a Virtual Private Network is a private network that is built upon a public network, typically using encryption for to secure the private communication.
14
votes
6answers
630 views
Safe to make a VPN connection over coffee shop WIFI?
On my work laptop I regularly create a VPN connection that I use to remote desktop to our web server. Is this safe to do on a coffee shop where random people are connected to the same wifi network?
13
votes
4answers
691 views
IPsec (Internet Protocol Security) facts
Internet Protocol Security (IPsec) is a successor of the ISO standard Network Layer Security Protocol (NLSP). What are the advantages, disadvantages, other interesting facts regarding the protocol?
13
votes
4answers
1k views
How do I pick a VPN provider?
There's a lot of VPN providers out there. Some are free, some are for a fee, some report to the government, some inject ads int your HTTP, some are in other countries, you might not have any real ...
11
votes
7answers
9k views
What is the difference in security between a VPN- and a SSL-connection?
I would like to design a client-server application where the server is placed on Internet. I assume that I could set up the client-server connection using VPN (is it using IPSec?) or using a SSL ...
11
votes
6answers
6k views
How does Google Maps know where I am, when I'm using a VPN?
How does Google Maps determine my location?
I've gotten some understanding of Google Maps' geolocation methods from here:
http://friendlybit.com/js/geolocation-and-google-maps/
In the newer ...
11
votes
2answers
2k views
symmetric encryption session keys in SSL/TLS
This question concerns the session send and receive keys used in SSL/TLS protocol. my understanding is that this key uses symmetric encryption (DES, AES, BlowFish, etc.) I'm wondering, if ...
10
votes
1answer
1k views
What are darknets, and how can they be used to provide security and anonymity in network communication?
One of the major problems with the internet is that it's difficult to stay anonymous while retaining the ability to communicate with a large number of people. While encryption can be done effectively ...
9
votes
1answer
773 views
If an attacker is intercepting all of my traffic, will he be able to listen on my VPN session?
If I am a remote user, connecting to my firm from home, using IPSec VPN tunnel or through SSL, and an attacker is intercepting all of my traffic, will he be able to watch my VPN session on the clear ...
9
votes
5answers
3k views
What are the pros and cons of a VPN for privacy
Recently I have been getting more and more interested in the security (privacy and anonymity) issues of my online life. Not that I have anything to hide, or that what I do online is so interesting to ...
8
votes
5answers
1k views
How can encrypted traffic bypass the Great Firewall of China when it is being blocked?
The Great Firewall of China is controlled by the government and has put in place a "learning algorithm" to block unapproved encrypted traffic. The only way to get encrypted traffic through the ...
8
votes
1answer
802 views
What's are the advantages of L2TP/IPSEC over plain IPSEC?
As the title says really, my firewall (Sonicwall) can do either IPSEC or L2TP/IPSEC for VPN connections. One advantage of L2TP/IPSEC I can see is that the client computer get allocated it's own IP ...
7
votes
8answers
4k views
Is it possible to Identify a VPN user by finding relations in traffic?
If I am using VPN service to protect my identity, can my traffic be used to identify all my traffic?
For example, if I am accessing two services:
Some service A, where I do not leave any ...
7
votes
8answers
2k views
Whats the best way to make my internet traffic anonymous?
Recently I have thought more and more about how to make my Internet traffic anonymous. Not for illegal reasons, but just to stop leaving information about me. The methods I know of to anonymize my ...
7
votes
2answers
1k views
3DES vs DES for VPN connections
I'm trying to get Android 2.1 phones to connect to our corporate VPN, but it would appear they only support DES rather than 3DES for encryption.
Is it safe to use DES, am I going to get hacked if I ...
7
votes
1answer
149 views
distributing files to VPN partners
suppose i've created VPN certificates for a certain VPN-RoadWarrior-Client, expressed in the files VPN-RoadWarrior-Client.key and VPN-RoadWarrior-Client.crt*, however VPN-RoadWarrior-Client is ...
7
votes
3answers
456 views
Public wifi security protocols
I should apologise first- this post could seem a lot to ask for, but I am starting to go around in circles. I am interested in securing my laptop for when I use public wireless hotspots, as I am a ...
7
votes
1answer
178 views
Trace large volume of web traffic, stopped at VPN
I have a web server. I recently received a large volume of web traffics, after tracking it down, it is coming over a commercial VPN provider. Is there any way to keep the tracing going, beyond the ...
7
votes
2answers
470 views
What information is exposed by simply opening an RDP connection to the internet?
Microsoft, Rackspace and other hosted providers allows people to RDP into that server.
Here are a few examples: Microsoft has something called "Azure Connect" it is very easy to expose a domain ...
6
votes
4answers
626 views
How to tunnel all network communication?
I'm looking for a way to tunnel all network communication from my laptop through another computer. I can control the software on both the laptop and the computer. The connection between them should be ...
6
votes
4answers
696 views
Security considerations in providing VPN access to non-company issued computers
There have been a few people at my office that have requested the installation of DropBox on their computers to synchronize files so they can work on them at home. I have always been wary about cloud ...
5
votes
5answers
602 views
Is it possible to locate Tor/proxy users? Spam is getting on my nerves
I'm managing a huge forum (over 15k posts and 500 users) and lately some guy uses a VPN (probably) to spam my forums with topics such as:
"GAYGAYGAYGAYGAYGAYGAY"
"FRIGHT IS GAY HAHAHAHHAA"
"ADMINS ...
5
votes
4answers
2k views
Prevent network users from creating an unauthorized outgoing VPN connection to avoid network policies
Is it possible to prevent network users from creating unauthorized outgoing VPN connections to avoid network policies?
Edit- What is the best way to detect unauthorized outgoing VPN connections while ...
5
votes
4answers
562 views
Ways to monitor someone's internet traffic
If some authority for whatever reason decides they want to monitor your traffic on a wired DSL connection, how would they do it besides exploiting your OS? What are the other ways assuming the OS is ...
5
votes
3answers
152 views
How can an outsider tap into communications between two physical sites?
When referring to 'Sites' - I am not talking about a website, but of a physical place where a company resides. Today, to secure communications between two sites - Let's say between an office in ...
5
votes
3answers
852 views
Why does OpenVPN require securely sharing certs with clients?
The ubuntu docs on OpenVPN have this part in the instructions:
Copy the following files to the client:
/etc/openvpn/ca.crt
/etc/openvpn/easy-rsa/keys/hostname.crt
...
5
votes
4answers
7k views
Multiple VPN clients in parallel
If I were to run more than one VPN clients on my machine, simultaneously, what risks would be involved?
E.g. are there technical conflicts, such that it wouldn't work right?
Could there be ...
5
votes
3answers
84 views
Does IPSec use IKE or ISAKMP?
Does the IPSec protocol suite use IKE or ISAKMP?
RFC 2828 states ISAKMP is the protocol used in IPSec to handle SAs, key management and system authentication. Other sources say IKE is the protocol ...
5
votes
2answers
161 views
How does the predator network prevent outside control by an attacker?
I read several articles saying some of the command and control fleet for the US robotic attack planes may have been infected with a virus.
Does this command and control system communicate with the ...
5
votes
1answer
269 views
What level of anonymity do VPNs provide?
When I use VPN is entire Internet usage protected or only some subset of traffic? For example,
Is my IMAP email provider only going to see VPN's IP address?
Is my DNS provider only going to see ...
5
votes
3answers
388 views
What is the difference between encrypted data and data sent through an encrypted tunnel
I am looking at different VPN protocols.
[1] L2TP does not provide encryption so require IPSec to encrypt the data
[2] IPSec tunnel provide encryption to the tunnel
What is the difference in terms ...
5
votes
1answer
578 views
What is important when selecting a VPN provider?
I am new to using a VPN service and came across the past at How do I pick a VPN provider? however am unsure if I need to use a personal VPN service or if OpenVPN fits my needs which are as follows;
...
5
votes
0answers
804 views
SSL vs IPsec what's the difference [duplicate]
Possible Duplicate:
What is the difference in security between a VPN- and a SSL-connection?
Which is more secure? And offer better access control?
4
votes
4answers
452 views
How to keep secure while browsing on open wifi when SSL VPN is blocked?
After a recent visit to a hotel I was surprised to discover that they blocked access to my OpenVPN server. I often use this as a way to secure my internet traffic when I am on public wireless. ...
4
votes
3answers
156 views
The safest way to circumventing Iran's Internet censorship
We usually buy services like VPN, SOCKS, Kerio [Kerio Connect?]... to circumvent Iran's Internet censorship policy.
Recently, one of the shops started selling [one of] Kerio's products, for which I do ...
4
votes
6answers
10k views
Are services like Hide My Ass and UnoDNS reasonably safe to use?
While in Germany, I want to keep using my Netflix account, watch PBS, CNBC. I have found following services:
A VPN: https://hidemyass.com/vpn/promo/1/5/
A DNS: http://www.unotelly.com/unodns/
I an ...
4
votes
4answers
997 views
Encryption laws in India — is it allowed to use ssh and VPN?
I have a very similar question to the one asked here (regarding Iran). However, I would like to use ssh and vpn while being in India. I found already this survey of cryptographic laws but I don't ...
4
votes
2answers
8k views
How safe is it to connect to Internet through VPN?
Sometimes I connect to internet using a VPN connection to be able to access the blocked websites. I've got a few questions regarding this:
Are my important data (like my credentials) vulnerable to ...
4
votes
2answers
100 views
Does the password you use to sign into a VPN determine the strength?
I subscribed to a VPN service and need to change the password. Does the password I use to log in determine the strength? For example should it be 64 characters long or can it be 10? I'm thinking of ...
4
votes
1answer
1k views
Is L2TP as secure as IPSEC for VPNs?
Is it as secure to use L2TP for VPN access, rather than IPSEC? Am I introducing any risks by using L2TP?
4
votes
2answers
218 views
I'm being followed on the web. Explanations for mysterious behavior
Am I being stalked?
I was recently doing some basic Python development scripting.
Python has a nice feature where it can run a simple HTTP server that serves the contents of the local directory, on ...
4
votes
4answers
591 views
Are there consumer-grade VPN services that support two-factor authentication, like SecurID?
I'd like to increase my VPN security, and Google hasn't turned up anything with regard to VPN services and SecurId.
Does anyone know of services like this?
4
votes
1answer
152 views
Store To Store communication through MPLS VPN
In a PCI environment with an MPLS VPN network setup should you allow store to store communication?
Do you think that an MPLS network would be consider secure enough for this? why or why not?
4
votes
2answers
743 views
L2TP/IPsec shared secret: Can it be public?
My university provides a VPN service to gain access to internal services to all members. They are apparently using an L2TP/IPsec solution by Cisco.
I'm able to connect just fine, but I'm a bit ...
3
votes
4answers
571 views
How is Facebook locating me when I use a VPN?
I am using a private VPN network for my internet connection. But it seems that if I go to http://m.facebook.com and try to check in, Facebook sees my location properly.
My IP address seems to be from ...
3
votes
5answers
242 views
Securing data transfer between public network and personal accounts
I would be traveling soon and I am looking for all kinds of ways to encrypt the data transfer (usernames, passwords, emails ...) between the new networks to which I will connect my Laptop, that is ...
3
votes
3answers
248 views
How do a VPNs route SSL traffic and do they compromise security?
If my understanding of how VPNs operate is correct, all traffic between me and the Internet at-large is routed through the VPN's servers. So an attacker would only be able to see encrypted traffic ...
3
votes
5answers
3k views
What's the difference between VPN over TCP vs UDP?
My VPN provider gives me the option between using UDP and TCP for connections. According to this site UDP is faster for short distance. I'm on the same contentent as my server, is that considered ...
3
votes
2answers
223 views
Would our company system be more secure using a VPN?
I'm currently building a back-office system for our company [for internal use] that will manage our customers, accounts etc (not interested in don't reinvent the wheel comments today, thank you!). I'm ...
3
votes
4answers
322 views
What's the safest way to access my US-based bank's website from within Mexico? VPN vs SSH vs HTTPS?
I will soon be moving to Mexico and living there for an extended period. During that time I will need to occasionally access my US-based bank's website. I'll always be connecting using my own laptop, ...
3
votes
3answers
3k views
Understanding VPNs : How VPNs can be used for anonymization?
Previously, I asked the question Why is it difficult to catch “Anonymous” or “Lulzsec” (groups)? I understood every answer except the VPN thing. Its because I never knew what VPNs were. Any how that ...
