VPN users on Chrome and Firefox no longer anonymous due WebRTC

[frogboy]

Firefox and Google Chrome have implemented a technology that makes it possible to obtain IP addresses of VPN users. Security researcher Daniel Roesler has posted information on open source hosting site Github, where he explains the issue. The issue is caused by WebRTC, a Google developed open source project that provides browsers with Real-Time Communication (RTC).



Both Firefox and Chrome have WebRTC support whereby the technology sends so called “STUN requests” to STUN (Simple Traversal of User Datagram Protocol Through Network Address Translators) servers. Through these requests local and public IP addresses of the user can be obtained using Javascript.

This is mainly an issue for VPN users who often use a VPN to hide their identity. Roesler has created a page where he demonstrates his method to obtain the IP addresses. A solution for those who want to remain anonymous is disabling WebRTC in Firefox and Chrome.

In Firefox this can be done by typing “about:config” in the address bar and then set “media.peerconnection.enabled” to false. Users of Google Chrome can enter “chrome://flags/” in their address bar and then enable “Disable WebRTC device enumeration”. Other solutions are disabling Javascript, the usage of Firefox Noscript or the Google Extension WebRTC Block.

Source. http://www.myce.com/news/vpn-users-...l&utm_source=facebook.com&utm_campaign=buffer

 

[frogboy]

I forgot to mention WebRTC is not available in SlimJet browser not sure about CyberFox as i have not yet checked.

In CyberFox, FireFox etc type in about:config and set media.peerconnection.enabled to false.

 

[woodrowbone]

I am running WebRTC Block in Slimjet, works great.

/W

 

[Janl92l]

I use a VPN,but with cascadirung true 4 other servers. I am safe or google still can see my ip? i use chrome and want to be anonym..

 

[woodrowbone]

I use a VPN,but with cascadirung true 4 other servers. I am safe or google still can see my ip? i use chrome and want to be anonym..

Try these sites:
https://diafygi.github.io/webrtc-ips/
http://ipleak.net/

/W

 

[Koroke San]

Stupid chrome addon, leaks my local IP address, it's crap.

 

[Warrior]

ScriptSafe blocks
WebRTC problem over .