participating as an equal citizen on the net.

What?

Re: VPN leaks users’ IPs via WebRTC

#10

Post by lima » Wed, Mar 28, 2018, 5:21 PM UTC

MaupitiBlue wrote: post #7

Given that its hard to figure out how they could be profitable, should we assume private internet access is a NSA honeypot?

Bandwidth is cheap, massive overcommitment. Why wouldn't it be profitable?