Privacy

47154 readers

1015 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago

MODERATORS

WebRTC Leak on Android (reddthat.com)

submitted 1 month ago by tatoko556@reddthat.com to c/privacy@lemmy.ml

6 comments fedilink hide all child comments

Can Android apps use WebRTC, or is WebRTC only available in browsers?

If Android apps can use WebRTC, how can it be blocked per app or system-wide to prevent IP or network leaks?

you are viewing a single comment's thread
view the rest of the comments

[–] pylapp@programming.dev 10 points 1 month ago (1 children)

WebRTC is a protocol, you can use it in both web apps and mobile apps.

If I remember well it was used as a trick from Facebook to leak personal data using the SDP.

[–] tatoko556@reddthat.com 3 points 1 month ago (1 children)

Thanks. WebRTC-related IP leaks can occur when using a proxy. I’m searching for a method to disable WebRTC per application or across the entire system when using VPN

[–] Onyx376@lemmy.ml 1 points 1 month ago (1 children)

I am not a technical person so at the end of search please share with us. Until then, I thought that this leak could only happen through the browser.

[–] tatoko556@reddthat.com 1 points 1 month ago (1 children)

https://reddthat.com/post/59164025

WebRTC isn’t magic. WebRTC does not bypass a VPN, nor is it the only–or even most common–way that software on your phone, Android or otherwise, can exfiltrate potentially sensitive information, intentionally or unintentionally. The way WebRTC on your phone might leak an IP is that during ICE, which is used by more than just WebRTC, the phone’s local IP addresses may be sent, and IPv6 addresses on your WiFi or cell connection may be globally unique. IPv4 local addresses will almost certainly be meaningless, private addresses due to IPv4 address space exhaustion, and any non-local address will be from your VPN gateway.

You cannot block ICE per app or system wide because it is not a system facility, and the permissions required to implement it on Android are not very specific.

I think what @i_am_not_a_robot@discuss.tchncs.de meant is block connections without vpn is enough. though I'm not quite sure

[–] Onyx376@lemmy.ml 1 points 1 month ago (1 children)

Thank you for being kind enough to share with us

[–] tatoko556@reddthat.com 1 points 1 month ago

check that comment there's new response