TL;DR: Can other users connected to a VPN Provider exploit my computer or information?
I usually use a VPN service when connecting to the Internet. The provider is a private company whose business is providing "integrity services".
As I understand it, a VPN can be seen as a secure solution when accessing networks in public spaces. In my case the risks are quite the opposite – I'm at home connecting to a pretty much unknown VPN network.
What are the risks associated with this? More specifically, is there a practical risk that other users connected to the VPN can gain access to or exploit my computer in any way?
FYI, this is what the company states regarding its security:
- AES-256-CBC encryption of traffic behind a 2048 bit Diffie-Hellman key.
- OpenVPN protocol
- Private DNS servers
- No logging
- Physical security