|
Title: IP leak from MetaMask wallet Post by: PawGo on February 09, 2022, 10:35:54 AM Last week, researchers at OMNIA Protocol published what they considered to be a critical privacy vulnerability in MetaMask. By sending an NFT to users of a mobile MetaMask wallet they were able to obtain user IP addresses when MetaMask fetched IP address data from a centralized server.
https://medium.com/@convexlabs/this-nft-logs-your-ip-address-7f6f9cf2376e Title: Re: IP leak from MetaMask wallet Post by: baro77 on February 09, 2022, 11:03:13 AM It seems appropriate here to cite a MetaMask "audit" by Matthew Green: https://blog.cryptographyengineering.com/2022/01/14/an-extremely-casual-code-review-of-metamasks-crypto/ Title: Re: IP leak from MetaMask wallet Post by: DaveF on February 09, 2022, 12:50:33 PM Sooo...
We now know that using crypto with an online computer is not that secure. We now know that web browsers and plugins are not that secure We now know that running something like MetaMask that can connect to everything anyplace is not that secure Oh, wait we knew all those things already... The only new(ish) info is that MetaMask might be a bit poorly written and has not had a real security audit. -Dave Title: Re: IP leak from MetaMask wallet Post by: Accardo on February 12, 2022, 03:14:29 AM The team behind OMNIA protocol disclosed many ways of obtaining other people's IP through Open sea website. Isn't it threatening to the general public and a lay man if everyone can now extract people's IP for malicious reason? Because, the Idea is understandable even to those who are not into tech to test and try. Well, the Meta-mask team have been aware of such a loop hole without defining another method to secure their platform. They are a lot of platforms that are like Meta mask so people should move on to a more decentralized computers or networks for safety.
|