How does Firefox know my IP address when I'm using a VPN and how does it know what wifi networks are near me.
I said yes to a box requesting my location. Firefox used information to send to Google to determine my location. At the time, I was using my VPN which masks my IP address. How did Firefox get the information to send to Google to determine my exact location and how do I find out what information Firefox has stored on me. The privacy policy says that they do not retain information any longer than is necessary to deliver the requested service. Can you be more specific. Obviouly, Firefox had data stored about my computer in order to allow google to determine my location.
All Replies (4)
Interesting, because our desktop computers do not have GPS, right? According to an article on MDN:
Firefox includes support for locating you based on your WiFi information using Google Location Services. In the transaction between Firefox and Google, data is exchanged including WiFi Access Point data, an access token (similar to a 2 week cookie), and the user's IP address.
Using geolocation - Web APIs | MDN (footnote [1] under the Browser Compatibility section)
I don't know what IP address is being sent, your current public IP (VPN) or some other IP.
I searched in the source code but (not being a programmer) I couldn't track down out how Firefox gets a list of wi-fi access points on a Windows system. Probably there is a system call that fetches it.
This post is old but it needs answering in case others need answers. Mozilla has not addressed the IP Security Leak with VPN as of the day if this post. To hide your IP address you need to do 2 things - disable IP6 in Network and Sharing Center for every network (LAN and WiFi).
Then in FF's address bar, type: about:config Ignore the Avoid your warranty and uncheck show this warning next time. Then click on "I'll be careful, I promise". (I know a bit stupid)
Then in the search box type in: media.peerconnection.enabled The default is TRUE, change it to FALSE by double-clicking on it.
Then test your browser at: ipleak.net
One thing worth noting. WebRTC is what Mozzila will be forcing plugin developers to use for webextensions. With WebRTC disabled, all your plugins will stop working on "Future" firefox versions. To avoid this problem, use older versions of Firefox. Hopefully, Mozilla will see the need to address this security issue quickly.
Everyone should always and under all circumstances hide their IP on public networks to make it more difficult from being hacked.
Hi ice_blue, there are numerous preferences under media.peerconnection.* in Firefox 48, so there may be a less brute force way to accomplish what you want to accomplish either now or in the future. These pages have some information on these preferences, but haven't researched or tested the individual options myself: