https://old.reddit.com/r/privacy/comments/pd4y5m/apples_new_private_relay_is_leaking_your_original/ jump to content my subreddits edit subscriptions * popular * -all * -random * -users | * AskReddit * -pics * -funny * -gaming * -news * -worldnews * -explainlikeimfive * -movies * -todayilearned * -videos * -IAmA * -askscience * -TwoXChromosomes * -aww * -mildlyinteresting * -Jokes * -LifeProTips * -Art * -nottheonion * -Music * -Showerthoughts * -tifu * -science * -gifs * -books * -dataisbeautiful * -OldSchoolCool * -Futurology * -space * -DIY * -food * -nosleep * -announcements * -UpliftingNews * -history * -gadgets * -sports * -creepy * -EarthPorn * -WritingPrompts * -InternetIsBeautiful * -GetMotivated * -Documentaries * -photoshopbattles * -philosophy * -listentothis * -blog more >> privacy privacy * comments Want to join? Log in or sign up in seconds.| * English [ ][] [ ]limit my search to r/privacy use the following search parameters to narrow your results: subreddit:subreddit find submissions in "subreddit" author:username find submissions by "username" site:example.com find submissions from "example.com" url:text search for "text" in url selftext:text search for "text" in self post contents self:yes (or self:no) include (or exclude) self posts nsfw:yes (or nsfw:no) include (or exclude) results marked as NSFW e.g. subreddit:aww site:imgur.com dog see the search faq for details. advanced search: by author, subreddit... this post was submitted on 28 Aug 2021 337 points (97% upvoted) shortlink: [https://redd.it/pd4y] [ ][ ] [ ]remember mereset password login ATF Submit a new link Submit a new text post Get an ad-free experience with special benefits, and directly support Reddit. get reddit premium privacy joinleave1,203,153 readers 1,478 users here now Dedicated to the intersection of technology, privacy, and freedom in the digital world. "I don't have anything to hide but I don't have anything I want to show you either" - @CryptopartyBLN "Privacy is not a sign of wrongdoing. Privacy is a sign of freedom." - /u/blackhawk_12 Subreddit Rules and Wiki ^(updated ^2019-02-28) Before posting in /r/privacy, read the Sidebar Rules. Enjoy our Wiki! It has all sorts of nifty advice and explains most topics you're interested in if you're reading this. Latest 2020-05-01 Reddit has implemented a new Chat feature, that for now, doesn't allow Subreddits to opt out. These chat rooms are unmoderated and form a risk vector. Anyone using the r/Privacy Chat feature should exercise due caution. Do Not Share PII While Chatting! 2019-01-09 I think... I think we're going to have 400,000 subscribers soon, and that's all kinds of awesome! [DEL:2018-09-20::DEL] [DEL:I think... I think we're going to have 100,000 subscribers this week and that's all kinds of awesome.:DEL] Ongoing * Learn how to spot fake news so you can focus on the facts and protect yourself from fictions. * Before you use the "I have nothing to hide" argument please read this paper--all of it. If you can't find the time, then this article should at least get you thinking about why privacy matters. * Why surveillance is not OK * Cory Doctorow "On the Upcoming Privacy Wars" * Glenn Greenwald's 2014 TED Talk, "Why Privacy Matters" * The Electronic Frontier Foundation's, "Surveillance Self-Defense" * EFF's, "Digital Privacy at US Borders Guide" * Continuing discussion about frustrating the efforts of organizations that spy on citizens and consumers. Suggested Software Note this section has software that is under ongoing development. No one solution can guarantee your anonymity. * Tor Browser Bundle, a pre-configured web browser intended to protect your anonymity when used with safe browsing practices. * Tails - a live system that aims at preserving your privacy and anonymity * Prism Break we don't necessarily endorse all their software choices Related Subreddits: * /r/EuroPrivacy * /r/PrivAussie * /r/privacytoolsIO/ * /r/netsec * /r/Onions * /r/Tor * /r/Tails * /r/Whonix * /r/i2p * /r/GnuPG * /r/crypto * /r/NSALeaks * /r/freespeech * /r/CryptoCurrency * /r/vpn * /r/Firefox Donate Consider donating to one of the organizations that fight for your rights. Org Name ACLU American Civil Liberties Union EFF Electronic Frontier Foundation EPIC Electronic Privacy Information Center EDRi European Digital Rights FSF Free Software Foundation ORG Open Rights Group Tor Tor Torservers high bandwidth Tor exit nodes Privacy building the global movement for the protection of International privacy. a community for 13 years BTF MODERATORS * message the mods * Moderator list hidden. Learn More discussions in r/privacy <> X * 34 comments Why You Suddenly Need To Delete Google Chrome 339 * 48 comments Apple's new Private Relay is leaking your original address through WebRTC. 797 * 68 comments Chinese Police Kept Buying Cellebrite Phone Crackers After Cellebrite Said It Ended Sales. The Israeli company purportedly left China last year. The subsequent sales of its products there could cloud its impending IPO. 101 * 6 comments An Explosion in Geofence Warrants Threatens Privacy Across the US 78 * 12 comments Using FireFox w/ DuckDuckGo search engine vs. using DDG as browser on it's own? 2017 * 282 comments A timely reminder that Apple can read your iMessages (even though they're E2E encrypted) 31 * 3 comments 20 Years of Privacy: A brief History of I2P 4 * 4 comments Privacy/Confidential paid/subscription based open source project (filestorage and database) 56 * 15 comments Little-Known Federal Software Can Trigger Revocation of Citizenship 39 I2P Celebrates it's 20th Year on Linux's 30th birthday as well! Show your love and support over at r/i2p. Welcome to Reddit, the front page of the internet. Become a Redditor and join one of thousands of communities. x 336 337 338 Apple's new Private Relay is leaking your original address through WebRTC. (self.privacy) submitted 16 hours ago * by WhatTheHomePod[klvxk1wggf][silver_48]2 [ks45ij6w05] If you perform a test with Private Relay turned on at step Reflexive connectivity you'll see your address from your ISP. If you connect through a virtual private network or proxy and try the test again then nothing is leaked. I have reported this bug to Apple. Just to be aware, for the users under us. Edit: workaround is to enable WebRTC Sockets Proxying under Experimental WebKit Features. However In-App Safari will still show the leaked address even when this is enabled Edit 2: thanks for the awards, but it was really to show people that are using this, in beta, to be aware to not rely on this for now * 48 comments * share * save * hide * report all 48 comments sorted by: best topnewcontroversialoldrandomq&alive (beta) [ ] Want to add to the discussion? Post a comment! Create an account [-]cloudyytechie 29 points30 points31 points 8 hours ago (0 children) Oh sh#t * permalink * embed * save * report * give award * reply [-]vjeuss 7 points8 points9 points 5 hours ago (0 children) WebRTC is a great idea but it's not the first time i remember this kind of issue. Is this happening when using NAT with TURN/ICE? * permalink * embed * save * report * give award * reply [-]twiceasdreaded 51 points52 points53 points 12 hours ago (1 child) Because of course it is * permalink * embed * save * report * give award * reply [-]WeakEmu8 10 points11 points12 points 5 hours ago (0 children) Well, yea, I thought WRTC was just so problematic with this kind of info? * permalink * embed * save * parent * report * give award * reply [-]harrro 8 points9 points10 points 4 hours ago (6 children) This is known issue with WebRTC in general -- it leaks internal IPs because thats what it's supposed to do. Ublock Origin has a checkbox to "disable WebRTC" completely. * permalink * embed * save * report * give award * reply [-]1millerce1 8 points9 points10 points 4 hours ago (5 children) It seems Apple is doing everything half-assed these days. First CSAM instead of E2EE, now this... sigh.. I do have to wonder if they've an alternate agenda where they give the illusion of security without actually delivering. * permalink * embed * save * parent * report * give award * reply [-]LIkeWeAlwaysDoAtThis 7 points8 points9 points 2 hours ago (3 children) Apple as an entity stands nothing to gain from this - it's more probable that government agencies are forcing hands. * permalink * embed * save * parent * report * give award * reply [-]1millerce1 0 points1 point2 points 50 minutes ago (2 children) it's more probable that government agencies are forcing hands. Very likely true but was I fooled into being optimistic that Apple would put up the good fight instead of kowtow and capitulation? * permalink * embed * save * parent * report * give award * reply [-]SAMElawrence 1 point2 points3 points 35 minutes ago (0 children) They put up the fight by not budging until now. Google failed us over a decade ago. * permalink * embed * save * parent * report * give award * reply [-]onan 1 point2 points3 points 34 minutes ago (0 children) I think this is what putting up a good fight looks like. The kowtowing version of CSAM prevention would be just telling the government, "Sure, you can look at everything whenever you want." The fighting to limit that access looks more like, "If we confirm matches against known hashes, and it's more than 30 images, and we've manually confirmed it ourselves first, then we'll tell you." Obviously the more straightforward way to fight back would be to just categorically tell the government to pound sand. But that runs the risk of backfiring, and getting new laws passed that mandate the "look at everything all the time" approach. * permalink * embed * save * parent * report * give award * reply [-]WhatTheHomePod[S] 2 points3 points4 points 2 hours ago (0 children) Well if you look like the structure. It's exactly a perfect spy phone. * permalink * embed * save * parent * report * give award * reply [-]LowConnection9178 1 point2 points3 points 44 minutes ago (1 child) Why anyone would use relay after the scanning announcement is beyond me. Apple cannot be trusted. * permalink * embed * save * report * give award * reply [-]nophixel 0 points1 point2 points 34 minutes ago (0 children) I immediately stopped testing after the scanning came to light. Such a shame. * permalink * embed * save * parent * report * give award * reply [-]Ok_Cartoonist8020 3 points4 points5 points 7 hours ago (1 child) Quick question from a layman. Does this mean I should be telling any of my friends on the beta to turn off this feature as they may or may not be using a vpn? * permalink * embed * save * report * give award * reply [-]WhatTheHomePod[S] 6 points7 points8 points 6 hours ago (0 children) Like I said in the body, there is no issues with VPN and there is a workaround but that's only working in Safari, In-App Safari doesn't work. * permalink * embed * save * parent * report * give award * reply [-]BeskarSteelPanther 3 points4 points5 points 4 hours ago (0 children) Did Apple fire all of its testers like Microsoft did? * permalink * embed * save * report * give award * reply [-]YeetCacti 0 points1 point2 points 1 hour ago (0 children) smh..Apple has no idea what they're doing anymore. * permalink * embed * save * report * give award * reply [+]phant-m comment score below threshold-22 points-21 points-20 points 9 hours ago (4 children) You mean this beta feature that is still in beta isn't bug free? * permalink * embed * save * report * give award * reply [-]BattlefrontIncognito 15 points16 points17 points 7 hours ago (3 children) Apple could've just made a modern VPN with connections made at a machine code level so that traffic can't be logged, they already have the VPN protocol enabled on their phones. But I guess AppleVPN would be too private. Which is a shame because this could've been an opportunity to introduce your normal user to the wonders of VPNs * permalink * embed * save * parent * report * give award * reply [-]wise_quote 4 points5 points6 points 5 hours ago (1 child) The problem with VPNs is that you still have to trust the provider which currently in Apple's case not a lot do in the privacy community outside of r/privacy and similar communities I see outrage but it'll probably pass like the time Apple throttled the iPhone batteries sure everyone was pissed but a few months later everyone was ok again. They lie about their batteries they lie about privacy yet I still buy their fucking products still better privacy than google though. * permalink * embed * save * parent * report * give award * reply [-]BattlefrontIncognito -2 points-1 points0 points 5 hours ago (0 children) No double that privacy people would stay away, I doubt privacy people would even pay for iCloud+. What it would've done was being VPNs to your average person * permalink * embed * save * parent * report * give award * reply [-]teamcoyotes1 3 points4 points5 points 7 hours ago (0 children) It is made like this just so they can know your address and everything just in case Apple sees you trying to shop for non-Apple products so they can bribe the cops to raid your house calling you a pedo... I hope that's just a joke that I made and they won't actually do that. * permalink * embed * save * parent * report * give award * reply [-]HotFroyos -1 points0 points1 point 6 hours ago (0 children) For me the IP that is shown under Reflexive connectivity is only a approximate location, seems to be working fine * permalink * embed * save * report * give award * reply [+]SwingRedLine comment score below threshold-12 points-11 points-10 points 6 hours ago (15 children) I don't see the value of this service at all. I'd rather advertisers try to fingerprint me than give this information to Apple or an Apple subcontractor after what Apple has pulled lately * permalink * embed * save * report * give award * reply [-]MusicFirstAudio 11 points12 points13 points 6 hours ago (13 children) That's because you don't understand it. Even though it's pretty simple. * permalink * embed * save * parent * report * give award * reply [+]SwingRedLine comment score below threshold-12 points-11 points-10 points 6 hours ago (12 children) It's a proxy/vpn. Meh. Tell me why I should use it instead of a real vpn * permalink * embed * save * parent * report * give award * reply [-]goofball_jones[] 9 points10 points11 points 5 hours ago (11 children) It's not, which is why the guy you replied to is right, you don't understand it. And it's still in beta, so bug reporting like the OP did is vital. And the statement of "I'd rather advertisers try to fingerprint me" is rather telling. Then perhaps move away from Apple and go to Android and Windows, I'm sure your privacy is MUCH better on those platforms /s * permalink * embed * save * parent * report * give award * reply [+]SwingRedLine comment score below threshold-12 points-11 points-10 points 5 hours ago (9 children) Oh holy one, please explain to me how it's not proxying or tunneling my traffic * permalink * embed * save * parent * report * give award * reply [-]samhw 9 points10 points11 points 5 hours ago (8 children) How are you so arrogant despite not understanding any of this at all? The implementation of Apple Private Relay is extremely similar to how Tor works, so it's probably easier to go and read one of the many explainers about that. They use ingress and egress proxies, where the former knows the source but not the destination, and the latter knows the destination but not the source. * permalink * embed * save * parent * report * give award * reply [+]SwingRedLine comment score below threshold-6 points-5 points-4 points 5 hours ago (7 children) Wait so it IS a proxy, after all * permalink * embed * save * parent * report * give award * reply [-]samhw 7 points8 points9 points 5 hours ago (6 children) It's a system composed of several proxies (not a proxy), not all of them controlled by Apple, and where none of them knows the source and destination of your traffic. It's not comparable to a VPN, it's much more comparable to the Tor network. * permalink * embed * save * parent * report * give award * reply [-]leeeeeer -1 points0 points1 point 4 hours ago (5 children) Is it better than Tor in any way? I'm just wondering why Apple wouldn't instead invest in improving Tor infrastructure which would give their customers better privacy through the larger anonymity set. * permalink * embed * save * parent * report * give award * reply [-]samhw 4 points5 points6 points 4 hours ago (0 children) I think the main advantage is that Apple controls all the ingress nodes, as I understand it. This means that they can't be controlled by any state entity. With Tor there are very very credible suspicions that entities like the NSA control enough nodes to perform timing attacks in order to deanonymise users. However, it does mean you have to trust apple not to also control the egress nodes - but (a) I think it's been quite well-established that the egress nodes are run by other known companies, and (b) in any case I think people trust Apple a lot more than state entities. So those are the issues with using Tor, as opposed to simply doing this. If Apple spent money on adding to Tor's infrastructure, then they, as well as the NSA, would simply increase the suspicion of large entities controlling large numbers of nodes. It's a tough one. There are also probably minor ease-of-use benefits with doing it this way. Apple running the network probably makes it easier for them to integrate, since they control what the technical implementation looks like, and they are also in control of the uptime (which is important for reputational reasons). If you want to use Tor, you can do that by running it as a SOCKS proxy on your phone, I believe. * permalink * embed * save * parent * report * give award * reply [-]Umi_ushi 2 points3 points4 points 2 hours ago (3 children) through the larger anonymity set. Maybe I am misunderstanding your point, but are you suggesting that there are more Tor users than Safari users? Safari has 18% market share on computers and 25% on phones worldwide. * permalink * embed * save * parent * report * give award * reply continue this thread [-][deleted] 2 hours ago (2 children) [deleted] [-]WhatTheHomePod[S] 0 points1 point2 points 2 hours ago (1 child) Because I don't test on camera and WebKit doesn't work like that. Deep into the topic instead of having your mouth ready. I have a lot of patience but not for people like this. Do your own research. It's a warning for people using this, not to have a discussion wish people who doesn't check themselves. * permalink * embed * save * report * give award * reply [-]NotAnotherMoron2 0 points1 point2 points 29 minutes ago (0 children) Apple will need to address this for the masses but anyone concerned with privacy should already have WebRTC disabled in all browsers. Instructions are available lower down the page here: (https:// www.privacytools.io/browsers/). For good measure enable WebRTC bocking in uBlock Origin settings as well. I've had it blocked forever and if it's breaking scripts or pages as a result I really don't care or notice. * permalink * embed * save * report * give award * reply [+]MusicFirstAudio comment score below threshold-12 points-11 points -10 points 6 hours ago (9 children) It's a beta dumb fuck. Plus this entire report is a crock of shit. But of course the idiots jump on the bandwagon. * permalink * embed * save * report * give award * reply [-]goofball_jones[] 3 points4 points5 points 5 hours ago (2 children) Well, he knows it's in beta, and he sent in a bug report, but it's good to get out on front of this so we can keep an eye on it. Apple had prided itself in privacy so when they do something like this, people need to put their feet to the fire like they are with the photo-scanning for child abuse. Hold them accountable. Make them adhere to their statements. You can't do this with Android or Windows because they tell you right in their terms of service "hey, we're watching everything you do." Apple has said they won't do that....so when this shit happens people need to scream it from the rooftops. * permalink * embed * save * parent * report * give award * reply [-]kent2441 1 point2 points3 points 3 hours ago (0 children) Did he know it's in beta? He didn't say anything about it being in beta until later on. * permalink * embed * save * parent * report * give award * reply [-]WhatTheHomePod[S] 0 points1 point2 points 4 hours ago (0 children) Happy cake day brother * permalink * embed * save * parent * report * give award * reply [-]WhatTheHomePod[S] 1 point2 points3 points 5 hours ago (0 children) Well, thanks. I just wanted to give the users who's already using this the disclaimer to be aware and gave them a workaround to 'solve' this. But again, thanks for calling me a dumb fuck. I'll probably know more than privacy and security then you do, lovely human. * permalink * embed * save * parent * report * give award * reply [-]JadeNB 1 point2 points3 points 5 hours ago (4 children) But this is what a beta is, right, is an opportunity for people to discover and report bugs? This seems to be working as intended on all sides, so it's not clear why you should meet this report with such hostility. * permalink * embed * save * parent * report * give award * reply [-][deleted] 5 hours ago (3 children) [deleted] [-]interawi_7 1 point2 points3 points 4 hours ago (2 children) Seems like you misread their comment. They are on your side. * permalink * embed * save * report * give award * reply [-]WhatTheHomePod[S] 0 points1 point2 points 3 hours ago (0 children) You are right, there were too many (and too many that didn't) that are just attacking me for no reason * permalink * embed * save * parent * report * give award * reply * about * blog * about * advertising * careers * help * site rules * Reddit help center * reddiquette * mod guidelines * contact us * apps & tools * Reddit for iPhone * Reddit for Android * mobile website * <3 * reddit premium * reddit coins * redditgifts Use of this site constitutes acceptance of our User Agreement and Privacy Policy. (c) 2021 reddit inc. All rights reserved. REDDIT and the ALIEN Logo are registered trademarks of reddit inc. [pixel] p Rendered by PID 64142 on reddit-service-r2-loggedout-5dcf755fd8-rmkb2 at 2021-08-28 23:01:58.999320+00:00 running cb9caca country code: US.