Page 1 of 3
WebRTC and Canvas
Posted: Sat Mar 21, 2015 2:51 pm
by reactorr
Slimjet is still leaking my real IP # on the WebRTC site! Will this be fixed, or should i just uninstall Slimjet?
https://diafygi.github.io/webrtc-ips/
https://torrentfreak.com/huge-security- ... es-150130/
and Canvas Fingerprinting
http://www.browserleaks.com/canvas
Re: WebRTC and Canvas
Posted: Sat Mar 21, 2015 7:43 pm
by dev
Well unless your sitting behind a proxy or a vpn service and your ip is getting leaked its not a problem really. A ip address doesn't identify you as an individual and there is nothing really malicious that can be done with a ip addy if your careful on the web.
At the moment there is no fool proof method of blocking browser fingerprinting so it doesn't really matter what browser you use even the tor browser has been known to have leaked ip's through fingerprinting.
Check the topic link below and give the extension a whirl and see if it helps block what you need to block through webrtc but remember there are a lot of other ways that fingerprinting can be obtained like in fingerprinting Canvas in HTML5.
viewtopic.php?f=9&t=104
Another site to test leaks run by the EFF Electronic Frontier Foundation
https://panopticlick.eff.org/
Re: WebRTC and Canvas
Posted: Sun Mar 22, 2015 12:29 am
by reactorr
Hello, checked on ipleak.net and still shows my ip. THIS DOES NOT WORK.
https://chrome.google.com/webstore/deta ... lcadhfbkdm
test:
http://ipleak.net/
please block WebRtc in SlimJet
Re: WebRTC and Canvas
Posted: Tue Mar 24, 2015 3:51 pm
by skyview1
https://torrentfreak.com/huge-security- ... es-150130/ This is a good article. I'm using now ScriptSafe. When I'm on Firefox: 'no script'. I also use a vpn addon for both. When I run 'ipleak test it only shows my vpn ip, not my real one. !
Re: WebRTC and Canvas
Posted: Tue Mar 24, 2015 9:26 pm
by dev
You can turn webrtc off In Firefox it can be done by typing “about:config” in the address bar and then set “media.peerconnection.enabled” to false. There was a way to do it in chrome through flags but Google removed the setting.
When you say your using a vpn addon you don't mean something like zenmate or Hola Better Internet etc ? Also if just run the addons without noscript or scriptsafe installed or java switched off does your ip addy show or still the vpn (?) addy show?
Can't see this happening as webrtc is the now a integral part of chrome and will be in most browsers, its use in communications like firefox's in built chat will be the future standard as html 5 has become with the death of flash coming soon.
Re: WebRTC and Canvas
Posted: Wed Mar 25, 2015 11:42 am
by skyview1
Yes, I use zenmate on firefox. It changes your ip, but without using no script or... your real ip leaks.
Re: WebRTC and Canvas
Posted: Wed Mar 25, 2015 6:51 pm
by flashpeak
I turned on vpn (VyprVPN provided by goldenfrog) and tried the site
https://diafygi.github.io/webrtc-ips/ . It only shows my vpn public ip. It doesn't show my real WAN ip.
But it does show my LAN ip like 192.168.0.*. But I guess that's not really useful for hackers, isn't it?
Re: WebRTC and Canvas
Posted: Wed Mar 25, 2015 8:10 pm
by dev
flashpeak wrote:I turned on vpn (VyprVPN provided by goldenfrog) and tried the site
https://diafygi.github.io/webrtc-ips/ . It only shows my vpn public ip. It doesn't show my real WAN ip.
But it does show my LAN ip like 192.168.0.*. But I guess that's not really useful for hackers, isn't it?
Nope and tbh if a determined hacker wants to hack there's next to nothing anyone can do about it and the same goes if a government or isp etc wants to spy on you. If people are that worried about ip addy leaks they should really buy a good vpn or use tor on the onion network and not any chromium based or firefox etc to surf the web.
Re: WebRTC and Canvas
Posted: Thu Mar 26, 2015 6:19 am
by reactorr
Dont use vpn. Try Proxy or ZenMate. your real ip leaks.
Re: WebRTC and Canvas
Posted: Thu Mar 26, 2015 7:43 pm
by dev
skyview1 wrote:Yes, I use zenmate on firefox. It changes your ip, but without using no script or... your real ip leaks.
So just turn webrtc off In Firefox it can be done by typing “about:config” in the address bar and then set “media.peerconnection.enabled” to false which then saves you from using noscript if your only using it to block the ip leak, one less extension then eating ram up.
I've just looked on the zenmate web site on which they say that they know that the ip can leak and are working on a solution which to me reads that this product doesn't do what they say it does which is hide your identity and i would imagine most plugins which are similar in nature have the same problem at the moment which would lead me into buying a good vpn service or switching to tor if i had a reason to be hidden on the web.