Would enabling this uBlock option not be perfectly sufficient at preventing this attack?
https://github.com/gorhill/uBlock/wiki/Prevent-WebRTC-from-l...
VPN leaks users’ IPs via WebRTC
11–20 of 172 posts
Re: VPN leaks users’ IPs via WebRTC
#12Given that its hard to figure out how they could be profitable, should we assume private internet access is a NSA honeypot?
I don't understand this. Is profitability the only metric for if a service can be trusted or not?
It's also not even mentioned in the article linked, not sure why you brought it up at all tbh.
Re: VPN leaks users’ IPs via WebRTC
#13Given that its hard to figure out how they could be profitable, should we assume private internet access is a NSA honeypot?
It's likely quite profitable, they don't buy bandwidth from Amazon, they get a few colo'd machines or dedicated servers in many DCs - you can get dedicated gigabit lines in several DCs for a few hundred a month. Most subscribers only use the service occasionally and won't place that much load on it.
Re: VPN leaks users’ IPs via WebRTC
#14Anyone interested in setting up their own VPN should check out Algo: https://github.com/trailofbits/algo
Or reconsider the need for a VPN at all. By using a VPN you cut yourself off from participating as an equal citizen on the net. If it's just for browsing the web, irc, or the like it's much easier and better just to use a socks 5 proxy to a cheap VPS. I like shadowsocks-libev. But then again I don't use popular browsers that cram in fancy new features every week to expose new leaks and attack surfaces.
The WebRTC implementation in Firefox isn't as configurable as it could be, it just assumes that you are behind a firewall that doesn't understand SCTP so encapsulates everything in UDP and searches for the best way to escape to the internet.
Re: VPN leaks users’ IPs via WebRTC
#15Quite funny, I've published this yesterday and went unnoticed until now, lol
Re: VPN leaks users’ IPs via WebRTC
#16Anyone interested in setting up their own VPN should check out Algo: https://github.com/trailofbits/algo
What's the advantage of this over OpenVPN?
It's natively supported by more operating systems. Namely, macOS and iOS. Also generates mobileprofile files that you can AirDrop to your device and have it set up in an instant.
Re: VPN leaks users’ IPs via WebRTC
#17Quite funny, I've published this yesterday and went unnoticed until now, lol
I was surprised it didn't tell me it was posted here before. I found the post and your comments on it over at /netsec.
Really appreciate your work on this!
Re: VPN leaks users’ IPs via WebRTC
#18Another thing to watch out for is leaking IPv6 connections. Depending on your configuration your VPN may not set the IPv6 default gateway.
Re: VPN leaks users’ IPs via WebRTC
#19Given that its hard to figure out how they could be profitable, should we assume private internet access is a NSA honeypot?
I don't understand this. Is profitability the only metric for if a service can be trusted or not? It's also not even mentioned in the article linked, not sure why you brought it up at all tbh.
Profitability (or the possibility of profitability) is absolutely a measure of whether something can be relied on. And if it can't possibly be profitable, then it means there is likely a non-obvious revenue stream or funding source, which means a ulterior motive.
So yeah, if a service can't be profitable, it can't be trusted.
Re: VPN leaks users’ IPs via WebRTC
#20Given that its hard to figure out how they could be profitable, should we assume private internet access is a NSA honeypot?
I don't understand this. Is profitability the only metric for if a service can be trusted or not? It's also not even mentioned in the article linked, not sure why you brought it up at all tbh.
Makes total sense -- if they aren't making money on the service they sell they will naturally have to do something else to keep the lights / servers on.