OpenVPN and WEBrtc leak

[Cake]

Anybody effected?
Apparently I am not. I think it is for being double NAT'd, but you may want to check out the latest news.

https://torrentfreak.com/huge-security-flaw-leaks-vpn-users-real-ip-addresses-150130/

In short the article mentions going to https://diafygi.github.io/webrtc-ips/ to see if your affected. Not sure if this is openvpn needing a patch, or just to install a addon/extension to block webrtc in your browser of choice.

 

[cosmoxl]

Anybody effected?
Apparently I am not. I think it is for being double NAT'd, but you may want to check out the latest news.

https://torrentfreak.com/huge-security-flaw-leaks-vpn-users-real-ip-addresses-150130/

In short the article mentions going to https://diafygi.github.io/webrtc-ips/ to see if your affected. Not sure if this is openvpn needing a patch, or just to install a addon/extension to block webrtc in your browser of choice.

I've been taking part in forum chats for two VPN providers regarding this.

First time I tested it was showing my ISP IP address and VPN IP address. I run VPN on my router. I rebooted router and my windows 7 machine and subsequent tests only show VPN address. I'm fine with that and can always disable it or block it in browser.

I'm not sure why the first time I tested it showed both IP addresses.

 

[Cake]

The more I read into it I think your safe when using the vpn on the router, but just from webrtc.

I was reading a couple months back about google/android. In my scenario I have a guest network enabled with a password. It gets routed through the vpn (pia). I share it with neighbors because they are friends or family, but I put in the password manually with out telling the user so they can't hand it out to their friends. What I didn't realize is on Google Play setup in android it asks to backup your stuff, on one version of Android it explicitly says wifi passwords... So the wifi password I put in manually on each tablet/phone is now saved by Google, but wait... then android later on wants to use wifi to better the location etc etc, and of course the user says yes. It then turns on the gps, and sends the coordinates to Google along with the ssid and mac name/address of router. So much for being anonymous. According to Google just add _nomap to the end of your ssid name. Maybe I am reading too much into all this because I am not a genius about networking, but it seems like a full time job just to remain somewhat anonymous. I only figured the above out because one day Google new my exact location. huh / lol

Feature request #2: a radius server, random mac and ssid changer on a random timer jffs script. j/k

 

[cyborgpunte]

I use both VPNservice and TOR