<![CDATA[[Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN]]>When you are in incognito mode (private tab in Opera) and use Opera "VPN" if you add a bookmark it causes connection non through VPN to this site for the image preview.

It can be easy detected by DNS leaking. (You need only DNSQuerySniffer)

  1. Run DNSQuerySniffer (as Administrator)
  2. Opera a private tab
  3. Open any site
  4. Bookmark the tab
  5. See that the site domain was resolved non through VPN so you see DNS resolve in DNSQuerySniffer.

It's a bug. PRIVACY BUG.

(Just for SEO: security bug)

]]>https://forums.opera.com/topic/34854/privacy-bug-the-creating-a-bookmark-in-a-private-tab-with-vpn-causes-connection-non-through-vpnRSS for NodeMon, 16 Mar 2026 01:03:01 GMTSat, 31 Aug 2019 14:37:49 GMT60<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 29 Jul 2020 12:02:26 GMT]]>Unbelievable, but it looks fixed. (Only the leak connections)
(v70)

]]>https://forums.opera.com/post/219457https://forums.opera.com/post/219457Wed, 29 Jul 2020 12:02:26 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Fri, 17 Jul 2020 17:15:14 GMT]]>@anonan Opera 69 probably doesn't have the fix.

]]>https://forums.opera.com/post/218101https://forums.opera.com/post/218101Fri, 17 Jul 2020 17:15:14 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Fri, 17 Jul 2020 16:41:18 GMT]]>@burnout426
Maybe.

But in Opera 69 both bugs are.

  • The connections for fetching images for the preview of a bookmark that was created in incognito tab with enabled "VPN" bypasses "VPN" – it goes through the non-incognito browser window (there "VPN" is disabled).

  • There is no favicon for a bookmark that was created in incognito mode. (It's the regression or maybe I tested it wrong last time.)

Here is the example of bookmarks that I have created in incognito mode with enabled "VPN".
(Note: I visited these sites the first time, so there is no cached favicon or DNS query. It's random sites from duckduckgo.com/?q=tokyo+site)

The leak connections:

[1]

1.png

[2]

2.png

[3]

3.png

And missed favicons for these bookmarks (1st and 3nd sites should have the favicon):

bb.png
22.png
11.png

]]>https://forums.opera.com/post/218090https://forums.opera.com/post/218090Fri, 17 Jul 2020 16:41:18 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Tue, 26 May 2020 14:12:12 GMT]]>https://blogs.opera.com/desktop/2020/05/opera-70-0-3701-0-developer-update/ has a fix for your specific issue. Please test with it to confirm.

]]>https://forums.opera.com/post/212395https://forums.opera.com/post/212395Tue, 26 May 2020 14:12:12 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 06 May 2020 19:45:54 GMT]]>Filed DNA-86289 for this.

]]>https://forums.opera.com/post/209840https://forums.opera.com/post/209840Wed, 06 May 2020 19:45:54 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 06 May 2020 19:26:37 GMT]]>In testing I think I'm able to reproduce in both Opera stable and Opera Developer.

]]>https://forums.opera.com/post/209837https://forums.opera.com/post/209837Wed, 06 May 2020 19:26:37 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 06 May 2020 17:11:41 GMT]]>@anonan said in [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN:

I did not test it in the Developer version.

It's supposed to have everything fixed in this area and Opera doesn't know of any other cases where things leak. But, if you can still find a situation where Opera leaks, then Opera would like to know. Otherwise, it's considered fixed and you'll see it fixed in Opera Stable once stable reaches 69.

]]>https://forums.opera.com/post/209790https://forums.opera.com/post/209790Wed, 06 May 2020 17:11:41 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 06 May 2020 16:11:41 GMT]]>Sorry, my previous message is about the latest release version (68), not develop (69).

you still see favicon fetches bypassing the VPN?

I have never said that. I talked only about previews (It are images for the bookmark, Opera parses the HTML for image URLs (not only img tags) and downloads them), but I have rechecked it, and the favicon is downloanig non through the incognito window too.

Opera 68:
I have created the bookmark in the incognito window with enabled "VPN", but Opera downloaded both the favicon and images for the preview through the default window, that has no enabled "VPN", so I can see HTTP connections to the site in Wireshark:
leak.png

I did not test it in the Developer version.

]]>https://forums.opera.com/post/209784https://forums.opera.com/post/209784Wed, 06 May 2020 16:11:41 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Tue, 05 May 2020 10:29:55 GMT]]>@anonan said in [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN:

The bug is this topic about is still not fixed.

In the latest Opera Developer you still see favicon fetches bypassing the VPN?

]]>https://forums.opera.com/post/209639https://forums.opera.com/post/209639Tue, 05 May 2020 10:29:55 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Mon, 04 May 2020 06:54:36 GMT]]>Yes, I was right, that fixed the bug with favicons (that were created in the incognito mode). But.

The bug is this topic about is still not fixed.

]]>https://forums.opera.com/post/209425https://forums.opera.com/post/209425Mon, 04 May 2020 06:54:36 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Sat, 28 Mar 2020 09:32:04 GMT]]>I don't think what it will fix this bug. The problem is not with favicons, but with images (that are used as a bookmark preview) that are loaded through a non incognito window.

It probably may fix this bug with favicons, but I have no desire to test it.

]]>https://forums.opera.com/post/204272https://forums.opera.com/post/204272Sat, 28 Mar 2020 09:32:04 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Tue, 24 Mar 2020 22:45:21 GMT]]>Can you test in https://blogs.opera.com/desktop/2020/03/opera-69-0-3638-0-developer-update/? There's "DNA-81409 Switch to Chromium’s favicon fetcher" in the changelog, which might help with this issue.

]]>https://forums.opera.com/post/203865https://forums.opera.com/post/203865Tue, 24 Mar 2020 22:45:21 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Sun, 24 Nov 2019 05:52:37 GMT]]>Correct. It's still being worked on.

]]>https://forums.opera.com/post/190111https://forums.opera.com/post/190111Sun, 24 Nov 2019 05:52:37 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Sat, 23 Nov 2019 19:21:06 GMT]]>It does not fixed.
65.0.3467.48

]]>https://forums.opera.com/post/190088https://forums.opera.com/post/190088Sat, 23 Nov 2019 19:21:06 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 02 Oct 2019 22:02:12 GMT]]>Partial fix in https://blogs.opera.com/desktop/changelog-for-65/#b3459.0, but there's a little more to do, so sit tight.

]]>https://forums.opera.com/post/183368https://forums.opera.com/post/183368Wed, 02 Oct 2019 22:02:12 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Thu, 26 Sep 2019 18:10:40 GMT]]>Thanks for all the details. Opera has confirmed your findings and they are investigating. I'll post if there are any updates.

]]>https://forums.opera.com/post/182893https://forums.opera.com/post/182893Thu, 26 Sep 2019 18:10:40 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 25 Sep 2019 20:19:10 GMT]]>A bit more presentable screenshot (domain of images for the previews is the same as domain of the site):
v2 site.png
This site is on HTTP so I (and ISP) can see the all content, not only IPs.

]]>https://forums.opera.com/post/182776https://forums.opera.com/post/182776Wed, 25 Sep 2019 20:19:10 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 25 Sep 2019 18:59:51 GMT]]>

DNS over HTTPS is not a decision. Absolutely.

Here is it.

site conenction.png
HTTP (TCP) connection is visible too. It is unacceptable for any good VPN.

(I have used Wireshark.)

]]>https://forums.opera.com/post/182770https://forums.opera.com/post/182770Wed, 25 Sep 2019 18:59:51 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 25 Sep 2019 18:41:37 GMT]]>@burnout426
This happens then "VPN" enabled only in a private tab. Obviously, because the process of creating of a bookmark is going in common window that is wrong.

DNS over HTTPS is not a decision. Absolutely.

DNS resolve is just a part of connection to the site, the next step is HTTP/HTTPS connection that also in this case does not go through "VPN". In this case IP of the site and a content (in case HTTP) are visible for ISP.

]]>https://forums.opera.com/post/182767https://forums.opera.com/post/182767Wed, 25 Sep 2019 18:41:37 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 25 Sep 2019 18:03:03 GMT]]>Okay. Thanks for the update. I'll test and test in Opera Developer too. Don't know if it's expected behavior or not yet though.

In Opera Developer, I'll see if opera://flags/#opera-doh makes a difference. Since the query goes over HTTPS, maybe it'll go through the VPN then. Maybe it won't though still if it's an issue with private window/normal window context where the VPN isn't on in the normal window.

I assume everything works fine if VPN is on by default and then you open a private window?

]]>https://forums.opera.com/post/182764https://forums.opera.com/post/182764Wed, 25 Sep 2019 18:03:03 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 25 Sep 2019 16:39:55 GMT]]>I opened a private tab, enable "VPN", opened a site. Connection is through "VPN". There is no log in DNSQuerySniffer about the connection to the site.

Bookmark the site:
Screenshot.png
The image for the bookmark are loaded non through "VPN".
As a result the part of the connection – DNS resolve – is showed in DNSQuerySniffer log.

]]>https://forums.opera.com/post/182747https://forums.opera.com/post/182747Wed, 25 Sep 2019 16:39:55 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 25 Sep 2019 13:55:12 GMT]]>Can you double-check that this is still the case now since the bookmarks manager now loads in the private window again when you open it from the private window?

]]>https://forums.opera.com/post/182728https://forums.opera.com/post/182728Wed, 25 Sep 2019 13:55:12 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Wed, 25 Sep 2019 11:20:58 GMT]]>Bump.

Or Opera team think that it is an appropriate behavior?

]]>https://forums.opera.com/post/182720https://forums.opera.com/post/182720Wed, 25 Sep 2019 11:20:58 GMT<![CDATA[Reply to [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN on Mon, 16 Sep 2019 05:30:53 GMT]]>

You know that search engines circumvent the VPN by default in Opera?

I don't think that is a problem.

  • It can be easily found in the options (It's not a hidden option).
  • It can be disabled (It's the important part).
  • It has benefits - you get a relevant search result (for based on your IP location) and no captcha.

The most serious thing is that Opera starts by default as a scheduled task to check for updates

I also want an option to easily disable auto-updates, for example, future Manifest V3 can break a lot of extensions that get you better privacy (not only ads blockers).

]]>https://forums.opera.com/post/181990https://forums.opera.com/post/181990Mon, 16 Sep 2019 05:30:53 GMT