Re:WebRTC Copy – OTR and fast file transfers over WebRTC
by mike-cardwell on Sunday October 20, 2013 @12:04PM
(#6580286)
Does Google now have a log that I visited:
And if somebody else had visited that same room, would they have a log of that too?
Re:WebRTC Copy – OTR and fast file transfers over WebRTC
by erbbysam on Sunday October 20, 2013 @01:27PM
(#6580605)
It looks like this is leaking the room name to Google Analytics. After thinking about this more, I'm going to go ahead and remove that. I should be able to monitor the server itself to make sure it isn't getting overloaded.
Re:WebRTC Copy – OTR and fast file transfers over WebRTC
by mike-cardwell on Monday October 21, 2013 @07:15AM
(#6584680)
Even if Google weren't currently sucking up this information, it would still have been a wise decision to remove it. They can change their JavaScript at any point without you noticing and start logging it. Malicious intent not required.
Re:WebRTC Copy – OTR and fast file transfers over WebRTC
by Gnewt on Sunday October 20, 2013 @10:27PM
(#6582841)
Are you hosting the site through Github Pages?
Re:WebRTC Copy – OTR and fast file transfers over WebRTC
by erbbysam on Monday October 21, 2013 @06:15AM
(#6584506)
No, I currently just manually keep the site in sync with the repository. Not exactly the most professional system but it got the job done. I'm going to look into that(not sure exactly how it works, but I do need to keep a node.js server running as well for webrtc negotiation) , as well as potentially just installing git on the server and have it sync up to the repository.
In defense of this implementation -
- The only external JS loaded on this site is google analytics. Feel free to block this using something like noscript :)
- WebRTC datachannel connections on this site don't use just (optionally) OTR. They have DTLS enabled within the browser. OTR just adds an authentication layer that DLTS currently lacks. So that even if the OTR implementation here was completely compromised, the only possible attack would still be a MiTM on the DTLS channel.
- It's open source (https://github.com/erbbysam/webRTCCopy), so it's available to be hosted elsewhere and all of the libraries used could be re-downloaded.
-Sam