Obtaining local IP addresses via WebRTC STUN requests(diafygi.github.io)
diafygi.github.io
Obtaining local IP addresses via WebRTC STUN requests
https://diafygi.github.io/webrtc-ips/
8 comments
Previous discussion: https://news.ycombinator.com/item?id=8949953
I've not looked into the technical side of this type of request, and it probably makes sense, but it's of interest to not that this also produces my local IP addresses when accessing the site over an ssh-ed SOCKS-proxy.
A potential issue for browser fingerprinting and another thing for Tor Browser to disable (if it isn't already, and I'd be surprised if it isn't).
Local ones aren't very interesting though, and almost useless for connection. Can we perhaps close this without losing functionality?
Local ones aren't very interesting though, and almost useless for connection. Can we perhaps close this without losing functionality?
This can be blocked in Chrome with a Plug-In[1]
[1]https://chrome.google.com/webstore/detail/webrtc-block/nphkk...
[1]https://chrome.google.com/webstore/detail/webrtc-block/nphkk...
Funny, it lists my LAN IP as "public IP" and my Docker interface as "local IP". My actual public IP, since I'm behind a corporate firewall is not listed at all. This is on Chrome 39.0.2171.99.
So you discover that my LAN address is 192.168.1.2. What can you actually do with that information? Can it be leveraged into making the browser probe its local network?
This can be disabled, in firefox go to about:config and change the media.peerconnection.enabled key to false.