3 ms·

>if the browser has been set up to use a proxy server, connecting directly to the internet is no longer possible. I haven't followed the development, would thi

>if the browser has been set up to use a proxy server, connecting directly to the internet is no longer possible. I haven't followed the development, would this also prevent WebRTC IP address leakage? Here IIRC I've simply disable it (media.peerconnection.enabled) and forgot about it...

chupasaurus 8y ago
I'm running browser inside network namespace with VPN tun device, so the only address it could leak is a tunnel one.
- CapacitorSet 8y ago
  Care to explain how to do that?
  - heinrich5991 8y ago
    https://www.synkretie.net/writings/easy%20namespaced%20openvpn.html https://www.synkretie.net/writings/easy%20namespaced%20openv... I used that one to route all of my GMail stuff over my server. This is done transparently to Thunderbird, by launching it in its own network namespace. That way, I don't get these annoying "Someone has your password" messages when travelling.
    - chupasaurus 8y ago
      That's close to what I'm using (I have only one route-script for OpenVPN which is pretty much the same, but handles both up and down commands from VPN client). To make DNS work properly, there should be a resolv.conf file in /etc/netns/$netns_name/ (directory has to be created manually). I should generalize my stuff and push it to Github...
      - chupasaurus 8y ago
        Found a repo [0] with better solution than mine. [0] https://github.com/slingamn/namespaced-openvpn https://github.com/slingamn/namespaced-openvpn
- tonetheman 8y ago
  Yeah I would love to know how you set that up.
- mindslight 8y ago
  We're all running some bespoke setup, and probably each planning something more-advanced and more-bespoke, just to overcome bugs in browser implementations. What we all actually need is a browser developed with the goal of being secure by default, rather than shrugging off eg the leaking of network config / window size / rendering engine nondeterminism / etc.

chupasaurus 8y ago

I'm running browser inside network namespace with VPN tun device, so the only address it could leak is a tunnel one.

CapacitorSet 8y ago
Care to explain how to do that?
- heinrich5991 8y ago
  https://www.synkretie.net/writings/easy%20namespaced%20openvpn.html https://www.synkretie.net/writings/easy%20namespaced%20openv... I used that one to route all of my GMail stuff over my server. This is done transparently to Thunderbird, by launching it in its own network namespace. That way, I don't get these annoying "Someone has your password" messages when travelling.
  - chupasaurus 8y ago
    That's close to what I'm using (I have only one route-script for OpenVPN which is pretty much the same, but handles both up and down commands from VPN client). To make DNS work properly, there should be a resolv.conf file in /etc/netns/$netns_name/ (directory has to be created manually). I should generalize my stuff and push it to Github...
    - chupasaurus 8y ago
      Found a repo [0] with better solution than mine. [0] https://github.com/slingamn/namespaced-openvpn https://github.com/slingamn/namespaced-openvpn
tonetheman 8y ago
Yeah I would love to know how you set that up.
mindslight 8y ago
We're all running some bespoke setup, and probably each planning something more-advanced and more-bespoke, just to overcome bugs in browser implementations. What we all actually need is a browser developed with the goal of being secure by default, rather than shrugging off eg the leaking of network config / window size / rendering engine nondeterminism / etc.