Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is it possible to apply uBlock Origin "prevent WebRTC from leaking your local IP" in this application? #324

Closed
Nokia808 opened this issue May 4, 2020 · 7 comments
Labels
feature-request Issue is a feature request question Not an issue but a question

Comments

@Nokia808
Copy link

Nokia808 commented May 4, 2020

Hi dear.

I'm a Firefox user & already disabled WebRTC to prevent leakage my ISP-provided IP while using VPN. I disabled it from "about:config" page of Firefox. This certainly prevent me from using Jitsi from my Firefox.

Today I discovered that "uBlock Origin" add-on has a setting "prevent WebRTC from leak local IP" that If I checked, then it can prevent WebRTC from leaking my ISP-provided IP while I'm using VPN even if WebRTC enabled !

So, I did the following:

  1. I re-enabled WebRTC from "about:config" page of my Firefox,
  2. I restart Firefox,
  3. I checked "prevent WebRTC from leaking local IP" option under "privacy" within "performance" of uBlock Origin add-on
  4. I exit Firefox,
  5. I run my VPN,
  6. I launched my Firefox & do conference test using https://meet.jit.si & it working okay, then checked whether WebRTC leaking my ISP-provided IP & it was (& it is) NOT !

As a sum of result, now I can use Jitsi Meet from my Firefox browser OVER VPN WITHOUT LEAKING MY ISP-PROVIDED IP, but I can not do this if I use "jitsi-meet-electron" !!

So, my suggestion is to implement this feature in your "jitsi-meet-electron" package .... Is this possible ?

@Nokia808
Copy link
Author

Hi. I would like to bring your attention to the fact that electron version 9+ will give basic support to installation add-ons - see this thread, kindly:
getferdi/sponsors-only#1319

Please do not misunderstand me ! I do not asking to allow users to install add-ons. All what I would like to say is that the new feature "allow to install add-ons" of electron version 9+ will make it easier for developers team of Jitsi-meet-electron to implement this feature.

Best.

@saghul
Copy link
Member

saghul commented May 16, 2020

Patches are welcome, but I don’t see us spending time on this.

Note that the only entity you’d be leaking your IP to is the Jitsi Meet server you are trying to use, not generic websites trying to harvest your data.

@Nokia808
Copy link
Author

Nokia808 commented May 20, 2020

@saghul
Dear please give attention for this VERY CRITICAL issue !
Please notice that the problem is NEVER with trust of honest & peoples like you ! No at all ! Moreover, you are Switzerland team !
The problem is that many of users of Jitsi are residents in outside Europe when Internet are frequently monitored & blocked by BIG BROTHERS & they enforced to use tools like VPN to overcome this. Leaking real IP by any way can make it possible for BIG BROTHERS to block VPN work....

Moreover, you add the following very very needed feature: #343
So, why not include the feature that I suggested here in this issue ? This will help so many peoples to use your program more safely (more safely from being GRABBED BY BIG BROTHERS that may block IP of your servers so that users can not touch you unless via VPN).

@saghul
Copy link
Member

saghul commented May 20, 2020

Dear please give attention for this VERY CRITICAL issue !

I suggest you start by dropping the hyperbole. This NOT a critical issue by any imaginable means. If you absolutely need that protection use Jitsi Meet from a browser.

Moreover, you are Switzerland team !

Irrelevant, and wrong. We are pretty global. I myself am based in Amsterdam.

So, why not include the feature that I suggested here in this issue ?

Because we have no time to work ALL problems. We need to prioritise. That doesn't mean it will never happen, it means you sshouldn't hold your breath.

If this is something you want to work on, I'll happily review.

@Nokia808
Copy link
Author

@saghul
Dear forgive me if I gave statements seem to you as being hyperbole .....

You said "We need to prioritise. That doesn't mean it will never happen"
I'm respecting your priorities, & just your statement "That doesn't mean it will never happen" is enough ....

Last thing: I will send you private email to "contact@jitsi.org" since I do not know your email, to explain why this issue is important & I will ask them - if they can - forward this email to your personal email to read it & understand why I considered it critical .... I can not give more here ....

Accept my sorry again.

@Echolon
Copy link

Echolon commented May 25, 2020

Dear please give attention for this VERY CRITICAL issue !

I suggest you start by dropping the hyperbole. This NOT a critical issue by any imaginable means. If you absolutely need that protection use Jitsi Meet from a browser.

Moreover, you are Switzerland team !

Irrelevant, and wrong. We are pretty global. I myself am based in Amsterdam.

So, why not include the feature that I suggested here in this issue ?

Because we have no time to work ALL problems. We need to prioritise. That doesn't mean it will never happen, it means you sshouldn't hold your breath.

If this is something you want to work on, I'll happily review.

Regarding Saúls comment I will close this.

If you have a question about Jitsi Meet that is not a bug report or feature request, please post it in https://community.jitsi.org


I'm a community contributor and not directly affiliated with the Jitsi team.

@Echolon Echolon closed this as completed May 25, 2020
@Echolon Echolon added feature-request Issue is a feature request question Not an issue but a question labels May 25, 2020
@Nokia808
Copy link
Author

Nokia808 commented May 27, 2020

@saghul
@Echolon
Hi dears. This issue seem to be fixed in chromium & chrome browsers ! See the comments on the following site:
https://browserleaks.com/webrtc

 comment by koxopi9069 (7 months ago):
 in cromium browsers now WebRTC Leak Local IP address hide:
 Anonymize local IPs exposed by WebRTC.
 Conceal local IP addresses with mDNS hostnames. – Mac, Windows
 #enable-webrtc-hide-local-ips-with-mdns

Please investigate for this & for Linux system also.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature-request Issue is a feature request question Not an issue but a question
Projects
None yet
Development

No branches or pull requests

3 participants