Bug #1754
Real Ip Discovery Flaw
Status: | New | Start date: | 07/29/2013 | |
---|---|---|---|---|
Priority: | Immediate | Due date: | ||
Assignee: | n8fr8 | % Done: | 0% | |
Category: | - | |||
Target version: | - | |||
Component: | Orweb 0.5.0 |
Description
It is possible to determine the real ip of an user by using HTML5. There is neither Javascript nor Flash required to do so. Details were sent by mail to a developer.
Tested version: Orweb 0.5.0-BETA-3
Related issues
History
#1 Updated by n8fr8 over 4 years ago
Thanks for posting this here. We are definitely looking at this. The Android PRNG issue took precedent last week, but we should get an updated Orweb out shortly.
Just to note, this hasn't been able to be reproduced on all devices/OS versions from our initial tests.