On official site of snowflake, it says volunteers will not be able to determine user’s location or any other details about your connection while using their add-on. But today I found that it can be easily get access to the IP of connected user, just simply by open resource monitor (for Windows system) and find the related item in Network Activities. Here is an example:
There is WebRTC traffic between snowflake-user and volunteer, which can be monitored. Thus users see the IP of volunteers and volunteers see IPs of users. A broker knows all involved IPs…
You are correct. Just think about how it works. I run a standalone Snowflake.
The proxy contacts the broker with an offer of service.
The user contacts the broker for a request for service.
The broker sends both sides the details of offer/request and is now out of the loop.
The proxy and user do their thing to establish a connection if at all.
Once the connection is established, the user contacts the proxy directly with traffic.
The proxy sends this traffic to one of the two bridges to the Tor system.
The return traffic comes back to the proxy which then sends it to the user.
This continues until the user disconnects.
How else can both sides NOT know each other’s IP?
My description about how it works is over simplified on purpose.
