Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WebRTC IP Leak Switch #609

Open
mikevelasquez02 opened this Issue May 18, 2017 · 13 comments

Comments

Projects
None yet
@mikevelasquez02
Copy link

commented May 18, 2017

I noticed that the browser leaks the true IP through WebRTC when using a VPN. It does not have about:config menu as Firefox, so I thought it would be nice to have a switch in the settings to enable or disable WebRTC.

@pocmo

This comment has been minimized.

Copy link
Contributor

commented May 19, 2017

As long as our builds are based on WebView we can't really prevent that. This was one of the reasons why Tor's browser is based on Firefox and not using WebView anymore.

@pocmo pocmo added bug gecko and removed needs triage labels May 23, 2017

@pocmo pocmo referenced this issue Aug 4, 2017

Closed

IP leak #1081

@eolme

This comment has been minimized.

Copy link

commented Aug 7, 2017

I think you can try webview.evaluateJavascript or inject script tag before other scripts in page and set RTCPeerConnection and/or webkitRTCPeerConnection to undefined

@lfxc

This comment has been minimized.

Copy link

commented Sep 13, 2017

what about recompiling webview disabling WebRTC and including in the apk?

I had suggested crosswalk in this comment earlier, but it appears that they aren't updating that any longer https://crosswalk-project.org/blog/crosswalk-final-release.html

This is a pretty big hole for a privacy-focused browser.

@pocmo

This comment has been minimized.

Copy link
Contributor

commented Sep 13, 2017

Crosswalk is no longer in development. It's more likely that we are going to switch to GeckoView in case we are deciding to abandon the WebView based build.

@lfxc

This comment has been minimized.

Copy link

commented Sep 14, 2017

if google hasn't allowed the ability to turn off webrtc by now, I would guess they won't for whatever data collection reasons they may have...

@lfxc

This comment has been minimized.

Copy link

commented Sep 21, 2017

there's also the option of using Chromium webkit in addition to GeckoView.

I do think an IP leak is a big problem. Is there any workaround on the mean time that would work?

thanks

@pocmo

This comment has been minimized.

Copy link
Contributor

commented Sep 21, 2017

Unfortunately there's no workaround for Focus currently. For this you'd have to either use regular Firefox (and flip the preferences for this) or OrFox.

@pocmo pocmo referenced this issue Sep 25, 2017

Closed

[meta] GeckoView #13

0 of 6 tasks complete

@pocmo pocmo removed the gecko label Sep 25, 2017

@rancidfrog

This comment has been minimized.

Copy link

commented Oct 29, 2017

How can you label project

Firefox Focus: The privacy browser - Browse like no one’s watching.

When IP is being leaked. Kind of pathetic false information.
Can't you be sued?

@lfxc

This comment has been minimized.

Copy link

commented Jan 2, 2018

I really think you guys need to figure this one out if you want to be a privacy-focused browser.

@RootUp

This comment has been minimized.

Copy link

commented Feb 12, 2018

Indeed, I believe this is more of a privacy issue here is the live demo for same,

  1. Navigate to www.ch3114.com/getip.html
  2. You would be able to private IP address of user.
@Sdaswani

This comment has been minimized.

Copy link

commented Feb 12, 2018

Thanks for your input folks - we will re-triage this soon.

@bbinto bbinto added the Klar label Feb 22, 2018

@lfxc

This comment has been minimized.

Copy link

commented Jun 16, 2018

please do! thank you!

@vesta0 vesta0 removed the webview label Oct 11, 2018

@vesta0 vesta0 added the UX label Oct 30, 2018

@vesta0 vesta0 added this to the Backlog (P2, P3) milestone Nov 2, 2018

@vesta0 vesta0 added the feature label Nov 5, 2018

@vesta0 vesta0 added P3 and removed P2 labels Nov 16, 2018

@vesta0 vesta0 added P4 and removed P3 blocked labels Dec 14, 2018

@qertoip

This comment has been minimized.

Copy link

commented Dec 24, 2018

This is really critical.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.