a Virtual Private Network is a private network that is built upon a public network, typically using encryption for to secure the private communication.

learn more… | top users | synonyms

38
votes
5answers
12k views

Anonymity on Facebook - how do they suggest people I should know?

I want to know how Facebook discovers the people who you know in real life or who know you. I tried the following to see if Facebook can still discover my acquaintances in real life and suggest them ...
30
votes
5answers
4k views

Is there any way for my ISP or LAN admin to learn my gmail address as a result of me logging into gmail's web interface through via their network?

The title says it all, really. I'm Alice, and I want to login to Gmail's web interface through my browser. Ike, the internet service provider, and Adam, the local network administrator, would like to ...
23
votes
7answers
28k views

How can you be caught using Private VPN when there's no logs about who you are?

I know there are 2 services of VPN (free and paid). Normally, free VPNs need money from somewhere and sometimes they can sell your information to any agency that needs it. Now, if we are talking about ...
21
votes
7answers
31k views

What is the difference in security between a VPN- and a SSL-connection?

I would like to design a client-server application where the server is placed on Internet. I assume that I could set up the client-server connection using VPN (is it using IPSec?) or using a SSL ...
21
votes
2answers
5k views

symmetric encryption session keys in SSL/TLS

This question concerns the session send and receive keys used in SSL/TLS protocol. my understanding is that this key uses symmetric encryption (DES, AES, BlowFish, etc.) I'm wondering, if ...
20
votes
8answers
22k views

How does Google Maps know where I am, when I'm using a VPN?

How does Google Maps determine my location? I've gotten some understanding of Google Maps' geolocation methods from here: http://friendlybit.com/js/geolocation-and-google-maps/ In the newer ...
19
votes
1answer
4k views

What are darknets, and how can they be used to provide security and anonymity in network communication?

One of the major problems with the internet is that it's difficult to stay anonymous while retaining the ability to communicate with a large number of people. While encryption can be done effectively ...
18
votes
4answers
1k views

IPsec (Internet Protocol Security) facts

Internet Protocol Security (IPsec) is a successor of the ISO standard Network Layer Security Protocol (NLSP). What are the advantages, disadvantages, other interesting facts regarding the protocol?
15
votes
5answers
10k views

What are the pros and cons of a VPN for privacy

Recently I have been getting more and more interested in the security (privacy and anonymity) issues of my online life. Not that I have anything to hide, or that what I do online is so interesting to ...
15
votes
6answers
2k views

Safe to make a VPN connection over coffee shop WIFI?

On my work laptop I regularly create a VPN connection that I use to remote desktop to our web server. Is this safe to do on a coffee shop where random people are connected to the same wifi network?
15
votes
8answers
2k views

How do I pick a VPN provider?

There's a lot of VPN providers out there. Some are free, some are for a fee, some report to the government, some inject ads int your HTTP, some are in other countries, you might not have any real ...
12
votes
8answers
15k views

Is it possible to Identify a VPN user by finding relations in traffic?

If I am using VPN service to protect my identity, can my traffic be used to identify all my traffic? For example, if I am accessing two services: Some service A, where I do not leave any ...
11
votes
5answers
3k views

How can encrypted traffic bypass the Great Firewall of China when it is being blocked?

The Great Firewall of China is controlled by the government and has put in place a "learning algorithm" to block unapproved encrypted traffic. The only way to get encrypted traffic through the ...
10
votes
7answers
1k views

Alternative to VPN

We have a network that is completely closed to the outside world. It needs to be. Problem is we need to remote into a server on this network once in a blue moon for diagnostics. We've discussed ways ...
10
votes
1answer
2k views

If an attacker is intercepting all of my traffic, will he be able to listen on my VPN session?

If I am a remote user, connecting to my firm from home, using IPSec VPN tunnel or through SSL, and an attacker is intercepting all of my traffic, will he be able to watch my VPN session on the clear ...
10
votes
8answers
7k views

Whats the best way to make my internet traffic anonymous?

Recently I have thought more and more about how to make my Internet traffic anonymous. Not for illegal reasons, but just to stop leaving information about me. The methods I know of to anonymize my ...
9
votes
1answer
1k views

What's are the advantages of L2TP/IPSEC over plain IPSEC?

As the title says really, my firewall (Sonicwall) can do either IPSEC or L2TP/IPSEC for VPN connections. One advantage of L2TP/IPSEC I can see is that the client computer get allocated it's own IP ...
9
votes
2answers
415 views

NFC used in place of contact based smart card two-factor authentication

My organization is trying to move away from contact based smartcards (because our hardware vendor is no longer integrating them into their current systems) to some other form of two-factor ...
8
votes
5answers
27k views

What's the difference between VPN over TCP vs UDP?

My VPN provider gives me the option between using UDP and TCP for connections. According to this site UDP is faster for short distance. I'm on the same contentent as my server, is that considered ...
8
votes
4answers
1k views

How to tunnel all network communication?

I'm looking for a way to tunnel all network communication from my laptop through another computer. I can control the software on both the laptop and the computer. The connection between them should be ...
8
votes
2answers
16k views

How safe is it to connect to Internet through VPN?

Sometimes I connect to internet using a VPN connection to be able to access the blocked websites. I've got a few questions regarding this: Are my important data (like my credentials) vulnerable to ...
8
votes
2answers
2k views

3DES vs DES for VPN connections

I'm trying to get Android 2.1 phones to connect to our corporate VPN, but it would appear they only support DES rather than 3DES for encryption. Is it safe to use DES, am I going to get hacked if I ...
8
votes
1answer
230 views

distributing files to VPN partners

suppose i've created VPN certificates for a certain VPN-RoadWarrior-Client, expressed in the files VPN-RoadWarrior-Client.key and VPN-RoadWarrior-Client.crt*, however VPN-RoadWarrior-Client is ...
8
votes
3answers
695 views

Public wifi security protocols

I should apologise first- this post could seem a lot to ask for, but I am starting to go around in circles. I am interested in securing my laptop for when I use public wireless hotspots, as I am a ...
7
votes
4answers
2k views

Can a VPN avoid the Prism Surveillance Programme?

This is causing me major concern and i can understand it is for a lot of users as well. I have nothing to hide but it's the moral aspect of snooping which has ticked me off. Can a VPN avoid the ...
7
votes
3answers
683 views

Once VPN is unplugged can work still monitor?

Work provides people from my company that 'work at home' with a separate VPN router which will be plugged into my existing home router. They have also asked for the router model, username and ...
7
votes
3answers
2k views

Why does OpenVPN require securely sharing certs with clients?

The ubuntu docs on OpenVPN have this part in the instructions: Copy the following files to the client: /etc/openvpn/ca.crt /etc/openvpn/easy-rsa/keys/hostname.crt ...
7
votes
4answers
2k views

Security considerations in providing VPN access to non-company issued computers

There have been a few people at my office that have requested the installation of DropBox on their computers to synchronize files so they can work on them at home. I have always been wary about cloud ...
7
votes
1answer
191 views

Trace large volume of web traffic, stopped at VPN

I have a web server. I recently received a large volume of web traffics, after tracking it down, it is coming over a commercial VPN provider. Is there any way to keep the tracing going, beyond the ...
7
votes
2answers
720 views

What information is exposed by simply opening an RDP connection to the internet?

Microsoft, Rackspace and other hosted providers allows people to RDP into that server. Here are a few examples: Microsoft has something called "Azure Connect" it is very easy to expose a domain ...
6
votes
4answers
1k views

How to keep secure while browsing on open wifi when SSL VPN is blocked?

After a recent visit to a hotel I was surprised to discover that they blocked access to my OpenVPN server. I often use this as a way to secure my internet traffic when I am on public wireless. ...
6
votes
4answers
3k views

Does IPSec use IKE or ISAKMP?

Does the IPSec protocol suite use IKE or ISAKMP? RFC 2828 states ISAKMP is the protocol used in IPSec to handle SAs, key management and system authentication. Other sources say IKE is the protocol ...
6
votes
7answers
19k views

Are services like Hide My Ass and UnoDNS reasonably safe to use?

While in Germany, I want to keep using my Netflix account, watch PBS, CNBC. I have found following services: A VPN: https://hidemyass.com/vpn/promo/1/5/ A DNS: http://www.unotelly.com/unodns/ I an ...
6
votes
2answers
512 views

VPNs vulnerable to MiTM because ANY certificate goes

I spoke to a sysadmin in a business center today who intended to basically perform a MiTM (as he called it) on every connection in his network because people in his office building are using VPNs and ...
6
votes
2answers
445 views

Should you use VPN if the website uses HTTPS?

If I visit the website which uses https, is there a point using an VPN? In places like coffee shop where internet is not secure. Because I think https already encrypts data?
6
votes
2answers
8k views

Do VPNs provide sufficient protection over public wireless networks?

I know that VPNs are the standard way to secure communication between a remote user and their primary network, but I've never felt entirely comfortable relying on them when using an open wireless ...
6
votes
2answers
244 views

How does the predator network prevent outside control by an attacker?

I read several articles saying some of the command and control fleet for the US robotic attack planes may have been infected with a virus. Does this command and control system communicate with the ...
6
votes
4answers
111 views

Does a separate internet connection increase security for remote users?

Our network admin has requested that a single remote employee purchase a separate modem in their house for "work" traffic. I question if this is a legitimate security practice of any kind especially ...
5
votes
6answers
2k views

Is it possible to locate Tor/proxy users? Spam is getting on my nerves

I'm managing a huge forum (over 15k posts and 500 users) and lately some guy uses a VPN (probably) to spam my forums with topics such as: "GAYGAYGAYGAYGAYGAYGAY" "FRIGHT IS GAY HAHAHAHHAA" "ADMINS ...
5
votes
4answers
6k views

Prevent network users from creating an unauthorized outgoing VPN connection to avoid network policies

Is it possible to prevent network users from creating unauthorized outgoing VPN connections to avoid network policies? Edit- What is the best way to detect unauthorized outgoing VPN connections while ...
5
votes
4answers
1k views

Ways to monitor someone's internet traffic

If some authority for whatever reason decides they want to monitor your traffic on a wired DSL connection, how would they do it besides exploiting your OS? What are the other ways assuming the OS is ...
5
votes
4answers
861 views

What's the safest way to access my US-based bank's website from within Mexico? VPN vs SSH vs HTTPS?

I will soon be moving to Mexico and living there for an extended period. During that time I will need to occasionally access my US-based bank's website. I'll always be connecting using my own laptop, ...
5
votes
5answers
14k views

Multiple VPN clients in parallel

If I were to run more than one VPN clients on my machine, simultaneously, what risks would be involved? E.g. are there technical conflicts, such that it wouldn't work right? Could there be ...
5
votes
5answers
2k views

Encryption laws in India — is it allowed to use ssh and VPN?

I have a very similar question to the one asked here (regarding Iran). However, I would like to use ssh and vpn while being in India. I found already this survey of cryptographic laws but I don't ...
5
votes
2answers
170 views

Security risks of leaving open a VPN connection

We have older firewalls that don't allow for scheduling up/down times of VPN connections, and we're working with a client that will need to connect to it at different times each day. What are the ...
5
votes
3answers
1k views

Can a VPN decrypt my SSL traffic?

Are VPNs able to decrypt SSL traffic originating from my use of services such as Gmail, Dropbox and Skype, Google Talk and HTTPS-enabled websites? I'm asking because I always turn off these and other ...
5
votes
5answers
15k views

Connect through two VPN clients

What exactly happens if I connect through two VPN clients on my laptop? For example, I connect using Cisco Any Connect, and then use another VPN client (such as HotSpot Shield or proXPN) to connect ...
5
votes
1answer
529 views

Is EAP-MSCHAP v2 secure?

I am in a process of enforcing more strict VPN access policy after learning about the attack on PPTP with MSCHAP v2. Basically this I will be disabling the traditional PPP authentication methods and ...
5
votes
1answer
454 views

What level of anonymity do VPNs provide?

When I use VPN is entire Internet usage protected or only some subset of traffic? For example, Is my IMAP email provider only going to see VPN's IP address? Is my DNS provider only going to see ...
5
votes
2answers
2k views

How effective is the iOS “Send All Traffic to VPN” setting at deterring Wifi-based attacks?

iOS version 5 and newer has a setting for VPNs to "Send All Traffic" over that VPN. I think that sending all data to a trusted VPN target would ensure privacy of all communication sent over that WiFi ...