a Virtual Private Network is a private network that is built upon a public network, typically using encryption for to secure the private communication.

learn more… | top users | synonyms

3
votes
3answers
1k views

How do a VPNs route SSL traffic and do they compromise security?

If my understanding of how VPNs operate is correct, all traffic between me and the Internet at-large is routed through the VPN's servers. So an attacker would only be able to see encrypted traffic ...
3
votes
3answers
2k views

How can I make it more difficult for a user to create multiple accounts?

I would like to know the best way to increase security on a website so that the a single user can't create multiple accounts. What all of a user can be traced? I'm thinking: IP address Mac address ...
3
votes
2answers
409 views

Would our company system be more secure using a VPN?

I'm currently building a back-office system for our company [for internal use] that will manage our customers, accounts etc (not interested in don't reinvent the wheel comments today, thank you!). I'm ...
3
votes
3answers
218 views

Is a VPN really secure at the VPN providers side? [closed]

Please forgive my basic ignorance regarding a VPN connection. As I understand it, a VPN connection encrypts all the data between my computer and the VPN provider. Thus preventing my ISP from seeing ...
3
votes
3answers
10k views

Understanding VPNs : How VPNs can be used for anonymization?

Previously, I asked the question Why is it difficult to catch “Anonymous” or “Lulzsec” (groups)? I understood every answer except the VPN thing. Its because I never knew what VPNs were. Any how that ...
3
votes
3answers
2k views

What utilities exist to brute force a username and password?

I'm trying to persuade management to purchase two factor authentication for securing VPN and terminal server access. I've made significant progress by demoing TSGrinder, but would like to list other ...
3
votes
3answers
491 views

Privacy and VPN - does employer's VPN still log activity when I am connected by wifi?

A company I work for wanted to use a VPN client called Junos Pulse to connect to their file server. I am on my personal computer, and connected to my personal wifi. I was not using their VPN for ...
3
votes
2answers
147 views

Two VPNs — full anonymity?

Lets assume the following set-up: VPN A in e.g. Russia VPN B in e.g. Israel Both registered through a one-time email and payed via Bitcoin A brand-new notebook with a virtual machine VPN A is ...
3
votes
2answers
2k views

Does a VPN hide what URLs I visit?

It's clear that someone listening on a network could still find out what website I visit over HTTPS (as discussed here) but what about when surfing in a VPN? What exactly can the underlying network ...
3
votes
3answers
120 views

How to spoof my IP address to JavaScript and other security concerns

Many websites require JavaScript. However, enabling JS means that a website can run a JS snippet to retrieve the user's IP address (even if they are behind a proxy or VPN). So, how can I (the user) ...
3
votes
1answer
871 views

What is a DNS leak?

I'm planning on getting a VPN service (probably Privateinternetaccess) and read that it is imperative to plug DNS leaks. The only information I found on google describing what these are is here and I ...
3
votes
1answer
1k views

I'm using a Cisco ASA as a VPN endpoint. Where do the VPN clients get firewalled?

(Is this too application specific? It seems like a reasonable question that would be useful to other people...) So, I've got this ASA in front of a network that I didn't set up. It's been ...
3
votes
1answer
92 views

IPsec: Is AH in tunnel mode secure?

I have a site-to-site IPsec VPN which was performing poorly (10 -20% upload/download speeds as a percentage of available WAN circuit bandwidth) when using ESP in tunnel mode with DES encryption and ...
3
votes
4answers
185 views

Is password + second factor more secure than public key auth now? (SSH)

I ask this question because, I think, we now can reasonably assume the following: NSA can break VPN and SSH: This is stated many times in the unclassified slides. Also, GCHQ has demonstrated (and ...
3
votes
1answer
963 views

If I connect to VPN through proxy, who can see what?

I try to understand what happens when I use an HTTP(S) proxy in my OpenVPN client configuration. What's the advantage of an HTTPS proxy over plain HTTP? In any case the encryption takes place on the ...
3
votes
2answers
2k views

Hiding and faking my location?

I read this: Reveal the True IP of a User I am using Hola Unblocker to hide my IP address. This appears to work when I go to netflix as the site treats me as a US resident (which I am not). This ...
3
votes
1answer
14k views

OpenVPN Tap vs Tun Mode [closed]

I would like to know practical difference between TAP and TUN mode when use with OpenVPN. When to use TAP and When to use TUN ? What types of traffic will pass with both mode ?
3
votes
1answer
319 views

Is OpenVPN secure if both the certificate and private key, are publicly known?

My ISP is rubbish and the state of the internet in the UK seems to be heading to 1984. I've started looking at VPNs and stumbled on IPredator as a cheapy test. It gives you the option of OpenVPN and ...
3
votes
2answers
468 views

VPN Appliance Placement Options

I'm currently looking to implement a VPN solution (based on a Checkpoint Connectra) purely to provide remote access to staff (no site-to-site, or customer access), but the one design decision I can't ...
3
votes
1answer
72 views

Is WebRTC still enabled in Google Chrome Incognito/ FF Private mode?

WebRTC can leak your IP address, even though you are using a VPN, from what I learn here. My question is, if I am using Google Chrome Incognito/ FF Private mode along with VPN, am I protected ...
3
votes
2answers
164 views

Can First Hop Man in the Middle be Defeated with TOR or VPN?

I was reading this article about a certain in flight WiFi provider issuing fake SSL certificates for Google. This doesn't really surprise me all that much since I'm well aware of the concept of ...
3
votes
1answer
247 views

My Ipv6 is under attack by the smurf6?

When I go to whatsmyip.org under my host name I get "Your.Ipv6.Is.Under.Attack.By.The.Smurf6.Info". What does this mean? I'm using private internet access as my VPN so I'm guessing PIA is under some ...
3
votes
1answer
2k views

How can I detect if someone is using an ssh tunnel as a proxy to connect to a VPN?

I've got an SSH server setup in a remote location, which I use to tunnel traffic from an android tablet. On the tablet, I have the Cisco AnyConnect app to connect to my company's VPN. We want to be ...
3
votes
1answer
455 views

SSL VPN placement strategies

I wanted to know the advantages and disadvantages of placing an SSL VPN with respect to CIA in different locations: with firewall within the internal network within the DMZ Any reference also ...
3
votes
2answers
12k views

Does portforwarding present a risk to anonymity?

AirVPN by default has all ports closed but allows port-forwarding. I think this is required for P2P. Is this a threat to anonymity (e.g. would the person at the other end of the P2P transmission know ...
3
votes
3answers
341 views

Dedicated Server in Cloud Environment - SSL Remote Login vs Dedicated VPN

Thanks for taking your time to look into this question. Background I have my website hosted in a dedicated server in the cloud. The server is a Windows 2008 R2 machine. To publish I FTP files to ...
3
votes
2answers
96 views

Stun scripts/webRTC IP leaks

I've been looking at webRTC and stun scripts in general and their ability to bypass VPN's. And have a few questions I hope someone can help me with. 1) Since using openVPN and other VPN ...
3
votes
1answer
108 views

iOS VPN profiles - are the signing certificates global? Can this be a MITM exploit?

I have installed an app on iOS to connect to a well-known VPN service. The app requests installation of a profile onto iOS, which as far as I can see are a collection of 7 certificates - 5 of which ...
3
votes
1answer
84 views

BYOD - Confirming that Devices are Approved

We currently run a Cisco ASA 5510 and a RSA token to authenticate users to our network for VPN access. The company is trying to start BYOD but would like to make sure that the PC has been approved by ...
3
votes
1answer
127 views

BYOD - Looking for Secure means of Wiping Data Remotely

We are in the process of implementing a Bring Your Own Device policy to allow our many employees to use their personal laptops and desktops (Windows platform) to VPN into our company's network. These ...
3
votes
1answer
3k views

Setup of Kali Linux for reverse shell connections over the internet

I am running Kali Linux as a VM on my Windows machine which is NAT'd behind my company network, if I wish to pen test a website for a client and believe that a reverse shell is possible, what is a ...
3
votes
0answers
278 views

Bypassing Hotel Wifi authentication using VPN [closed]

I'm currently in a hotel with pay per day WiFi, I have have logged into it a couple of times on my phone. I just turned on my VPN before logging in to the WiFi and it seems to have bypassed the hotel ...
3
votes
2answers
786 views

Is using VPN on a router more secure than using a dedicated VPN machine?

I was looking at the features of the Asus RT-N66U router and noticed the built-in VPN feature. I am currently running an OpenVPN server on an ESXi VM, but I was wondering: would using the VPN feature ...
3
votes
2answers
91 views

Would a VPN with changing configs do the same job as different VMs

I was reading this question. So my question: Would using a VPN and swapping out configuration files that change your IP address mask the same as using different VMs?
2
votes
3answers
442 views

Telnet and vpn - protected or not

I am curious how safe I am if I use telnet through a VPN-tunnel to my webhotel? I thought that the information was encrypted between my computer to the vpn-providers default-gateway. But when it ...
2
votes
4answers
10k views

Open VPN has DNS leak

Since using www.dnsleaktest.com I have found that any VPN service using Open VPN will leak my DNS through the tunnel. I have tried and tested several VPN providers, even those who say that they have ...
2
votes
3answers
302 views

Does the principle of the CRIME & BEAST attack affect VPNs?

I was recently reading about the attacks on SSL/TLS that CRIME and BEAST were able to exploit by attacking the compression in the secure session. Upon reading this I remembered that OpenVPN has ...
2
votes
3answers
402 views

Can authentication in social networks through VPN defeat the purpose of the latter?

If a person uses VPN and authenticates herself to some social network through the VPN, doesn't she lose her anonymity for as long as the VPN session is used ? By losing her anonymity, I mean that her ...
2
votes
2answers
20k views

Browsec - VPN and anonymizer

According to Browsec's website this application can be used to Bypass firewalls. So in countries like Iran it seems a useful tool to bypass censorship and filtering. For start using this application ...
2
votes
2answers
125 views

Expose the source code repository externally or allow VPN access?

To allow third party consultants, offshore developers and contractors working on the code, we can expose our Git repository externally. Or we can grant VPN access to the external parties and limit ...
2
votes
4answers
126 views

Is there a way to make Tor network your full VPN?

Is there a way to use Tor network as your VPN, proxy or something alike? I have been gone to their website but I've seen just browser (Tor Browser), bridge, relay and exit. Is there way to tell ...
2
votes
2answers
161 views

How to create an anti-flood mechanism without leaving VPN's out?

I'm trying to protect my applications from some bots that are either malfunctioning or trying to take my sites down (lots of requests from the same IPs in the logs). Every time someone requests an ...
2
votes
2answers
273 views

OpenSSL, x509: what is the correct way to picture signing authorities?

For the purposes of creating a VPN, I can't find a logical explanation of OpenSSL's/x509 scheme. I'm royally confused about these three terms, Certificate Authorities Gateway certificates End-point ...
2
votes
2answers
6k views

OpenSSL, x509: what's the significance of CN (Common Name)?

With regard to these three items Certificate Authorities (CA) Gateway certificates End-point Certificates (client-cert) What is the significance of the Common Name CN with regard to the a VPN? ...
2
votes
1answer
68 views

Double/Chained VPN - Which IP will be vissible to the VPN providers?

I am currently using a company VPN and use Juniper Network Connect on OS X to connect to this network. I'm interested in using another VPN and set this up at my internet router at home, so all ...
2
votes
4answers
224 views

Intrusion detection architecture

I want to propose an architecture of intrusion detection on the schema shown below. Should I place one IDS in front of each server, or would one be sufficient for all the servers?
2
votes
4answers
12k views

Can my company access my computer via the VPN?

The job I have requires that we have computers at home, a few years ago they had everyone install a VPN on our home personal computers (the company did not provide us with these computer) how safe if ...
2
votes
1answer
128 views

Does a VPN Provider Know My MAC Address?

I know MAC is a layer 2 address, so it's only sent to the next router in the chain. Does a VPN provider get that information when I'm connected to their service? Is their router considered the next ...
2
votes
2answers
303 views

In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?

I have mobile devices (low power, low bandwidth) need to act as a proxy for certain types of P2P encrypted data, such as voting, bitcoin payment, or other specific-purpose usage, and I want to make ...
2
votes
1answer
674 views

Why should I use easy-rsa when using OpenVPN?

Reading this guide on how to setup an OpenVPN server on a Raspberry Pi, I saw this line: 4) You don’t want anyone who finds your VPN server address to be able to connect. So next, we’re going to ...