Jump to content

<!>PSA<!> PIA IPv6 Address Leak

I am using a Pixel 2 with Android 10 and the latest security update installed as well as browsers Chrome and Brave. I have discovered that the latest version of PIA's VPN app leaks your IPv6 address to Google's search results page. The page located me down to the cardinal direction of town I live in. It said it got my location from my internet address. I checked with ipchicken.com and I had the correct address.

 

I checked the settings of the PIA app and there is one called "Aggressive IPv6 blocking" and says it's required for Android version below 5. I turned this on and I got the correct location for the VPN server I was connected to in the results page so that tells me Google was using my IPv6 address.

 

PIA advertises having built in IPv6 leak protection that's always on and this has never happened to me in the 1.5 years I've been using it so something has changed recently.

 

I e-mailed PIA about it but they seem satisfied that enabling aggressive IPv6 blocking fixed my issue and brushed me away despite an untold number of users who think their IPv6 address is safe with that setting off which implies it's only needed for versions of Android below 5

 

I checked both Chrome and Brave and both have me the same result. How does it look for y'all?

Link to comment
Share on other sites

Link to post
Share on other sites

hmm I will need to look into this, for my own interests, I have been using PIA for over 5 years now with no issue.

Can you share your findings?, leave out any private info of course.

COMMUNITY STANDARDS   |   TECH NEWS POSTING GUIDELINES   |   FORUM STAFF

LTT Folding Users Tips, Tricks and FAQ   |   F@H & BOINC Badge Request   |   F@H Contribution    My Rig   |   Project Steamroller

I am a Moderator, but I am fallible. Discuss or debate with me as you will but please do not argue with me as that will get us nowhere.

 

Spoiler

  

 

Character is like a Tree and Reputation like its Shadow. The Shadow is what we think of it; The Tree is the Real thing.  ~ Abraham Lincoln

Reputation is a Lifetime to create but seconds to destroy.

You have enemies? Good. That means you've stood up for something, sometime in your life.  ~ Winston Churchill

Docendo discimus - "to teach is to learn"

 

 CHRISTIAN MEMBER 

 

 
 
 
 
 
 

 

Link to comment
Share on other sites

Link to post
Share on other sites

I'm actually gonna try IPVanish right now, I'll post back with the results ASAP.

Main Rig:-

Ryzen 7 3800X | Asus ROG Strix X570-F Gaming | 16GB Team Group Dark Pro 3600Mhz | Corsair MP600 1TB PCIe Gen 4 | Sapphire 5700 XT Pulse | Corsair H115i Platinum | WD Black 1TB | WD Green 4TB | EVGA SuperNOVA G3 650W | Asus TUF GT501 | Samsung C27HG70 1440p 144hz HDR FreeSync 2 | Ubuntu 20.04.2 LTS |

 

Server:-

Intel NUC running Server 2019 + Synology DSM218+ with 2 x 4TB Toshiba NAS Ready HDDs (RAID0)

Link to comment
Share on other sites

Link to post
Share on other sites

Untitled.thumb.png.34fb48fac519295bfa279daac7fab3d6.png

 

It looks like IPVanish have their DNS servers set to not use IPv6 at all. The IP Address in the screenshot is from IPVanish, its not my real address.

 

Main Rig:-

Ryzen 7 3800X | Asus ROG Strix X570-F Gaming | 16GB Team Group Dark Pro 3600Mhz | Corsair MP600 1TB PCIe Gen 4 | Sapphire 5700 XT Pulse | Corsair H115i Platinum | WD Black 1TB | WD Green 4TB | EVGA SuperNOVA G3 650W | Asus TUF GT501 | Samsung C27HG70 1440p 144hz HDR FreeSync 2 | Ubuntu 20.04.2 LTS |

 

Server:-

Intel NUC running Server 2019 + Synology DSM218+ with 2 x 4TB Toshiba NAS Ready HDDs (RAID0)

Link to comment
Share on other sites

Link to post
Share on other sites

There. I just did this a few minutes ago and it's still leaking my IPv6 address without aggressive IPv6 blocking.

Screenshot_20200327-164140.png

Link to comment
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×