Re:VPN leaks users’ IPs via WebRTC
by lallysingh on Wednesday March 28, 2018 @07:34PM
(#16703100)
Lots of people in webrtc are critically concerned with the safety and privacy of their users.
I'm not sure what that means. It was obvious this would be used for fingerprinting and leaks. The explained reasons for proceeding was that permission prompts for data channels would hurt usage, despite not having clear cases where we need P2P without letting users know.
And none of this excuses overriding the user's expressed network connectivity.
When this was brought up, they immediately jumped to the excuses that fingerprinting can't be helped. And many jumped to saying hey you should use Tor Browser anyway. Total capitulation.
Maybe someone cared, but it's not the official stance from webrtc groups or browsers.
Re:VPN leaks users’ IPs via WebRTC
by throwaway2048 on Wednesday March 28, 2018 @10:17PM
(#16704045)
obviously not that critically concerned if leaking sensitive information like this was required by the spec as drafted, and has remained uncorrected.
They dismiss all privacy concerns with "you can't have privacy in a browser" and "fingerprinting will work anyways so we can't make it worse". It's head-in-sand approach to privacy and it's bad.
Even then, Firefox is simply wrong to tell people it'll use your proxy, then throw that out.