WebRTC #124

jankkm commented 2015年02月02日 23:58:49 +01:00 (Migrated from github.com)

Today I read about how WebRTC which allows some kind of real time communication can be used for fingerprinting and also to find out your actual IP if you are on a VPN network. There is a blocker for that on the chrome webstore but I think this might be worth adding to umatrix. What do you think?

Today I read about how WebRTC which allows some kind of real time communication can be used for fingerprinting and also to find out your actual IP if you are on a VPN network. There is a blocker for that on the chrome webstore but I think this might be worth adding to umatrix. What do you think?

ghost commented 2015年02月03日 13:44:08 +01:00 (Migrated from github.com)

I'm putting this here as a reminder: https://www.browserleaks.com/webrtc
Hope that's okay with you guys :)

I'm putting this here as a reminder: https://www.browserleaks.com/webrtc Hope that's okay with you guys :)

ghost commented 2015年02月04日 20:09:00 +01:00 (Migrated from github.com)

Demo (not VPN specific): https://github.com/diafygi/webrtc-ips
Chrome bugtracker: https://code.google.com/p/chromium/issues/detail?id=333752

Demo (not VPN specific): https://github.com/diafygi/webrtc-ips Chrome bugtracker: https://code.google.com/p/chromium/issues/detail?id=333752

TheRyuu commented 2015年02月12日 16:56:47 +01:00 (Migrated from github.com)

PoC[1] for blocking WebRTC in cases where WebRTC Block does not cut it (the iframe workaround). This just modifies the UA spoofer code and I've no idea if it works in all cases. Please note that this must be used in combination with the WebRTC Block[2] extension otherwise the "naive" case will actually still work. Here[3] is the WebRTC Block javascript for reference. I'm not sure if adding "match_about_blank": true to the WebRTC Block manifest.json will work in all cases.

Also I've no idea if this is even a proper way of doing things as javascript is really out of my comfort zone so I apologize if it's just plain wrong.

[1] https://privatepaste.com/792de4de1f
[2] https://chrome.google.com/webstore/detail/webrtc-block/nphkkbaidamjmhfanlpblblcadhfbkdm?hl=en
[3] https://privatepaste.com/cb3bf093e7

PoC[1] for blocking WebRTC in cases where WebRTC Block does not cut it (the iframe workaround). This just modifies the UA spoofer code and I've no idea if it works in all cases. Please note that this must be used in combination with the WebRTC Block[2] extension otherwise the "naive" case will actually still work. Here[3] is the WebRTC Block javascript for reference. I'm not sure if adding "match_about_blank": true to the WebRTC Block manifest.json will work in all cases. Also I've no idea if this is even a proper way of doing things as javascript is really out of my comfort zone so I apologize if it's just plain wrong. [1] https://privatepaste.com/792de4de1f [2] https://chrome.google.com/webstore/detail/webrtc-block/nphkkbaidamjmhfanlpblblcadhfbkdm?hl=en [3] https://privatepaste.com/cb3bf093e7

mailinglists35 commented 2015年04月08日 02:02:33 +02:00 (Migrated from github.com)

dev channel has introduced extensions ability to block webrtc requests. would love to see it integrated into uMatrix!
api example code: https://code.google.com/p/chromium/issues/detail?id=457629#c7
I'm using dev anyway so I'd be able to test right away!

later edit! oups, i did not read it all: the changes implemented in 457629 let the changes applied by an extension take effect only on restart. an issue tracking the ability to do this without restart has been filed separate here: https://code.google.com/p/chromium/issues/detail?id=466197

dev channel has introduced extensions ability to block webrtc requests. would love to see it integrated into uMatrix! api example code: https://code.google.com/p/chromium/issues/detail?id=457629#c7 I'm using dev anyway so I'd be able to test right away! later edit! oups, i did not read it all: the changes implemented in 457629 let the changes applied by an extension take effect only on restart. an issue tracking the ability to do this without restart has been filed separate here: https://code.google.com/p/chromium/issues/detail?id=466197

ghost commented 2015年05月12日 21:32:29 +02:00 (Migrated from github.com)

@mailinglists35

https://github.com/CODYQX4/WebRTC-Multiple-Routes

That is a working extension, and some didn't take note there, that it can require a browser restart for that to take effect. My extension lets you toggle and restarts automatically.

Just a temporary use until they get this feature properly integrated into settings.

@mailinglists35 https://github.com/CODYQX4/WebRTC-Multiple-Routes That is a working extension, and some didn't take note there, that it can require a browser restart for that to take effect. My extension lets you toggle and restarts automatically. Just a temporary use until they get this feature properly integrated into settings.

marksolaris commented 2015年07月01日 03:07:48 +02:00 (Migrated from github.com)

+1
https://torrentfreak.com/huge-security-flaw-leaks-vpn-users-real-ip-addresses-150130/

+1 https://torrentfreak.com/huge-security-flaw-leaks-vpn-users-real-ip-addresses-150130/

gorhill commented 2015年09月26日 16:09:43 +02:00 (Migrated from github.com)

I can't reproduce. Are you using an extension-based VPN provider?

I can't reproduce. Are you using an extension-based VPN provider?

Tasqa commented 2015年12月13日 20:41:17 +01:00 (Migrated from github.com)

I've noticed this feature of blocking WebRTC ip leakage is already present in uBlock0. Is progress on uMatrix on hold?

I've noticed this feature of blocking WebRTC ip leakage is already present in uBlock0. Is progress on uMatrix on hold?

arek commented 2024年05月13日 19:59:20 +02:00

changing browser preferences is the way to go, no need for an extension

changing browser preferences is the way to go, no need for an extension

arek commented 2026年06月19日 09:55:43 +02:00

Maybe worth adding per domain settings?

Maybe worth adding per domain settings?

arek commented 2026年06月20日 11:08:24 +02:00

Made is possible to block WebRTC either in global scope or per domain.

Made is possible to block WebRTC either in global scope or per domain.