Godlike Productions - Discussion Forum
Users Online Now: 1,697 (Who's On?)Visitors Today: 504,811
Pageviews Today: 1,006,780Threads Today: 445Posts Today: 9,413
03:47 PM


Rate this Thread

Absolute BS Crap Reasonable Nice Amazing
 

Beware, VPN users: You may not be as safe as you think you are.

 
Anonymous Coward
User ID: 73369665
United States
03/20/2017 04:15 AM
Report Abusive Post
Report Copyright Violation
Beware, VPN users: You may not be as safe as you think you are.
It’s become common practice to use virtual private networks for extra privacy and security in this era of mass surveillance, but a study published this week suggests such networks may not be as safe as they’re commonly made out to be.

In fact, because of a vulnerability known as IPv6 leakage, many of them can expose user information to prying eyes, according to a paper from researchers at Sapienza University of Rome and Queen Mary University of London.

Entitled “A Glance through the VPN Looking Glass: IPv6 Leakage and DNS Hijacking in Commercial VPN clients,” the report describes a study conducted late last year that examined 14 popular commercial VPN providers around the world.

Specifically, the researchers tested the VPNs by attempting two kinds of attacks: passive monitoring, whereby a hacker might simply collect the user’s unencrypted information, and DNS hijacking, where the hacker would redirect the user’s browser to a controlled Web server by pretending to be a popular site like Google or Facebook.

What they found was unnerving: 11 of the 14 providers leaked information, including the websites the user was accessing and the actual content of the user’s communications. The only three that didn’t were Private Internet Access, Mullvad and VyprVPN. TorGuard offered a way around the problem, they noted, but it wasn’t enabled by default.

The study also examined the security of various mobile platforms when using VPNs and found that they were much more secure when using iOS but were still vulnerable to leakage using Android.

Interactions with websites running HTTPS encryption were not leaked, the researchers noted.

So what’s to blame for the leakage? One factor is that while network operators are increasingly deploying IPv6, many VPNs still protect only IPv4 traffic, the researchers concluded.

Another problem they found, however, is that many VPN service providers still rely on outdated tunneling protocols such as PPTP that can be easily broken through brute-force attacks.

The authors point to Tor along with Linux distributions such as Tails as potential alternatives for those seeking anonymity. Enterprise VPNs, meanwhile, are largely unaffected by the leakage problems, they said.

“For the average business user of VPN technology, there is no impact,” said Steve Manzuik, director of research at Duo Security.

Users who rely on VPN services for privacy, however, should “always be aware of what protocols their systems are transmitting on and consider a VPN service that also provides coverage for those or at the very least disable those that are unused,” Manzuik advised.

It’s also worth noting that VPN technology was not designed to offer privacy so much as to offer a more secure way to connect to an organization’s internal network infrastructure via untrusted networks, he pointed out.

“Even with a well-configured VPN in place,” Manzuik said, “there are other methods to identify a user and violate their perceived privacy.”

[link to www.pcworld.com]
Anonymous Coward
User ID: 73864812
United States
03/20/2017 04:21 AM
Report Abusive Post
Report Copyright Violation
Re: Beware, VPN users: You may not be as safe as you think you are.
Bwhaha, use TOR? The government funded anonymity service.
GLP Effect

User ID: 28533111
United States
03/20/2017 04:24 AM

Report Abusive Post
Report Copyright Violation
Re: Beware, VPN users: You may not be as safe as you think you are.
When it comes to computers there's always going to be security vulnerabilities. There's no such thing as a perfectly secure network or operating system.
Pray this prayer to blind Satan:
[link to flameoflove.us (secure)]
Anonymous Coward
User ID: 57244825
Germany
03/20/2017 04:27 AM
Report Abusive Post
Report Copyright Violation
Re: Beware, VPN users: You may not be as safe as you think you are.
Eh, McFly (OP), look the date..

JUL 1, 2015 2:14 PM PT

bsflag
Anonymous Coward
User ID: 28057531
United States
03/20/2017 04:35 AM
Report Abusive Post
Report Copyright Violation
Re: Beware, VPN users: You may not be as safe as you think you are.
Eh, McFly (OP), look the date..

JUL 1, 2015 2:14 PM PT

bsflag
 Quoting: Anonymous Coward 57244825


So have things changed?
Anonymous Coward
User ID: 72016321
Finland
03/20/2017 05:35 AM
Report Abusive Post
Report Copyright Violation
Re: Beware, VPN users: You may not be as safe as you think you are.
When it comes to computers there's always going to be security vulnerabilities. There's no such thing as a perfectly secure network or operating system.
 Quoting: GLP Effect

^THIS. As long as you're on the net, there's a risk. It all depends on how valuable you are and to whom.

If you're visiting GLP and other fringe sites, NOBODY cares.

If you're trading state secrets, you're better off using hardcopies and dead-drop delivery.
Anonymous Coward
User ID: 37432490
03/20/2017 05:38 AM
Report Abusive Post
Report Copyright Violation
Re: Beware, VPN users: You may not be as safe as you think you are.
They are figuring out why VPN when I'm righteous loser
Anonymous Coward
User ID: 41039934
United States
03/20/2017 05:51 AM
Report Abusive Post
Report Copyright Violation
Re: Beware, VPN users: You may not be as safe as you think you are.
One day, someone you trolled will find you in a dark alley and smash your face.
Anonymous Coward
User ID: 73365383
United States
03/20/2017 01:53 PM
Report Abusive Post
Report Copyright Violation
Re: Beware, VPN users: You may not be as safe as you think you are.
bump





GLP