Bug #1754

Real Ip Discovery Flaw

Added by Anonymous almost 4 years ago. Updated almost 4 years ago.

Status:NewStart date:07/29/2013
Priority:ImmediateDue date:
Assignee:n8fr8% Done:

0%

Category:-
Target version:-
Component:Orweb 0.5.0

Description

It is possible to determine the real ip of an user by using HTML5. There is neither Javascript nor Flash required to do so. Details were sent by mail to a developer.

Tested version: Orweb 0.5.0-BETA-3


Related issues

Copied to Orweb - Bug #2144: Real Ip Discovery Flaw Closed 07/29/2013
Copied to Orweb - Bug #2162: Real Ip Discovery Flaw Feedback 07/29/2013
Copied to Orweb - Bug #2165: Real Ip Discovery Flaw Rejected 07/29/2013
Copied to Orweb - Bug #2166: Real Ip Discovery Flaw New 07/29/2013
Copied to Orweb - Bug #2300: Real Ip Discovery Flaw New 07/29/2013
Copied to Orweb - Bug #3417: Real Ip Discovery Flaw New 07/29/2013
Copied to Orweb - Bug #3591: Real Ip Discovery Flaw Feedback 07/29/2013
Copied to Orweb - Bug #5200: Real Ip Discovery Flaw New 07/29/2013
Copied to Orweb - Bug #6711: Real Ip Discovery Flaw Closed 07/29/2013 03/01/2016
Copied to Orweb - Bug #6729: Real Ip Discovery Flaw New 07/29/2013
Copied to Orweb - Bug #6875: Real Ip Discovery Flaw Closed 07/29/2013
Copied to Orweb - Bug #7826: Real Ip Discovery Flaw New 07/29/2013

History

#1 Updated by n8fr8 almost 4 years ago

Thanks for posting this here. We are definitely looking at this. The Android PRNG issue took precedent last week, but we should get an updated Orweb out shortly.

Just to note, this hasn't been able to be reproduced on all devices/OS versions from our initial tests.

Also available in: Atom PDF