4 ms·

In addition to being annoying, WebRTC is a privacy hazard and I believe it should be off by default. I install this to make it so https://addons.mozilla.org/en-

In addition to being annoying, WebRTC is a privacy hazard and I believe it should be off by default. I install this to make it so https://addons.mozilla.org/en-US/firefox/addon/happy-bonobo-disable-webrtc/ https://addons.mozilla.org/en-US/firefox/addon/happy-bonobo-...

kmlx 8y ago
isn’t webrtc by default off on all browsers? aren’t websites asking for permssion before the js is allowed access? and won’t it stay off when you deny the request?
- nottorp 8y ago
  No browser ever asked me if it can use it... and when I was using chrome, I looked for options to disable it and there were none.
- SahAssar 8y ago
  Nope, the audio/video capture requires permission, but the rest should work without a permission prompt.
  - kmlx 8y ago
    "but the rest should work without a permission prompt" what "rest" are you referring to?
    - sempron64 8y ago
      Connections can be made to other computers without explicit permission.
      - kmlx 8y ago
        ah, i believe you are referring to the webrtc data channel. it leaks local IPs, but the severity depends on several factors, including whether you're running VPN and what you're using the VPN for, or just running behind a regular local network. if you're running behind a regular local network then I wouldn't consider the local IP leakage as a "privacy hazard". local IPs are compromised already. everywhere. they are easy to guess. they are easy to obtain in native apps. etc. there are issues when it comes to places where VPN access is crucial/vital. thankfully, very few VPN providers leak your IP nowadays, and with drafts such as what the poster above mentioned (https://datatracker.ietf.org/doc/draft-ietf-rtcweb-mdns-ice-candidates/ https://datatracker.ietf.org/doc/draft-ietf-rtcweb-mdns-ice-...) this problem will be history soon enough.
om2 8y ago
Fortunately, Safari's WebRTC won't silently leak your private IP address or other network info. We've also proposed a new protocol extension that enables peer-to-peer pure data connections in a privacy-aware way. https://datatracker.ietf.org/doc/draft-ietf-rtcweb-mdns-ice-candidates/ https://datatracker.ietf.org/doc/draft-ietf-rtcweb-mdns-ice-...
- kitsunesoba 8y ago
  As a user, I really appreciate how the WebKit team approaches new features in such a measured and careful way. New shiny things to use are great but I’m more than willing to wait if it helps to prevent glaring oversights. There’s no benefit to rushing these things in.

kmlx 8y ago

isn’t webrtc by default off on all browsers? aren’t websites asking for permssion before the js is allowed access? and won’t it stay off when you deny the request?

nottorp 8y ago
No browser ever asked me if it can use it... and when I was using chrome, I looked for options to disable it and there were none.
SahAssar 8y ago
Nope, the audio/video capture requires permission, but the rest should work without a permission prompt.
- kmlx 8y ago
  "but the rest should work without a permission prompt" what "rest" are you referring to?
  - sempron64 8y ago
    Connections can be made to other computers without explicit permission.
    - kmlx 8y ago
      ah, i believe you are referring to the webrtc data channel. it leaks local IPs, but the severity depends on several factors, including whether you're running VPN and what you're using the VPN for, or just running behind a regular local network. if you're running behind a regular local network then I wouldn't consider the local IP leakage as a "privacy hazard". local IPs are compromised already. everywhere. they are easy to guess. they are easy to obtain in native apps. etc. there are issues when it comes to places where VPN access is crucial/vital. thankfully, very few VPN providers leak your IP nowadays, and with drafts such as what the poster above mentioned (https://datatracker.ietf.org/doc/draft-ietf-rtcweb-mdns-ice-candidates/ https://datatracker.ietf.org/doc/draft-ietf-rtcweb-mdns-ice-...) this problem will be history soon enough.

om2 8y ago

Fortunately, Safari's WebRTC won't silently leak your private IP address or other network info. We've also proposed a new protocol extension that enables peer-to-peer pure data connections in a privacy-aware way. https://datatracker.ietf.org/doc/draft-ietf-rtcweb-mdns-ice-candidates/ https://datatracker.ietf.org/doc/draft-ietf-rtcweb-mdns-ice-...

kitsunesoba 8y ago
As a user, I really appreciate how the WebKit team approaches new features in such a measured and careful way. New shiny things to use are great but I’m more than willing to wait if it helps to prevent glaring oversights. There’s no benefit to rushing these things in.