News for hackers. Stuff that matters.
Re:Studying how Firefox can collect additional data in a pri... by codefined on Tuesday August 22, 2017 @09:50AM (#15072330)
Then don't send the correct source IP address, with simple statistics gathering like this I hardly expect they require a response. It would mean there would be no personal data whatsoever.
Re:Studying how Firefox can collect additional data in a pri... by pfg on Tuesday August 22, 2017 @10:08AM (#15072525)
Most ISPs filter spoofed IP addresses nowadays[1]. Even if your ISP doesn't prevent it, NAT might. You wouldn't get a whole lot of responses this way, and there'd be a strong bias because of regional differences w.r.t. filtering.

[1]: https://spoofer.caida.org/summary.php

Re:Studying how Firefox can collect additional data in a pri... by kuschku on Tuesday August 22, 2017 @09:53AM (#15072363)
How would you do that, though? The browser has to open a socket to something to do this, after all. And that already is a violation.
Re:Studying how Firefox can collect additional data in a pri... by Ajedi32 on Tuesday August 22, 2017 @10:01AM (#15072458)
You'd just send a UDP packet with a spoofed source address and forget about it. There's no need to open any sort of 2-way connection for data that's only being transmitted in one direction (from browser to metrics server).
Re:Studying how Firefox can collect additional data in a pri... by moosingin3space on Tuesday August 22, 2017 @10:05AM (#15072500)
You could transmit the telemetry through Tor.
Re:Studying how Firefox can collect additional data in a pri... by sp332 on Tuesday August 22, 2017 @10:16AM (#15072603)
Tor is blocked in some places and viewed as very suspicious in others. If you're already in a place where you're trying not to draw attention to yourself, using Tor might not a good option.
Re:Studying how Firefox can collect additional data in a pri... by throwaway2048 on Tuesday August 22, 2017 @10:04AM (#15072483)
This isnt how tcp/ip works
Re:Studying how Firefox can collect additional data in a pri... by wongarsu on Tuesday August 22, 2017 @11:34AM (#15073409)
With udp/ip it would work, if none of the routers on the way to the destination filters spoofed IPs.
Re:Studying how Firefox can collect additional data in a pri... by Ajedi32 on Tuesday August 22, 2017 @09:57AM (#15072417)
Wouldn't spoofing IP addresses risk the data packets being filtered out by ISPs or other upstream network providers? IMO if keeping IP addresses hidden is a concern, it'd be better to use something like TOR.