[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-talk] WebRTC to uncover local IP
>Understanding very little about WebRTC and STUN servers, what does
>mean for people?
1) The network configuration of linux is more secure than the network
configuration of windows. Even when using a VPN. Unless the VPN drops
is used you'll encounter web bugs. Some of which might make your VPN
service useless from the perspective of hiding your ISP address.
3) For some reason Chrome is only able to succeed in using UDP for
STUN. Meaning, if I understand correctly, that if you point a Chrome
install to Tor via socks the STUN fails and doesn't leak. If that's
the adversary who poisons your DNS cache. Such an adversary can pose
as a whitelisted domain and force your ISP address to leak.
So, the take home message:
1) Windows isn't a privacy oriented OS, and should be avoided if
possible. If you're not using windows you're already set.
2) Irregardless of the OS you should be using extensions/addons to
Alternatively disable the web bug using WebRTC Block (Chrome), or
media.peerconnection.enable (FF). If you're using Tor Browser you're
3) Consider using secure DNS methods (dnscrypt for example) for your
non-torified browsers where you've opted to leave webrtc enabled and
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to