• Login
    • Search
    • Categories
    • Recent
    • Tags
    • Users
    • Groups
    • Rules
    • Help

    Do more on the web, with a fast and secure browser!

    Download Opera browser with:

    • built-in ad blocker
    • battery saver
    • free VPN
    Download Opera

    [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN

    Opera for Windows
    4
    29
    30879
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A Former User
      A Former User @brz7fvuw3o last edited by A Former User

      You know that search engines circumvent the VPN by default in Opera?

      I don't think that is a problem.

      • It can be easily found in the options (It's not a hidden option).
      • It can be disabled (It's the important part).
      • It has benefits - you get a relevant search result (for based on your IP location) and no captcha.

      The most serious thing is that Opera starts by default as a scheduled task to check for updates

      I also want an option to easily disable auto-updates, for example, future Manifest V3 can break a lot of extensions that get you better privacy (not only ads blockers).

      Reply Quote 0
        1 Reply Last reply
      • A Former User
        A Former User last edited by A Former User

        Bump.

        Or Opera team think that it is an appropriate behavior?

        Reply Quote 0
          1 Reply Last reply
        • burnout426
          burnout426 Volunteer last edited by

          Can you double-check that this is still the case now since the bookmarks manager now loads in the private window again when you open it from the private window?

          Reply Quote 0
            A Former User 1 Reply Last reply
          • A Former User
            A Former User @burnout426 last edited by A Former User

            I opened a private tab, enable "VPN", opened a site. Connection is through "VPN". There is no log in DNSQuerySniffer about the connection to the site.

            Bookmark the site:
            Screenshot.png
            The image for the bookmark are loaded non through "VPN".
            As a result the part of the connection – DNS resolve – is showed in DNSQuerySniffer log.

            Reply Quote 2
              1 Reply Last reply
            • burnout426
              burnout426 Volunteer last edited by burnout426

              Okay. Thanks for the update. I'll test and test in Opera Developer too. Don't know if it's expected behavior or not yet though.

              In Opera Developer, I'll see if opera://flags/#opera-doh makes a difference. Since the query goes over HTTPS, maybe it'll go through the VPN then. Maybe it won't though still if it's an issue with private window/normal window context where the VPN isn't on in the normal window.

              I assume everything works fine if VPN is on by default and then you open a private window?

              Reply Quote 0
                A Former User 1 Reply Last reply
              • A Former User
                A Former User @burnout426 last edited by A Former User

                @burnout426
                This happens then "VPN" enabled only in a private tab. Obviously, because the process of creating of a bookmark is going in common window that is wrong.

                DNS over HTTPS is not a decision. Absolutely.

                DNS resolve is just a part of connection to the site, the next step is HTTP/HTTPS connection that also in this case does not go through "VPN". In this case IP of the site and a content (in case HTTP) are visible for ISP.

                Reply Quote 2
                  A Former User 1 Reply Last reply
                • A Former User
                  A Former User @Guest last edited by A Former User

                  DNS over HTTPS is not a decision. Absolutely.

                  Here is it.

                  site conenction.png
                  HTTP (TCP) connection is visible too. It is unacceptable for any good VPN.

                  (I have used Wireshark.)

                  Reply Quote 2
                    1 Reply Last reply
                  • A Former User
                    A Former User last edited by

                    A bit more presentable screenshot (domain of images for the previews is the same as domain of the site):
                    v2 site.png
                    This site is on HTTP so I (and ISP) can see the all content, not only IPs.

                    Reply Quote 0
                      1 Reply Last reply
                    • burnout426
                      burnout426 Volunteer last edited by burnout426

                      Thanks for all the details. Opera has confirmed your findings and they are investigating. I'll post if there are any updates.

                      Reply Quote 0
                        1 Reply Last reply
                      • burnout426
                        burnout426 Volunteer last edited by

                        Partial fix in https://blogs.opera.com/desktop/changelog-for-65/#b3459.0, but there's a little more to do, so sit tight.

                        Reply Quote 0
                          1 Reply Last reply
                        • A Former User
                          A Former User last edited by leocg

                          It does not fixed.
                          65.0.3467.48

                          Reply Quote 0
                            1 Reply Last reply
                          • burnout426
                            burnout426 Volunteer last edited by

                            Correct. It's still being worked on.

                            Reply Quote 0
                              1 Reply Last reply
                            • burnout426
                              burnout426 Volunteer last edited by

                              Can you test in https://blogs.opera.com/desktop/2020/03/opera-69-0-3638-0-developer-update/? There's "DNA-81409 Switch to Chromium’s favicon fetcher" in the changelog, which might help with this issue.

                              Reply Quote 0
                                1 Reply Last reply
                              • A Former User
                                A Former User last edited by A Former User

                                I don't think what it will fix this bug. The problem is not with favicons, but with images (that are used as a bookmark preview) that are loaded through a non incognito window.

                                It probably may fix this bug with favicons, but I have no desire to test it.

                                Reply Quote 0
                                  1 Reply Last reply
                                • A Former User
                                  A Former User last edited by A Former User

                                  Yes, I was right, that fixed the bug with favicons (that were created in the incognito mode). But.

                                  The bug is this topic about is still not fixed.

                                  Reply Quote 1
                                    burnout426 1 Reply Last reply
                                  • burnout426
                                    burnout426 Volunteer @Guest last edited by

                                    @anonan said in [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN:

                                    The bug is this topic about is still not fixed.

                                    In the latest Opera Developer you still see favicon fetches bypassing the VPN?

                                    Reply Quote 0
                                      A Former User 1 Reply Last reply
                                    • A Former User
                                      A Former User @burnout426 last edited by A Former User

                                      Sorry, my previous message is about the latest release version (68), not develop (69).


                                      you still see favicon fetches bypassing the VPN?

                                      I have never said that. I talked only about previews (It are images for the bookmark, Opera parses the HTML for image URLs (not only img tags) and downloads them), but I have rechecked it, and the favicon is downloanig non through the incognito window too.

                                      Opera 68:
                                      I have created the bookmark in the incognito window with enabled "VPN", but Opera downloaded both the favicon and images for the preview through the default window, that has no enabled "VPN", so I can see HTTP connections to the site in Wireshark:
                                      leak.png

                                      I did not test it in the Developer version.

                                      Reply Quote 0
                                        burnout426 1 Reply Last reply
                                      • burnout426
                                        burnout426 Volunteer @Guest last edited by

                                        @anonan said in [Privacy bug] The creating a bookmark in a private tab with VPN causes connection non through VPN:

                                        I did not test it in the Developer version.

                                        It's supposed to have everything fixed in this area and Opera doesn't know of any other cases where things leak. But, if you can still find a situation where Opera leaks, then Opera would like to know. Otherwise, it's considered fixed and you'll see it fixed in Opera Stable once stable reaches 69.

                                        Reply Quote 0
                                          1 Reply Last reply
                                        • burnout426
                                          burnout426 Volunteer last edited by

                                          In testing I think I'm able to reproduce in both Opera stable and Opera Developer.

                                          Reply Quote 0
                                            1 Reply Last reply
                                          • burnout426
                                            burnout426 Volunteer last edited by

                                            Filed DNA-86289 for this.

                                            Reply Quote 0
                                              1 Reply Last reply
                                            • First post
                                              Last post

                                            Computer browsers

                                            • Opera for Windows
                                            • Opera for Mac
                                            • Opera for Linux
                                            • Opera beta version
                                            • Opera USB

                                            Mobile browsers

                                            • Opera for Android
                                            • Opera Mini
                                            • Opera Touch
                                            • Opera for basic phones

                                            • Add-ons
                                            • Opera account
                                            • Wallpapers
                                            • Opera Ads

                                            • Help & support
                                            • Opera blogs
                                            • Opera forums
                                            • Dev.Opera

                                            • Security
                                            • Privacy
                                            • Cookies Policy
                                            • EULA
                                            • Terms of Service

                                            • About Opera
                                            • Press info
                                            • Jobs
                                            • Investors
                                            • Become a partner
                                            • Contact us

                                            Follow Opera

                                            • Opera - Facebook
                                            • Opera - Twitter
                                            • Opera - YouTube
                                            • Opera - LinkedIn
                                            • Opera - Instagram

                                            © Opera Software 1995-