Timeline for Is it possible to detect VPN in the network?
Current License: CC BY-SA 4.0
20 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 5, 2023 at 1:50 | history | edited | forest | CC BY-SA 4.0 |
it doesn't necessarily mean you lose forward secrecy
|
| Jan 24, 2021 at 2:05 | history | edited | forest | CC BY-SA 4.0 |
switch to https; TODO fix link to dcamero.azurewebsites.net
|
| Jun 16, 2020 at 9:49 | history | edited | CommunityBot |
Commonmark migration
|
|
| Jun 15, 2018 at 2:56 | comment | added | forest | @Strigo Yeah I remembered something like that was created, but I don't know if it can be used to obfuscate traffic or not. I haven't looked into it either. | |
| Jun 14, 2018 at 13:39 | comment | added | Strigo | @forest, in OpenVPN 2.4 they added --tls-crypt option, that encrypts all tls packets with a static key. It preserves PFS property of TLS mode and must greatly reduce amount of unencrypted data for traffic analysis. I haven't checked it yet though. | |
| Jun 14, 2018 at 5:40 | history | edited | forest | CC BY-SA 4.0 |
typo
|
| Jun 14, 2018 at 5:34 | history | edited | forest | CC BY-SA 4.0 |
this is explained later
|
| Jun 13, 2018 at 0:49 | history | edited | forest | CC BY-SA 4.0 |
add nice bold headers and advise getting a lawyer
|
| Jun 13, 2018 at 0:45 | comment | added | forest | @UserXD Are corporate VPNs illegal too? Since you say you will be on a business trip, you might be using a corporate VPN. I sort of doubt they would disallow that since it would prevent many people from running their regular business. I strongly advise you ask on Law.SE whether or not you can use a corporate VPN, if that is what you need to do. In that case, it may be that it is worse to obfuscate the traffic, since you can't claim it's just for business if you are intentionally trying to hide it. If it's obviously a VPN but connected to your company LAN, that's easy to explain to them. | |
| Jun 13, 2018 at 0:43 | history | edited | forest | CC BY-SA 4.0 |
expanded on threat models
|
| Jun 13, 2018 at 0:41 | comment | added | Barttttt | it's illegal, they just made an update for the low and now it's more dangerous than before to use it. I checked with the telecommunication authority and they confirmed it. theregister.co.uk/2016/07/28/vpn_users_in_uae_face_544k_fine | |
| Jun 13, 2018 at 0:38 | comment | added | forest | There are conflicting answers in there. Some say it is legal, some say illegal, and some say only illegal when you use it to commit crimes. Perhaps you should seek legal advice (or ask on Law.SE which, while unable to provide legal advice, is still useful). | |
| Jun 13, 2018 at 0:37 | comment | added | Barttttt | unfortunately this is the answer for your question the punishments could go up to a life sentence and/or a fine between AED 50,000 and AED 3 million! quora.com/Is-using-a-VPN-in-the-UAE-illegal . It's a business trip but it's more complicated to me than any other visit | |
| Jun 13, 2018 at 0:32 | comment | added | forest | Why do you need to hide use of the VPN itself? I can understand wanting to prevent automated detection in the case where detected VPNs are simply blocked, but generally it's not a problem to be seen using a VPN. Most governments will just assume you want your privacy or download harmless warez. If you're in a country where using proxies or VPNs is illegal and that law is actually enforced, then you should think much harder about your threat model, not just ask on a QA site. | |
| Jun 13, 2018 at 0:30 | comment | added | forest | Doing that would not help much since the majority of traffic would be going to a single IP (even if it's just a VPS, it becomes obvious that it's a tunnel of some sort since you will be sending request-sized encrypted data to it and receiving response-sized encrypted data with an average delay of the time it takes for a webpage to load). Automating visiting random websites might even stand out because there is no way to perfectly simulate human interaction, even with advanced machine learning techniques (and much less with a simple script). | |
| Jun 13, 2018 at 0:29 | comment | added | Barttttt | Thanks @forest, to prevent the watchdog from discovering my vpn use and the connection to a single IP, I used a virtual machine which is not connected to the VPN but it shares the same IP of my computer with some tools like torrent clients where the client will download/share some open source projects like linux os ... etc, and I used it to visit some websites with random links (I need to make a script to automate this) .... I'll add the Obfsproxy and I'll come back in case that I need some help with this. thanks again, | |
| Jun 13, 2018 at 0:20 | vote | accept | Barttttt | ||
| Jun 13, 2018 at 0:16 | history | edited | forest | CC BY-SA 4.0 |
linked to wikipedia page on forward secrecy, changed one word
|
| Jun 13, 2018 at 0:07 | history | edited | forest | CC BY-SA 4.0 |
explained how to obfuscate traffic
|
| Jun 12, 2018 at 23:55 | history | answered | forest | CC BY-SA 4.0 |