a Virtual Private Network is a private network that is built upon a public network, typically using encryption for to secure the private communication.

learn more… | top users | synonyms

4
votes
5answers
1k views

Does using ssl matter if I am connected using a VPN? [duplicate]

Say I have an internal server that I am using for source control. If I only access that server through a VPN connection, do I still need to have SSL setup on the source control server to ensure that ...
4
votes
2answers
3k views

How does VPN encryption work?

I've been searching and searching, but I can't seem to find a good-enough technical explanation. From what I've gathered, there are two "things" able to secure VPNs: 1) Pre-Shared Key: This handles ...
4
votes
3answers
11k views

Understanding VPNs : How VPNs can be used for anonymization?

Previously, I asked the question Why is it difficult to catch “Anonymous” or “Lulzsec” (groups)? I understood every answer except the VPN thing. Its because I never knew what VPNs were. Any how that ...
4
votes
4answers
377 views

Is using Tor and VPN combination more secure?

I have been reading more about Tor and its risks to personal data leakage to the exit nodes in the chain. This last node can snatch encryption keys or log in information of websites I may have ...
4
votes
1answer
2k views

Is it a bad idea to use a domain name to access my VPN?

I'm using a VPN mainly as a way of limiting access to my servers as it has a static IP address. Is it bad practise to use a domain name to access my VPN? That is, is it fine to use vpn.example.com, ...
4
votes
2answers
1k views

Is setting up my own VPN more secure than buying from third party vendors?

When Googling for the most trusted VPN provider (for keeping your anonymity), some users say that the best way to go is to just setup your own (e.g., OpenVPN) using a dedicated server. How is this ...
4
votes
2answers
1k views

I'm being followed on the web. Explanations for mysterious behavior

Am I being stalked? I was recently doing some basic Python development scripting. Python has a nice feature where it can run a simple HTTP server that serves the contents of the local directory, on ...
4
votes
1answer
57 views

Is there anything else than DNS leaks that I should be aware of while using VPN?

Is there anything else than DNS-leaks that I should be aware of while using VPN that could potentially leak my real IP address?
4
votes
1answer
250 views

Is it a security risk for users not to logout of a website?

Is it a security risk to myself that I am not logging out of Twitter, Facebook, StackExchange, and a majority of the sites which I am using? Is there a chance for someone to hijack my session or cause ...
4
votes
1answer
91 views

BYOD - Confirming that Devices are Approved

We currently run a Cisco ASA 5510 and a RSA token to authenticate users to our network for VPN access. The company is trying to start BYOD but would like to make sure that the PC has been approved by ...
4
votes
2answers
1k views

What order is best for nesting VPNs?

if anyone is available to give me advice on a VPN situation I'd appreciate it. So the story is, I have one Swedish VPN which I trust not to log, and which I've connected to with my real IP, and I've ...
4
votes
2answers
237 views

Stun scripts/webRTC IP leaks

I've been looking at webRTC and stun scripts in general and their ability to bypass VPN's. And have a few questions I hope someone can help me with. 1) Since using openVPN and other VPN ...
4
votes
1answer
662 views

REST API communication between two Web Servers - VPN or https?

We have two servers that will be sharing data and communicate over a REST API: our main application server will communicate with the server of our client that is managing some assets. In short: Given ...
4
votes
1answer
268 views

HeartBleed and Closed Source Hardware like Cisco

With the release of heartbleed how does one protect themselves with closed source networking hardware like cisco? Especially hardware with VPN variety. Would it be best to replaced such systems with ...
4
votes
2answers
208 views

Privacy/Security with SSH Tunnels and QuickVPN

I currently use QuickVPN, however, it does not seem to route my web browsing traffic through a tunnel. Am I correct? It only opens up a tunnel for accessing windows shares and documents back at the ...
4
votes
0answers
649 views

How is it possible for threatmetrix to detect VPN? [duplicate]

Threatmetrix is a fraud prevention SaaS aimed at preventing fraud. Their company website states: ThreatMetrix is also uniquely able to uncover hackers and fraudsters trying to cover their true ...
4
votes
2answers
2k views

L2TP/IPsec shared secret: Can it be public?

My university provides a VPN service to gain access to internal services to all members. They are apparently using an L2TP/IPsec solution by Cisco. I'm able to connect just fine, but I'm a bit ...
3
votes
3answers
2k views

How do a VPNs route SSL traffic and do they compromise security?

If my understanding of how VPNs operate is correct, all traffic between me and the Internet at-large is routed through the VPN's servers. So an attacker would only be able to see encrypted traffic ...
3
votes
5answers
549 views

Securing data transfer between public network and personal accounts

I would be traveling soon and I am looking for all kinds of ways to encrypt the data transfer (usernames, passwords, emails ...) between the new networks to which I will connect my Laptop, that is ...
3
votes
3answers
2k views

How can I make it more difficult for a user to create multiple accounts?

I would like to know the best way to increase security on a website so that the a single user can't create multiple accounts. What all of a user can be traced? I'm thinking: IP address Mac address ...
3
votes
2answers
424 views

Would our company system be more secure using a VPN?

I'm currently building a back-office system for our company [for internal use] that will manage our customers, accounts etc (not interested in don't reinvent the wheel comments today, thank you!). I'm ...
3
votes
3answers
282 views

Is a VPN really secure at the VPN providers side? [closed]

Please forgive my basic ignorance regarding a VPN connection. As I understand it, a VPN connection encrypts all the data between my computer and the VPN provider. Thus preventing my ISP from seeing ...
3
votes
3answers
2k views

What utilities exist to brute force a username and password?

I'm trying to persuade management to purchase two factor authentication for securing VPN and terminal server access. I've made significant progress by demoing TSGrinder, but would like to list other ...
3
votes
3answers
698 views

Privacy and VPN - does employer's VPN still log activity when I am connected by wifi?

A company I work for wanted to use a VPN client called Junos Pulse to connect to their file server. I am on my personal computer, and connected to my personal wifi. I was not using their VPN for ...
3
votes
2answers
187 views

Two VPNs — full anonymity?

Lets assume the following set-up: VPN A in e.g. Russia VPN B in e.g. Israel Both registered through a one-time email and payed via Bitcoin A brand-new notebook with a virtual machine VPN A is ...
3
votes
2answers
3k views

Does a VPN hide what URLs I visit?

It's clear that someone listening on a network could still find out what website I visit over HTTPS (as discussed here) but what about when surfing in a VPN? What exactly can the underlying network ...
3
votes
4answers
7k views

VPN tunnel inside other VPN tunnel

This question is kind of asked already but it was asked with different context: VPN tunnel in VPN tunnel Connect through two VPN clients ...
3
votes
1answer
1k views

What is a DNS leak?

I'm planning on getting a VPN service (probably Privateinternetaccess) and read that it is imperative to plug DNS leaks. The only information I found on google describing what these are is here and I ...
3
votes
1answer
1k views

I'm using a Cisco ASA as a VPN endpoint. Where do the VPN clients get firewalled?

(Is this too application specific? It seems like a reasonable question that would be useful to other people...) So, I've got this ASA in front of a network that I didn't set up. It's been ...
3
votes
3answers
63 views

Detection and monitoring of important events on OpenVPN server

If an attacker can establish a VPN connection to the company network and have access to internal resources (by getting various certificates and credentials used to authenticate to the VPN server), ...
3
votes
3answers
104 views

What do browser VPNs actually do?

Firstly, I am not sure if this is the correct forum to be asking this question so I apologise if not. What I would like to know is, what do VPN browser plug-ins (such as zenmate) actually do and how ...
3
votes
1answer
16k views

OpenVPN Tap vs Tun Mode [closed]

I would like to know practical difference between TAP and TUN mode when use with OpenVPN. When to use TAP and When to use TUN ? What types of traffic will pass with both mode ?
3
votes
2answers
114 views

How secure is VPN addons for browsers [duplicate]

I regularly uses VPN addons like browsec, Zenmate etc in my browser. These addons/Plugin boast about hiding IPs, bypass firewalls, faster and encrypted services, tracking protection etc which they ...
3
votes
1answer
112 views

IPsec: Is AH in tunnel mode secure?

I have a site-to-site IPsec VPN which was performing poorly (10 -20% upload/download speeds as a percentage of available WAN circuit bandwidth) when using ESP in tunnel mode with DES encryption and ...
3
votes
4answers
232 views

Is password + second factor more secure than public key auth now? (SSH)

I ask this question because, I think, we now can reasonably assume the following: NSA can break VPN and SSH: This is stated many times in the unclassified slides. Also, GCHQ has demonstrated (and ...
3
votes
1answer
363 views

L2TP/IPSec: Mutual authentication BEFORE user can access VPN

I came across a question You are the network administrator for your company. You have deployed Windows Server 2008 on all server computers in your company. You have deployed the Network ...
3
votes
1answer
1k views

If I connect to VPN through proxy, who can see what?

I try to understand what happens when I use an HTTP(S) proxy in my OpenVPN client configuration. What's the advantage of an HTTPS proxy over plain HTTP? In any case the encryption takes place on the ...
3
votes
2answers
2k views

Hiding and faking my location?

I read this: Reveal the True IP of a User I am using Hola Unblocker to hide my IP address. This appears to work when I go to netflix as the site treats me as a US resident (which I am not). This ...
3
votes
1answer
328 views

Is OpenVPN secure if both the certificate and private key, are publicly known?

My ISP is rubbish and the state of the internet in the UK seems to be heading to 1984. I've started looking at VPNs and stumbled on IPredator as a cheapy test. It gives you the option of OpenVPN and ...
3
votes
2answers
534 views

VPN Appliance Placement Options

I'm currently looking to implement a VPN solution (based on a Checkpoint Connectra) purely to provide remote access to staff (no site-to-site, or customer access), but the one design decision I can't ...
3
votes
1answer
256 views

How do VPNs bypass ISP monitoring

How exactly do VPNs bypass monitoring of the requests and traffic? I get that the traffic is encrypted, but how do VPNs manage to hide the DNS requests before establishing an encrypted transfer? If a ...
3
votes
1answer
158 views

Is WebRTC still enabled in Google Chrome Incognito/ FF Private mode?

WebRTC can leak your IP address, even though you are using a VPN, from what I learn here. My question is, if I am using Google Chrome Incognito/ FF Private mode along with VPN, am I protected ...
3
votes
2answers
195 views

Can First Hop Man in the Middle be Defeated with TOR or VPN?

I was reading this article about a certain in flight WiFi provider issuing fake SSL certificates for Google. This doesn't really surprise me all that much since I'm well aware of the concept of ...
3
votes
2answers
3k views

What are the practical risks of using IKE Aggressive mode with a pre-shared key?

Our scanning vendor is marking us down because we are using IKEv1 in Aggressive Mode with a pre-shared key. We are using Sonicwall's Global VPN Client to connect to the VPN device in question. I ...
3
votes
1answer
258 views

My Ipv6 is under attack by the smurf6?

When I go to whatsmyip.org under my host name I get "Your.Ipv6.Is.Under.Attack.By.The.Smurf6.Info". What does this mean? I'm using private internet access as my VPN so I'm guessing PIA is under some ...
3
votes
1answer
3k views

How can I detect if someone is using an ssh tunnel as a proxy to connect to a VPN?

I've got an SSH server setup in a remote location, which I use to tunnel traffic from an android tablet. On the tablet, I have the Cisco AnyConnect app to connect to my company's VPN. We want to be ...
3
votes
1answer
2k views

IPSec AH + ESP used together

When ESP and AH are used together (ESP transport, AH transport) on the same packet does ESP encrypt the AH's hash, or is the hash left in the clear? If the hash isn't encrypted, there are obviously ...
3
votes
1answer
515 views

SSL VPN placement strategies

I wanted to know the advantages and disadvantages of placing an SSL VPN with respect to CIA in different locations: with firewall within the internal network within the DMZ Any reference also ...
3
votes
2answers
14k views

Does portforwarding present a risk to anonymity?

AirVPN by default has all ports closed but allows port-forwarding. I think this is required for P2P. Is this a threat to anonymity (e.g. would the person at the other end of the P2P transmission know ...
3
votes
3answers
346 views

Dedicated Server in Cloud Environment - SSL Remote Login vs Dedicated VPN

Thanks for taking your time to look into this question. Background I have my website hosted in a dedicated server in the cloud. The server is a Windows 2008 R2 machine. To publish I FTP files to ...