AFFECTED PRODUCTS
Late final month, safety researchers revealed a massive safety flaw that enables website possessor to easily see the existent IP addresses of users through WebRTC, fifty-fifty if they are using a VPN or fifty-fifty PureVPN to mask their existent IP addresses.
The safety glitch affects WebRTC-supporting browsers such equally Google Chrome in addition to Mozilla Firefox, in addition to appears to move express to Windows operating organisation only, although users of Linux in addition to Mac OS X are non affected yesteryear this vulnerability.
HOW DOES THE WebRTC FLAW WORKS
WebRTC allows requests to move made to STUN (Session Traversal Utilities for NAT) servers which render the "hidden" domicile IP-address likewise equally local network addresses for the organisation that is beingness used yesteryear the user.
The results of the requests tin toilet move accessed using JavaScript, but because they are made exterior the normal XML/HTTP asking procedure, they are non visible inwards the developer console. This agency that the solely requirement for this to operate is WebRTC back upwardly inwards the browser in addition to JavaScript.
CHECK YOURSELF NOW
Influenza A virus subtype H5N1 demonstration published yesteryear developer Daniel Roesler on GitHub allows people to depository fiscal establishment tally if they are affected yesteryear the safety glitch.
Also, you lot tin toilet larn through the next steps inwards gild to depository fiscal establishment tally if you're affected:
- Connect to ExpressVPN
- Visit http://ipleak.net
- If your browser is secure, you lot should run into something similar this:
- If your browser is affected yesteryear this issue, you’ll run into data most your truthful IP address inwards the WebRTC section.
HOW TO PROTECT YOURSELF
Luckily the critical safety flaw is quite tardily to fix.
For Chrome users :
Google Chrome in addition to other Chromium-based browser users tin toilet install the WebRTC Block extension or ScriptSafe, which both reportedly block the vulnerability.
For Firefox Users :
In illustration of Firefox, the solely extensions that block these expect ups are JavaScript blocking extensions such equally NoScript. To fix, endeavor the next steps:
- Type about:config inwards the browser's address bar in addition to hitting enter.
- Confirm you lot volition move careful if the prompt appears.
- Search for media.peerconnection.enabled.
- Double-click the preference to laid it to false.
- This turns of WebRTC inwards Firefox.
