One of the primary reasons we use a Virtual Private Network (VPN) is to hide or mask our true IP address while we're online. Web sites will deny a person's access by "blacklisting" their IP address if the website feels someone has violated their rule. By using a VPN, a user can get around the ban on their normal IP address. Better yet,websites have no way of finding out the true IP address.That is unless their VPN has a leak. Then they might have something to be concerned about and here I am explaining about that "trouble" in our mask.
Recently,a news came out about a security flaw in VPN connections that may allow websites (or investigators) to track down a person's true IP address while they're using a VPN. That's not supposed to happen.
How our VPN baby works.
==========================
Your Internet Service Provider (ISP) makes your Internet connection possible. When you go online, your ISP assigns an IP address to your computer or router. Your IP address becomes your Internet "pass"—your behind-the-scenes network ID.
When you have a VPN, your Internet connection still comes from your ISP (or whatever network you're connected to while online)—the office, Wi-Fi at the airport, etc.
By logging in to your VPN and selecting the region or country you want to reroute through, the VPN assigns you a different, temporary working IP address—your real IP address is still working, but in the background, hidden.At that point, other networks and computers could see your "VPN" IP address if they bothered to look for it.
So where's the problem? It happens to be built into the Web browsers that we use.
Is this is a little bug or a Security "flaw."?
========================================
RTC- RTC means real time clock << an arrangement to sync two events happening at different frames like video calling or any live events>>
There is a special interface (program) in most Internet browsers (Chrome, Firefox, etc.) called Web Real Time Communication, or WebRTC, and that's where the so-called flaw is.
However, WebRTC isn't a flaw at all. It's actually a special feature embedded in your Web browser. WebRTC allows computers on different networks to perform special browser-to-browser applications, such as voice calling, video chats, file sharing and more. But as it turns out, in the hands of a technically savvy person, WebRTC can be tricked into revealing your actual IP address, even if you're actively using a VPN! That's certainly not what you would expect or want.
How your baby cry and leak
===============================
Here's how websites are fighting back: They have an IT person "write a few lines of code" (in other words, create a mini-program) to initiate or imitate a WebRTC-type connection with your browser. In the process, the program tricks the VPN into revealing the actual IP address. The website can then use the information to block the active connection or trace down your real identity.Think of it as having a fake driver's license pasted over your real license. WebRTC is like an x-ray machine: Websites can see through the fake IP address and identify the real IP...and then block it.
How to check for leaks.
==========================
If you have a VPN account, here's how you can check your account for leaks*:
Open your browser, go to WhatIsMyIPAddress.com and get your IP address.Log into your VPN, choose a remote server (as you regularly do) and verify that you're connected. Wait a few minutes.
Revisit WhatIsMyIPAddress.com and take note of your new IP address once more. You should see a new IP address, provided by your VPN connection.
Here is the key step: Visit any WebRTC test page( ) and note the IP address displayed on the page.If the WebRTC test shows your real IP address, then your browser is leaking your ISP-provided address to the world. You can count on WhatIsMyIPAddress.com around the clock to help you verify your Internet connection and determine if your VPN is leaking your IP address.
How to fix the leak.
====================
You might be able to fix the VPN leak on your own, either by disabling WebRTC on your browser or installing a browser plug-in that blocks it.
The Chrome, Firefox, and Opera browsers operate with WebRTC active, or enabled, by default; Safari and Internet Explorer do not. (If the WebRTC test showed your true IP address, you have it enabled.)
Here's how to disable it: For Chrome and Opera: Install the ScriptSafe extension from the Chrome Web Store, which will definitely disable WebRTC. It works for Opera as well, but it may be a cumbersome process to install it.For Firefox: There are two options:
Disable WebRTC directly by opening a tab and going to "about:config" in the address bar. Find and set the "media.peerconnection.enabled" setting to "false."
Install the "Disable WebRTC" add-on from Mozilla Add-ons (go to @YourAnonNews for the link).Just so you know, disabling WebRTC may disrupt some Web apps (IRC-internet relay chats)and services, such as chat or other services involving your computer's microphone or camera. If that happens, you can always enable WebRTC temporarily to fix that.
