IP address leak! (Tor) (reCAPTCHA) #3612
Comments
|
Of course :) I'll get right onto it. |
|
adb logcat > llogcatnewpipe.txt Please tell me if I did something wrong or if I should add any command options |
|
Here I extracted the recaptcha-related data: |
|
This is really strange: there is no data at all showing that an ip has been saved in cookies or something similar, so that can't be the cause (you can see |
|
Oh that's weird. As you said, it's probably the JavaScript causing this. And disabling JavaScript on reCAPTCHA page would make the page nonfunctional. I guess this is one of those issues we can't fix then huh |
|
Unless WebView uses WebRTC which is known for leaking IP addresses. This Reddit link is having the same problem.
|
|
@ingingin do you have any actual proof that could help identify the issue, if there is any? How did you notice your IP was leaked? I don't see any such evidence in the original issue description. Generally, we take privacy serious and try to avoid data leakage, but please don't expect full protection. There is always a risk for a leak. If in doubt, you need to use different tools on an actually hardened system, e.g., the Tails linux distro on a safe computer. Android devices, generally anything mobile, is not 100% safe anyway. |
TheAssassin
added
the
privacy & data protection
|
What do you mean, actual proof? I noticed my IP was leaked because as I mentioned in the video, before doing all that, I had the IP address which Tor gave me, then suddently I get my own IP printed. No I don't have evidence to backup my statement cuz I don't wanna show my IP to anyone. But using NetGuard, blocking access to every system app. On a non-googled tablet, running LineageOS. And only allowing NewPipe Internet access while routing through Tor on 127.0.0.1 port 9050. Tested and working. Should we then give the android VPN implementation shit for this? I know these problems about the risks on tablets and phones generally but this feels like something more complicated. While I don't understand any of androids interior I would trust you know much more, which is why I really wouldn't know why or HOW its happening :/ |
|
But I know that Google displays your IP when getting reCAPTCHAs on the webpage too. The same thing happens on NewPipe. And I would guess you guys use WebView? Something about that messes up the, something. Now instead of using YouTube, wouldn't it be better to add Invidious? As far I remember you don't get any reCAPTCHAs from that. Which would solve this ?_? |
|
I'm not sure but I think the problem is NetGuard, if the requests done in the WebView are forwarded through Tor it shouldn't see your IP. Also have you tried to install a different WebView and switch the default WebView to the new one? |
|
On a real browser the uBlock Origin add-on can prevent the IP leak, is it possible to replicate the behaviour? See here: https://github.com/gorhill/uBlock/wiki/Prevent-WebRTC-from-leaking-local-IP-address |
|
@ale5000-git Yeah, you just got to thinking again, I believe I didn't route the system through Tor actually, but using WebRTC with Tor, should leak my IP anyhow, because of the VPN situation ?? I can't think of a way to replicate that thing uBlock Origin uses on Android. Haven't seen anything like that. Right now I'm trying to see if using Bromite's WebView would make a difference. I believe it's because I didn't actually route Android's WebView through Tor which I actually thought I did. And only having NewPipe through Tor and then WebView not, would mess up things. Coming back tomorrow with news |
|
I'm an idiot...I think |
|
Okay I'm back, this is not tomorrow. But yes, even with Android System WebView denied Internet access + the whole system. It still leaks my IP address. I also tried the same with Bromite's WebView from my Android phone. And it didn't leak my IP. Or so I don't think. The real problem goes down to the reCAPTCHA being broken on my Tablet. Because on my phone it works, the ✔️ mark is displayed. And the page doesnt refresh. On my Tablet, the reCAPTCHA box disappears completely and refreshes the page kinda. But I'll try to install Bromite's WebView onto my Tablet and see if that makes the difference. But if that's the cause. This issue can't be resolved right? |
|
In my opinion the safest option would be to include a web rendering engine directly inside NewPipe code but that would certainly add a lot of complications. |
|
Wouldn't Invidious implementation solve this? I would vouch for that instead of a real fix for this. As Invidious doesn't seem to require any reCAPTCHAs because you're not accessing the Google captcha page. Going directly to googlevideo is great. And having Tor with that 👍 Or, I don't understand this, so I wouldn't know. |
ghost
mentioned this issue
Version
Steps to reproduce the bug
Expected behavior
Pretty harsh, but my expectation would be that NewPipe wouldn't leak my real IP to Google at ANY cost. Ya, I made a video recording this \o/
Actual behaviour
Would like my IP hidden from Google. Please.
Screenshots/Screen recordings
Same video, different hosts
https://anonfile.com/B9sfZezdo0/oh_no_webm
https://streamable.com/p6h6we
Logs
The text was updated successfully, but these errors were encountered: