WebRTC Block Extension

Iron Forum for english speaking people
Posts: 1
Joined: Tue Dec 03, 2019 9:59 am

Re: WebRTC Block Extension

Postby TsutomuTakakura » Tue Dec 03, 2019 10:03 am

SRWare wrote:We will soon stop making special WebRTC-Builds and replace it with the functionality of our new extension because we want to make it also available for our Linux and OS X customers and also make it optinal because some poeple want to switch WebRTC on and off depending on their usage.

https://bit.ly/2GCY8ve (for Win, Linux, OS X)

Just install the extension and WebRTC IP Leaks are stopped. Please get sure to allow it also for Incognito!
You want to use WebRTC again for a while? Simply disable the extension temporarily.

What are WebRTC Leaks?
http://thehackernews.com/2015/02/webrtc ... dress.html



Good offer. I hope many appreciate its need.

Posts: 7
Joined: Tue Apr 08, 2014 10:26 am
Location: Russia

Re: WebRTC Block Extension

Postby Maxis » Wed Feb 05, 2020 11:14 am

Hi, SRWare! Thanks for a great browser.
Can you please do something with Device-ID in WebRTC? As described there https://browserleaks.com/webrtc#device-ids this can be use to tracking users.
First of all, media device enumeration works only in Chromium-based web browsers since Chrome 30 or later.

Device ID's — it's a unique identifiers of an audio/video devices installed in your system. Even if you have no camera/microphone, Chrome may detect more than one device, such as «Line In», «Aux», «CD Player», etc, depending on the system drivers.

Full list of available media devices you can check in «chrome://settings/content ⇒ Media»

Of course, Google Chrome does not allow foreign websites to see the actual Model ID of your hardware devices, instead it provides self-generated hashes. But at the same time, any website is allowed to take this fingerprints without user confirmation.

How persistent and trackable these Device ID's?

Well, for most users this ID's may remain unchanged for months.

WebRTC Device ID is a HMAC of:

Value of the "media":{"device_id_salt"} located in «Chrome\Data\profile\Preferences». Salt generates randomly at the Chrome's first launch. It's renew every time user doing «Clear browsing data ⇒ Cookies and other site and plug-in data». Also, Incognito Mode does not touch «device_id_salt», but generates its own salt for every session.

Origin, aka «protocol://hostname:port». This dependence is not a problem for user tracking, script can be requested from constant host through iframe, and it will be same origin and same Device ID's on any domains.

Raw Device ID of the physical device installed in your system.

So, WebRTC Device Fingerprints persistent to:

Changing ISP, IP address.
Restarting browser, rebooting system.
Clearing cookies and cache through third-party addons like EditThisCookie or CCleaner.
WebRTC Device Fingerprints not persistent to:

Clearing cookies through «chrome://settings/clearBrowserData».
Using new session of Incognito mode.

Return to “SRWare Iron Support (English)”

Who is online

Users browsing this forum: Google Adsense [Bot] and 8 guests