WebRTC May Be Leaking Your IP - Windows chrome/firefox

waitier

waitier

Power Member
Joined
Sep 5, 2013
Messages
738
Reaction score
208
I have a long time suspicion that browser leaks IP even if behind a proxy or a vpn.

This article kind of proves it. https://www.tunnelbear.com/privacy/webrtc/

Reason being, sometimes you know you've never done shit and are very careful to secure your accounts, but shit still happens.

Nowadays anything is possible. And this is just a +1 amount thousands of methods for social sites to bust your ass.

Add:

Just visit https://diafygi.github.io/webrtc-ips/ from chrome/firefox on windows and try it with a vpn like anchorfree, and you will see your IP is leaking. Now test this on IE, and it shows nothing.
 
Last edited:
Advertise on BHW
People need to be aware that the average VPN may not be as secure as they assume it to be. I've tried a couple which routed traffic just fine while using my own IP.
 
Now time to use Internet Explorer. Chrome and Mozilla is stealing our data. Old is gold lol. I'm going to uninstall chrome and Mozilla.
 
I don't think VPN is at fault here, but chrome/mozilla on windows. I installed the extension to block webrtc but it's not working either.

Oh and I tried with private proxy on the browser itself, the result is the same.
 
waitier said:
I don't think VPN is at fault here, but chrome/mozilla on windows. I installed the extension to block webrtc but it's not working either.

Oh and I tried with private proxy on the browser itself, the result is the same.
Click to expand...

So bad. I'm planning to use Internet explorer. Use Internet explorer. New Internet explorer(Spartan browser) is coming with Windows 10(More powerful). :)
 
I went to great lengths downloading win 8 and use proxycap through VM. I thought it might be the answer, but turns out it still shows my actual IP.

I am no expert in this field, but would like to hear from some of you, if social networks issue a STUN request or not.

I am sure webrtc is not limited to chrome/firefox on windows, but it can be used everywhere else to detect real IP.
 
waitier said:
I went to great lengths downloading win 8 and use proxycap through VM. I thought it might be the answer, but turns out it still shows my actual IP.

I am no expert in this field, but would like to hear from some of you, if social networks issue a STUN request or not.

I am sure webrtc is not limited to chrome/firefox on windows, but it can be used everywhere else to detect real IP.
Click to expand...

Try tor browser bundle. I hope it would work.
 
blacktrilby said:
Has anyone tried NoScript for Firefox?

This also has solutions http://threatpost.com/webrtc-found-leaking-local-ip-addresses/110803
Click to expand...

Is this site always that slow or did we just almost crash it? LOL

This is most certainly brilliant. Went round the world to solve that and turns out it's in their about:config .. Only works on ff, as chrome disables "disabling" function which is annoying.

I'm also unsure if windows store apps has this, like for example instapic. Maybe I'm just over paranoid.
 
Does anyone know a way around being undetected with Flash or WebRTC enabled?

Best Regards
 
taleeto said:
Does anyone know a way around being undetected with Flash or WebRTC enabled?

Best Regards
Click to expand...

Flash - uninstall flash
Webrtc - you can turn it off on firefox. Check for a how-to online. Chrome got an extension to fix the leak.

This is old news btw. Webrtc has been leaking ip for years. There are new methods to detect IP even when hiding behind private proxy or VPN
 
ORM said:
Flash - uninstall flash
Webrtc - you can turn it off on firefox. Check for a how-to online. Chrome got an extension to fix the leak.

This is old news btw. Webrtc has been leaking ip for years. There are new methods to detect IP even when hiding behind private proxy or VPN
Click to expand...

Yeah, but I need Flash enabled as well it would raise a flag with webRTC being disabled.
 
ORM said:
Flash - uninstall flash
Webrtc - you can turn it off on firefox. Check for a how-to online. Chrome got an extension to fix the leak.

This is old news btw. Webrtc has been leaking ip for years. There are new methods to detect IP even when hiding behind private proxy or VPN
Click to expand...

This old news, indeed. But what are the new methods of detecting IP even when hiding behind VPN?
Thanks
 
Set media.peerconnection.enabled in about:config on false to disable webRtc without a plugin in firefox.

Not sure about IP leaks but your timezone could be compared with your ip location. Also Screen resolution + useragent can be stored somewhere. This way they can create an unique footprint and track multiple accounts down. Additionaly every plugin you use so if someone is after your accounts he should get them if he really wants to.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Networking Downloads

Marketplace

Content / Copywriting Hosting Images, Logos & Videos Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design Misc

Making Money

Affiliate Programs Hire a Freelancer Making Money Pay Per Click Site Flipping

BlackHatWorld

BHW Merch Forum Suggestions & Feedback Introductions Lounge Dispute Resolution

Other

Domain Name Forum IM Journeys Web Hosting Newsletter
Back
Top