a Virtual Private Network is a private network that is built upon a public network, typically using encryption for to secure the private communication.
3
votes
2answers
199 views
VPNs vulnerable to MiTM because ANY certificate goes
I spoke to a sysadmin in a business center today who intended to basically perform a MiTM (as he called it) on every connection in his network because people in his office building are using VPNs and ...
2
votes
1answer
73 views
What does a Remote Desktop Connection risk for both computers?
I recently had a malware issue called "mysearchdial" that installed itself into my home computer's browser because someone didn't pay attention to what they were installing.
I RDP'd into my work ...
0
votes
0answers
15 views
Layer 2 VPN over SSH without allowing remote root access [migrated]
SSH added a new option (-w) to allow the creation of TUN/TAP tunnels. All available tutorials I've found so far http://ku1ik.com/2011/11/12/tunnel-vm-network-ssh.html requests allowing remote root ...
1
vote
3answers
70 views
Howto pass overly protective corporate firewall
My Corporate Network was always being monitored, but a few days ago they started to block and censor all HTTPS traffic.
Recently IT guys forged certificates for all major HTTPS web sites and acts as a ...
0
votes
0answers
48 views
Is my current configuration safe? [on hold]
OS is Lubuntu 14.04.
I update everything few times per day.
I run this command: apt-get flashplugin-installer -y to use flash and use VPNBook which gives me a MitMAttack warning.(I use openvpn ...
0
votes
0answers
10 views
Cisco IPSec Site-to-site VPN. Permit traffic if VPN is down [migrated]
Bit of 'belt and braces' configuration planning.
Background:
We have a successful site-to-site VPN link to our remote datacenter.
The remote 'protected' network is also the IP network range that is ...
-1
votes
0answers
32 views
Use USB tokens for authentication on my internal server
Currently, in my company, I use this scenario:
Outside clients use a VPN client to authenticate through the firewall, then username/password to authenticate with the web server.
Now I want to use USB ...
0
votes
1answer
108 views
VPN Client - Addtional Security Layer or a Useless Feature
I have a corporate web portal which is used for staff collaboration including a web-based mail interface connected to MySQL Database, corporate calendar, file storage, customer contacts data with ...
0
votes
0answers
7 views
Bintec RS230a VPN NO-PROPOSAL-CHOSEN [migrated]
I am trying to setup a VPN access between shrew soft client versions 2.2.2 (Standard Edition) and a Bintec R230a (or Bintec RS230a) with certificate authentication. I used OpenSSL, XCA (Freeware) and ...
0
votes
0answers
21 views
VPN and remote desktop access [migrated]
Here's my case, I have a laptop from work, it has Cisco AnyConnect.
3 scenarios:
Laptop using home network, from home PC I can remote desktop to Laptop just fine.
Laptop using home network, enable ...
2
votes
0answers
55 views
Duration of torrent activity and ISP tracking [closed]
The only reason I use BitTorrent is to download Linux distros, Open source apps and large documentation files. My ISP contacted me once and warned me:
Ok, you aren't downloading anything illegal ...
2
votes
3answers
124 views
Does the principle of the CRIME & BEAST attack affect VPNs?
I was recently reading about the attacks on SSL/TLS that CRIME and BEAST were able to exploit by attacking the compression in the secure session. Upon reading this I remembered that OpenVPN has ...
2
votes
3answers
128 views
Can authentication in social networks through VPN defeat the purpose of the latter?
If a person uses VPN and authenticates herself to some social network through the VPN, doesn't she lose her anonymity for as long as the VPN session is used ? By losing her anonymity, I mean that her ...
0
votes
2answers
85 views
understanding the point of VPNs
I can't really understand the concept of VPNs, since we already have various secure transmission protocols.
Isn't the point of VPNs that people using its 'channels' can send encrypted data to each ...
1
vote
2answers
118 views
Idea for hiding your mobile phones' location, and still be able to place and receive calls. Any suggestions?
The diagram below is a thought experiment that could provide a certain level of privacy to mobile (smart)phone users, beyond what they currently have. Some of it is purely theoretical, but it should ...
-2
votes
1answer
106 views
How can I protect files on my personal home PC for when it is connected to my employers network via VPN? [duplicate]
I think my employer uses Citrix product to supply VPN. I have files in My Documents folder on my home PC that I would not want my employer to be able to access when I am connected over their VPN. I am ...
0
votes
3answers
111 views
If someone has access to VPN and your computer, is there a point of using VPN?
If someone sniffs requests coming from my computer and my VPN's computer, there's no point using VPN, right? Because they can see the time when I made a request to my VPN and they can analyze all of ...
3
votes
2answers
171 views
Is setting up my own VPN more secure than buying from third party vendors?
When Googling for the most trusted VPN provider (for keeping your anonymity), some users say that the best way to go is to just setup your own (e.g., OpenVPN) using a dedicated server. How is this ...
2
votes
2answers
106 views
How does VPN (IPSec) work?
Let's assume both, my VPN client and VPN gateway has public and private keys.
I encrypt my request with VPN gateway's public key. VPN gateway gets the request, decrypts it with private key. Then, VPN ...
0
votes
1answer
73 views
Skype Audio / Video Session over VPN?
Basically I'm wondering if a Skype video session along with audio could be logged (or recorded) over a virtual private network? I know whoever hosts the VPN server can log which websites you visit (or ...
0
votes
1answer
76 views
Cellular Mobile Network Vulnerabilities - Is VPN the solution?
Do current mobile cellular networks like 3G offer enough security? The article from Info-Security states that
3G encryption cracked in less than two hours.
Could a eavesdropper or ...
-1
votes
1answer
299 views
Is my information secure when using Private Tunnel? [duplicate]
I am using Private Tunnel to do some tasks involving sensitive data like logging in to PayPal and online banking.
Is my data safe or can it be retrieved by other users of the Private Tunnel service?
0
votes
1answer
57 views
What are some good ways to audit trustworthiness of InfoSec solutions consulting companies?
When it comes to choosing new vendors and suppliers, the old method was to get in contact with the company and ask around their local neighbourhood and with their customers to see how trustworthy the ...
0
votes
1answer
65 views
Can I use a vpn to securely use prototypes of webapps from my phone or laptop?
I want to experiment with web development (using django) for both desktop and mobile. Server, phones and desktops could all be part of the same virtual private network. The VPN will be from some ...
1
vote
1answer
90 views
how to continuously caputre all my network traffic? [closed]
I've got a Linux desktop that will be a gateway between my private network and the open internet. I'd like it to capture and store all network traffic passing through it continuously, 24/7 (until the ...
0
votes
1answer
98 views
Shall I enable 'send all traffic over VPN' on my Mac?
I want my Mac to be as secure as possible, but I don't know if the send all traffic over VPN option is safe or not. Please can someone explain if it is more secure to enable it or not.
0
votes
0answers
49 views
Are VPNs using shared secret susceptible to trivial MITM attacks
I'm looking at a few VPN providers and many seem to offer L2TP VPN but they seem to share their shared secrets publicly on their website, for example :
Goldenfrog ...
0
votes
1answer
173 views
Is PPTP VPN ever secure? Under DD-WRT? [duplicate]
PPTP is not an open, ratified standard the way that, for example, SSL/TLS is. (see: http://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.2 and http://datatracker.ietf.org/doc/rfc5246/ )
The ...
-1
votes
1answer
113 views
Setting up a Secure Home Proxy for VPN Service Providers
VPN service providers such as ProXPN offer a service in which you pay a monthly subscription, allowing you to download an app for Windows or Macs so that your traffic goes to the internet via this ...
3
votes
2answers
74 views
Privacy/Security with SSH Tunnels and QuickVPN
I currently use QuickVPN, however, it does not seem to route my web browsing traffic through a tunnel. Am I correct? It only opens up a tunnel for accessing windows shares and documents back at the ...
5
votes
2answers
107 views
Security risks of leaving open a VPN connection
We have older firewalls that don't allow for scheduling up/down times of VPN connections, and we're working with a client that will need to connect to it at different times each day. What are the ...
-4
votes
3answers
172 views
Can a VPN connection established by running a VPN client from an arbitrary location guarantee security?
I came across this interesting device called SurfEasy Private Browser. Here's the company's webpage and here's the product page on Amazon.com. I assume it's just a USB stick with a VPN client and ...
1
vote
4answers
1k views
Open VPN has DNS leak
Since using www.dnsleaktest.com I have found that any VPN service using Open VPN will leak my DNS through the tunnel.
I have tried and tested several VPN providers, even those who say that they have ...
1
vote
2answers
88 views
Is QuickVPN Secure
Does QuickVPN create a secure tunnel or how does it work to provide encryption and security?
When I did a see my IP it was using the remote locations IP and not my office network's IP so does that ...
0
votes
1answer
160 views
Sniff HTTP(S) from PPTP VPN server
I've setup an PPTP VPN server on my Debian 7 server. I'm using this VPN in combination with my Android phone to ensure a secure connection.
However, i'm getting curious of what my phone is sending ...
0
votes
0answers
24 views
MAC changer and VPN can be trusted? [duplicate]
I must spoof my identity for some reason.
Are Technitium Mac Address Changer App on windows and VPN is a trusted way to be anonymous?
0
votes
2answers
125 views
Questions on IDS, IPS, VLANs and VPN [closed]
I have a network that has a single point of entry the WAN. The WAN exposes about 10 static IP's that resolve internally to servers that are in the same subnet. Meaning that if you RDP over 3389 to ...
2
votes
1answer
116 views
How does tunneling actually work?
I recently saw a question in which someone implied that tunneling could foil MITM even if it were implemented while an MITM was taking place. My understanding of tunneling is that it is only capable ...
2
votes
1answer
2k views
OpenVPN Tap vs Tun Mode [closed]
I would like to know practical difference between TAP and TUN mode when use with OpenVPN.
When to use TAP and When to use TUN ?
What types of traffic will pass with both mode ?
0
votes
1answer
42 views
PPTP and Split Routing
If I uncheck the "use default gateway on remote network" to be able to browse local shares and the internet at the same time, does that void encryption?
0
votes
1answer
540 views
What methods are there of protecting a VPS from DDOS attacks? [duplicate]
I was just wondering what would be the best way to stop a VPS from being attacked, bandwidth would be a problem in this case so methods that reduce the amount of incoming attacks and stop sending ...
1
vote
1answer
1k views
TLS v1.0 best cipher for OpenVPN setup
I'm trying to setup OpenVPN with as much security as I can. I'm in the process of selecting a cipher for OpenVPN. Which is the safest one, tls-cipher DHE-RSA-AES256-SHA or tls-cipher AES256-SHA?
I've ...
0
votes
1answer
571 views
Are there any known vulnerabilities in PPTP VPNs when configured properly?
PPTP is the only VPN protocol supported by some devices (for example, the Asus RT-AC66U WiFi router). If PPTP is configured to only use the most secure options, does its use present any security ...
0
votes
2answers
48 views
Secure the Datacenter, untrust the LAN?
In a scenario where you have a Wireless network provisioned as untrusted behind a firewall, using VPNs to reach the trusted Datacenter. Does anyone have an reason why this should/not be expanded to ...
3
votes
1answer
577 views
How can I detect if someone is using an ssh tunnel as a proxy to connect to a VPN?
I've got an SSH server setup in a remote location, which I use to tunnel traffic from an android tablet. On the tablet, I have the Cisco AnyConnect app to connect to my company's VPN. We want to be ...
0
votes
0answers
43 views
What's The Easiest Way To Maintain Remote Users Access to a Webapp
Here is a real world case:
A chain of high schools (several hundreds) has many websites (~ 3x number of Schools) that are content driven by users (the students).
Every school maintains about 2-4 ...
0
votes
1answer
2k views
Configure OpenVPN as a local proxy to use it only when needed
First, I think it is the proper place to post my question (and not serverfault or networkengineering). If not, please tell me what's the correct place.
I used FreeGate. I configured the Firefox ...
1
vote
1answer
146 views
Setting up a ram based VPN
Are there any ram based VPN solutions that have options to keep no logs?
I've been looking to set up a portable linux distro, probably Debian, that I'd run from CD without any form of persistence. It ...
2
votes
2answers
86 views
How to create an anti-flood mechanism without leaving VPN's out?
I'm trying to protect my applications from some bots that are either malfunctioning or trying to take my sites down (lots of requests from the same IPs in the logs).
Every time someone requests an ...
2
votes
2answers
363 views
What order is best for nesting VPNs?
if anyone is available to give me advice on a VPN situation I'd appreciate it.
So the story is, I have one Swedish VPN which I trust not to log, and which I've connected to with my real IP, and I've ...
