Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DNS Leak When Using Socks5 Proxy #18759

Closed
jimsmt opened this issue Oct 14, 2021 · 6 comments
Closed

DNS Leak When Using Socks5 Proxy #18759

jimsmt opened this issue Oct 14, 2021 · 6 comments
Labels
closed/duplicate Issue has already been reported OS/Desktop

Comments

@jimsmt
Copy link

jimsmt commented Oct 14, 2021

Description

Brave is leaking local DNS when using socks proxy

Steps to Reproduce

  1. Use the SwithcyOmega extension to set proxy to a local socks5 proxy
  2. Vist https://browserleaks.com/dns to test

Actual result:

Results show that local DNS is leaked

Brave version (brave://version info)

Brave | 1.30.89 Chromium: 94.0.4606.81 (Official Build) (64-bit)
Revision | 5a03c5f1033171d5ee1671d219a59e29cf75e054-refs/branch-heads/4606@{#1320}
OS | Windows 10 Version 1809 (Build 17763.2237)

Other Additional Information:

  • Is the issue reproducible on the latest version of Chrome?
    No, tested on latest version of Chrome and other Chromium based browsers
@jimsmt
Copy link
Author

jimsmt commented Oct 14, 2021

Also tested on latest lightly version: Nightly v1.33.6, same issue

@jimsmt
Copy link
Author

jimsmt commented Oct 14, 2021

By using wireshark to analyse traffic when using Brave browser with socks5 proxy, I found that Brave is sending UDP DNS lookup request directly to the server in my computer's DNS setting, which is very horrible, especially for a browser mainly focused on PRIVACY

@jimsmt
Copy link
Author

jimsmt commented Oct 14, 2021

I can confirm that this issue exists from version 1.17 to latest 1.33, version older than 1.16 doesn't have this problem

@rebron rebron added the needs-more-info The report requires more detail before we can decide what to do with this issue. label Oct 19, 2021
@rebron
Copy link
Collaborator

rebron commented Oct 28, 2021

Hi @neeythann What do you have set for your DNS settings in brave://settings/security
Are you using a custom provider in that drop down list for DoH or something else?

@neeythann
Copy link

Hi @rebron , I believe the fix is already on #19070

@diracdeltas diracdeltas added release-notes/include closed/duplicate Issue has already been reported and removed needs-more-info The report requires more detail before we can decide what to do with this issue. release-notes/include labels Oct 28, 2021
@diracdeltas
Copy link
Member

thanks, i will close as a dupe of #19070

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
closed/duplicate Issue has already been reported OS/Desktop
Projects
None yet
Development

No branches or pull requests

4 participants