IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

Posted by lapcat 3 days ago

IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay(mysk.blog)

181 points | 38 commentspage 2

selvum 2 days ago|

[dead]

glub103011 3 days ago||

[dead]

walrus01 3 days ago|

Weird advertising on site: "Psylo is our privacy-first browser for iOS and iPadOS"

Correct me if I'm wrong but doesn't Apple disallow any actual 3rd party browser engines? Like, any browser on iOS that isn't the standard safari is just a skin on top of webkit/safari. It doesn't exactly inspire confidence that some third party browser will be able to implement things any better (as compared to like, running Firefox on Android, which actually implements the firefox browser engine).

hnav 3 days ago||

My read is that the main value prop is that they configure the WKWebView to not share any state cross-tabs. In the post they state that they've disabled DNS prefetch, WebTransport and WebAuthn so obviously they're hardening beyond what ships in Safari (though some of this may already be covered by lockdown mode).

internet2000 3 days ago|||

Networking is not handled by the rendering engine, which is an only a part of a browser app. That’s a credible claim.

TingPing 3 days ago|||

Networking is very core to webkit of course. But it has apis to block and modify requests.

afavour 3 days ago|||

But WKWebView does handle its own networking. You’re able to implement block lists, just the same as you can via browser plugin, but in this instance networking definitely is handled by WebKit.

Aaargh20318 3 days ago||

Networking is handled by WebKit but based on the article it looks like the app configures itself as a HTTP proxy for WebKit and uses that to handle networking.

inigyou 3 days ago||

So it can't do anything about proxy leaks.

imkac 3 days ago||

[dead]