1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Hide IP from flash?

Discussion in 'Proxies' started by momschips, Sep 27, 2010.

  1. momschips

    momschips Registered Member

    Joined:
    Sep 9, 2010
    Messages:
    58
    Likes Received:
    8
    Location:
    florida
    Hello
    as far as i know i cant hide my original IP in a flash app, i would like to know a solution to hide my orihinal IP in flash with this constrains:


    • I want to run this flash app or flash content in 2 different browsers
    • 1 with my original IP
    • 2nd one with another Hided IP
    a solution i had is a virtual dedicated server but its too costly, that way i can open this flash with 2 different IPs without being noticed
    any other solution? is there desktop remote VPNs?
    another solution?
     
    • Thanks Thanks x 1
  2. minute80

    minute80 Regular Member

    Joined:
    Dec 3, 2008
    Messages:
    310
    Likes Received:
    81
    You can run two different browsers, for example IE and Firefox and set a proxy in Firefox. In that case you will achive what you intend to.
     
  3. momschips

    momschips Registered Member

    Joined:
    Sep 9, 2010
    Messages:
    58
    Likes Received:
    8
    Location:
    florida
    flash detects your original IP, doesnt hide it with a proxy,

    ill buy virtual dedicated servers, any cheapper solution for that?
     
    • Thanks Thanks x 1
  4. portalweb

    portalweb Supreme Member Premium Member

    Joined:
    Jan 7, 2010
    Messages:
    1,415
    Likes Received:
    547
    Occupation:
    Hard Core Engineer
    Location:
    New York
    They can detect your real IP address via ActionScript (Flash).
    Please see the articles discussed here on BHW: here and here.
     
    • Thanks Thanks x 1
  5. djchariot

    djchariot Newbie

    Joined:
    Sep 29, 2010
    Messages:
    3
    Likes Received:
    1
    Yep!

    Real IP can be detected through ActionScript!
     
  6. minute80

    minute80 Regular Member

    Joined:
    Dec 3, 2008
    Messages:
    310
    Likes Received:
    81
    I don't know where you guys get you information. Do you actually check stuff? What kind of fact checking is that?

    Code:
    http://www.actionscript.org/forums/showthread.php3?t=161662
    
    Flash cannot detect client's ip real address. If that was so, then all my work would fail momentairly. But Flash can deposit Flash cookies, which can contain information about ip address included from server side script, and you can get discovered if your proxy sends typical proxy headers in request.

    One more thing: Recently I had to code my own proxy checker for one project. I dunno and don't care how other proxy checker work, but my was checking proxies by using them to check

    Code:
    http://checkip.dyndns.org
    
    site (it tells you what is your ip). What I discovered is that large number of proxies shared here and on other forums actually do nothing to proxify your requests, they just let them through, and that site can see your real ip address. Dunno if it will help you, but have that in mind too.

    p.s. If someone knows how can Flash detect your real IP address, then share your code, don't just talk!
     
    • Thanks Thanks x 1
  7. portalweb

    portalweb Supreme Member Premium Member

    Joined:
    Jan 7, 2010
    Messages:
    1,415
    Likes Received:
    547
    Occupation:
    Hard Core Engineer
    Location:
    New York
    Please visit this site:

    http://analyzemy.net

    Click on "Flash" tab - it will see your real PC IP address, even with proxy IP address.
     
    Last edited: Sep 30, 2010
  8. minute80

    minute80 Regular Member

    Joined:
    Dec 3, 2008
    Messages:
    310
    Likes Received:
    81
    I actually thought that it will work. I doubt my self for a moment, and of course, I am right again (check attach).

    When you will people understand that some of you are using shit tools to check your proxies and therefore end up with shit results.

     

    Attached Files:

    • Thanks Thanks x 1
  9. portalweb

    portalweb Supreme Member Premium Member

    Joined:
    Jan 7, 2010
    Messages:
    1,415
    Likes Received:
    547
    Occupation:
    Hard Core Engineer
    Location:
    New York
    Do you have any proxy client running in your system?
    Notes:
    - This proxy checker tool is considered as an experimental stuff. It is not perfect - because certain computers can display the real IP address by reading from network properties directly. It has been mentioned in my earlier posts here.
    - I tested your proxy IP : port using http://checkip.dyndns.org/ - which it blocks the proxy connections from my PC. I looked at the output result (using my real IP), which indicates that this service uses server-side php scripts. This is what I'm looking for - to help on improving the proxy tester scripts for AnalyzeMy.net site.
    UPDATED:
    - I learned recently that the latest Flash actionscript (CS4+) no longer support direct outgoing connections to determine the real computer IP address. Other than the minor "flash" issue, everything else in AnalyzeMy.Net is working pretty good due to the depth details of user's computer/browser type. We will re-visit the flash issue when we have a chance.
     
    Last edited: Oct 3, 2010
  10. minute80

    minute80 Regular Member

    Joined:
    Dec 3, 2008
    Messages:
    310
    Likes Received:
    81
    I don't understand the question about proxy client. I found a proxy on one of the sites that provide lists, I put it into my proxy checker to weed out the list from bad proxies and used the result to access your site.

    checkip.dyndns.org is a subdomain of a well known provider of dynamic dns. The actual url is used by numerous script to get clients real ip adress in order to update that information for dyndns' service.

    There is no Flash ActionScript CS4, there is only ActionScript 1,2,3 and numerous Flash clients. You said in the post above that your flash app can detect proxy IP. I just showed you that it can't, and if did it was only because proxy you were using didn't actually do any proxy functions.
    Maybe there were some exploits that enabled you to get real ip, but exploits are patched.

    THe other information you retrieved from the Flash app is not something I or anyone cares on hiding, and therefore is not a discovery.

    Bottom line: If you are using functioning, working proxy, Flash cannot detect your real ip. Period. No more panic. If it could, than my account on websites that use Flash cookies would not last as long as they are.

     
    • Thanks Thanks x 1
  11. Clay.

    Clay. BANNED BANNED

    Joined:
    Aug 12, 2010
    Messages:
    55
    Likes Received:
    10
    adobe flash player web site manager

    http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html
     
  12. ycfme

    ycfme Power Member

    Joined:
    Mar 24, 2010
    Messages:
    779
    Likes Received:
    65
    Try this, seems to be working for me. I'm running 12 proxies

    HTML:
    hxxps://addons.mozilla.org/en-US/firefox/addon/6623/

     
  13. fatboy

    fatboy Elite Member

    Joined:
    Aug 13, 2008
    Messages:
    1,618
    Likes Received:
    3,227
    Occupation:
    Retired
    Location:
    Old Peoples Home
    Does it depend on what kind of proxy / VPN / etc you are using.
    I have heard about Flash detecting your IP but haven't tested it yet - the guys in this thread saying Flash does / does not detect your real IP, what kind of proxy are you using?

    Maybe that will narrow things down :)
     
  14. portalweb

    portalweb Supreme Member Premium Member

    Joined:
    Jan 7, 2010
    Messages:
    1,415
    Likes Received:
    547
    Occupation:
    Hard Core Engineer
    Location:
    New York
    I am surprised by the new Flash updates that fixed the real address lookup exploit. We will look into it.

    As for the tool for managing the proxies via Firefox, we will be releasing the proxy tool plugin for FF in 1-2 days. It is mentioned in my sales thread.

    Thanks for bringing up this matter. :)
     
  15. minute80

    minute80 Regular Member

    Joined:
    Dec 3, 2008
    Messages:
    310
    Likes Received:
    81
    No problemo mate. Just trying to bring some Fear, Uncertainty, Doubt down by stating some facts. Good luck with updates!

     
  16. minute80

    minute80 Regular Member

    Joined:
    Dec 3, 2008
    Messages:
    310
    Likes Received:
    81
    What kind of VPN you use is not important, since by default VPN by its definition should route all your network traffic through VPN ip. In other words, it functions like forces sockes proxy (+ encryption of course).
    I expect that you pay for your VPN, since I highly doubt that free VPN services are created with good intentions: I really doubt (I am not stating this, just doubting) that they collect your passwords and stuff.

    Regarding proxy I used in one of the examples above, I use normal anonymous proxy (not socks), but the trick was that I used my own tool for checking the functionallity of that proxy and because of that it worked.

     
  17. force66

    force66 Newbie

    Joined:
    Mar 29, 2009
    Messages:
    24
    Likes Received:
    2
    actually minute80, i think the flash ip test you linked to just didn't work. i've tested with another one and it was able to read my real ip.

    well i cant post the link heh. it says i havent been a member long enough. IVE BEEN ONE FOR 2 YEARS lol. when can I post a link?

    HERE IS ANOTHER link, it's shorter so i can post it decloak dot net
     
  18. minute80

    minute80 Regular Member

    Joined:
    Dec 3, 2008
    Messages:
    310
    Likes Received:
    81
    Hm, I don't actually understand your point, but:

    1) If you say that site doesn't work - it is not my site.
    2) If you say that proxy doesn't work - do you really expect that proxy shared on a public forum would last for days?

    Anyways, you can always share a link by writing

    link dot com

     
  19. force66

    force66 Newbie

    Joined:
    Mar 29, 2009
    Messages:
    24
    Likes Received:
    2
    actually minute80, i think the flash ip test you linked to just didn't work. i've tested with another one and it was able to read my real ip.

    well i cant post the link heh. it says i havent been a member long enough. IVE BEEN ONE FOR 2 YEARS lol. when can I post a link?

    flash-db dot com/remoting/?serviceID=12&category=Location/Geography
     
    Last edited: Oct 6, 2010
  20. minute80

    minute80 Regular Member

    Joined:
    Dec 3, 2008
    Messages:
    310
    Likes Received:
    81
    As I said site was not mine, so I don't care if it works or not.

    I will check this other test later, I don't have time right now. Will post results here.

    Nah, I won't check it later...you see in the meantime, I went to the site and they actually publish code they use for retrieving your IP address, PHP script and Flash applet.

    Now, Flash applet is retrieving address from PHP script, which receives information from header requests. This part of code:

    Code:
            } else if (getenv("HTTP_X_FORWARDED_FOR")) {
            
                $ip = getenv("HTTP_X_FORWARDED_FOR");
                
            } else if(getenv("REMOTE_ADDR")) {
            
                $ip = getenv("REMOTE_ADDR"); 
    
    which actually discovered your ip address, targets headers which are not sent by truly anonymous proxies.

    So, your test doesn't work, as you used useless proxy.