All times are UTC + 1 hour




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: Flash
PostPosted: Wed Apr 04, 2012 23:44 

Joined: Wed Apr 04, 2012 13:12
Posts: 17
I see that activating flash on the ip-check page reveals my originating IP adress. Does that mean that flash by definition see the originating IP adress or is it a specific configuration of the ip-check page?

Secondly, if I connect to a page via Jondo and I run a flash app that reveals my IP adress, can a connection be made between my mix operator adress and my own IP adress?

For instance I connect to a page, read some potentially incriminating text and after that open an innocent webcam connection on the same page that reveals my original IP adress. Can the mix operator's IP-adress that handled the first stage of my activity (reading the dangerous text) be coupled to the innocent activity of starting the flash player? Or are they two separate things.

And I know, Jondo users should protect themselves against flash exposure, but I am just curious ;-)


Top
 Profile  
 
 Post subject: Re: Flash
PostPosted: Thu Apr 05, 2012 0:37 

Joined: Mon Jan 24, 2011 18:59
Posts: 191
Pantomine wrote:
I see that activating flash on the ip-check page reveals my originating IP adress. Does that mean that flash by definition see the originating IP adress or is it a specific configuration of the ip-check page?


The former. Flash "leaks" your IP, regardless of the website. Anytime you allow plugins such as Java and Flash they will cause a network proxy to "leak" its true IP. Therefore, your anonymity will be compromised.

Quote:
Secondly, if I connect to a page via Jondo and I run a flash app that reveals my IP adress, can a connection be made between my mix operator adress and my own IP adress?


Can a third party website make a connection between your exposed real IP and an IP from JonDo? I suppose yes. Flash will expose your real IP, even though you will still be connected to the JonDo network.

Quote:
For instance I connect to a page, read some potentially incriminating text and after that open an innocent webcam connection on the same page that reveals my original IP adress. Can the mix operator's IP-adress that handled the first stage of my activity (reading the dangerous text) be coupled to the innocent activity of starting the flash player? Or are they two separate things.


But by whom? When a plugin leaks your true IP, I would imagine that your proxy IP and real IP will be conflated.

Quote:
And I know, Jondo users should protect themselves against flash exposure, but I am just curious ;-)


Well, yes and no. I think the JonDo motto is this: most websites do not require third party plugins such as JavaScript, Java, Flash, or Microsoft Silverlight; these are mostly used to spy on on users.

However, there are cases when one or more third party plugins are required, in which case it is best to use NoScript and limit the bare minimum of scripts for website functinality.

I enable Flash when I watch online videos or listen to online music--but I am protected because I create a "JonDo VPN" with my Socksifier, which furnishes me total protection from all plugins.

When you configure a Socksifier or better still, create a JonDo VPN or a Tor VPN, you need not worry about IP expousre or IP leakage when using Java, Flash, or any other plugin.

It is like a Virtual Private Network (VPN)--but way more anonymous and secure.


Top
 Profile  
 
 Post subject: Re: Flash
PostPosted: Thu Apr 05, 2012 0:47 

Joined: Wed Apr 04, 2012 13:12
Posts: 17
Thanks for your answer, that certainly was helpfull.

Not being a native speaker I had to lookup the word conflated ;-)


Top
 Profile  
 
 Post subject: Re: Flash
PostPosted: Thu Apr 05, 2012 1:08 

Joined: Mon Jan 24, 2011 18:59
Posts: 191
Pantomine wrote:
Thanks for your answer, that certainly was helpfull.

Not being a native speaker I had to lookup the word conflated ;-)


I might add that if you use Atube Catcher to watch videos or listen to music, it is not necessary to enable any plugin, including Flash.

I usually use this method when watching youtube without needing to go to http://www.youtube.com.

But caution: configuring Atube Catcher's network settings to the JonDo network proxy will not anonymize you.

You have to use a Socksifier configuration to stay anonymous.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC + 1 hour


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
cron
Free Trial for Premium Services
Free Trial for Premium Services
Get your free test code for JonDonym Premium services!
JonDonym News
JonDo Error Message
Fri, 03 Mai 2013
HTTPS Certificate Updates
Fri, 22 Feb 2013
Speaker's Corner
First-Party Cookies
Thu, 09 May 2013
JonDoBrowser 0.6 - Status Report
Tue, 16 Apr 2013
For your web site - free!
Get your free IP check image for your web site or forum here!
Latest software releases
JonDo 0.18.001
Tue, 29 May 2012
JonDoFox 2.6.14
Wed, 15 May 2013
JonDoBrowser 0.7 Beta
Tue, 21 May 2013
Live-CD/DVD 0.9.41
Fri, 12 Apr 2013