Skip to main content

Questions tagged [vpn]

This tag is applied to questions related to various VPN types such as PPTP or IPSec.

Filter by
Sorted by
Tagged with
0 votes
0 answers
53 views

How to trust clients when they can be reverse-engineered to expose keys/credentials? [duplicate]

I am developing an VPN app, currently on mobile app part (Flutter). I have done server backend side. Client side code is done too. VPN establishment is based on socket communication: Client sends it ...
kleigen_marschalan's user avatar
7 votes
1 answer
159 views

Odd repetitive 16character 404 web requests, with json "RefreshTTL" payload

A few weeks ago we had a single user's browser start hitting the server with a peculiar request (IP redacted for their privacy): 1.1.1.1 - - [21/May/2024:07:42:31 +0000] "POST /3kFtdvOkagEQbIxH ...
IncredibleHat's user avatar
1 vote
0 answers
58 views

Is it safe to use a laptop on a public WiFi with VPN? [duplicate]

Im in a situation where Im moving between apartments and need to live at an extended stay hotel for a week or two. The hotel does have free WiFi but it is public. If I use my company’s VPN and visit ...
Curt Rand's user avatar
  • 249
0 votes
1 answer
147 views

What can ISP see when John vpn into Tom home where John and Tom use the same ISP?

Here's the flow: (John home. ISP A) → VPN → (Tom home. ISP A) What can John and Tom do if John and Tom would like to let ISP see less information as possbile?
Maxfield's user avatar
  • 157
0 votes
1 answer
127 views

Popular VPN subnets being blacklisted or blocked

Some websites deploy geolocation services (without us downloading add-on or extra packages or anything). If you use VPN, these websites seem to be able to recognize that and deny services. This tells ...
Tristan Tran's user avatar
0 votes
0 answers
87 views

Using a static ip (Ipv4) residential ISP proxy / IP address for Binance

My situation is the following: I am a novice when it comes to information security Residing in a country other than my home country in Europe I need a way to reliably access Binance.com without ...
swstuff's user avatar
0 votes
0 answers
57 views

Can my VPN hide my IP address so I can test malware? [duplicate]

I heard that VPN could mask your IP address, but is this perfectly secure? I am trying to open up what I suspect to be malware on a VM, and I obviously don’t want it to be sending my real IP address ...
chen's user avatar
  • 1
0 votes
0 answers
90 views

Does using a VPN to allow ssh connections provide better security, especially after seeing how CVE-2024-3094 (XZ backdoor) is done?

For my own (public) servers, is it considered a good idea to only allow ssh connections from VPN connections (OpenVPN, Wireguard or otherwise), to mitigate any possible attacks in the future on ssh? ...
The Quantum Physicist's user avatar
0 votes
3 answers
147 views

Is having my college's VPN client on my personal laptop safe in terms of privacy?

I was asked by the college to install Sophos SSL VPN Client on my personal laptop to connect to the college network from home (to carry out tasks like course registration, etc.). I had already ...
blackbiscuit's user avatar
-1 votes
2 answers
145 views

If someone has your VPN password and email address, can they decrypt your VPN traffic?

VPN encrypts your traffic all around. So let's say someone knows your VPN email/password. Would this give them the ability to decrypt all your communications?
Rideboards's user avatar
0 votes
0 answers
21 views

How can iplocation.net know my country if I use a VPN thru Opera Mini on Android? [duplicate]

How can iplocation.net know my country if I use a VPN thru Opera Mini on Android? Accessing myip.com it says "no country". But accessing iplocation.net shows my real city and provider! And a ...
VeganEye's user avatar
1 vote
0 answers
178 views

Is it normal for ns.sipgeo.t-mobile.com to bypass DNS and VPN settings on iOS, iPadOS, and macOS? [closed]

I’ve been using NextDNS to monitor DNS lookups on my devices in an effort to figure out how they’re being remotely controlled and I notice that ns.sipgeo.t-mobile.com is simply able to bypass both DNS ...
Patrick Dark's user avatar
2 votes
0 answers
44 views

How to detect if a user tries to access my web service using proxies/vpn? [duplicate]

I believe this question is covered as the problem is straightforward. But, as I am building a web service from scratch, I'd like to have some advice on how to do it better. Let's say my web service ...
Sergei Basharov's user avatar
1 vote
1 answer
109 views

How to ensure privacy of my codebase while keeping data on client premises?

I have created a data science model pipeline in Python which ingests some data (user transactions) and then runs some models to generate a report. The models that I have created are proprietary and so ...
finstats's user avatar
  • 111
1 vote
2 answers
192 views

VPN vs Authentication Proxy to restrict access to internal network/application

A popular new idea at the company I am working for is to remove worldwide access of web applications and restrict them to the internal network only, allowing remote users to work with them through VPN ...
user2374435's user avatar
0 votes
0 answers
27 views

When using a VPN is the device DNS cache still written to? [duplicate]

When I am using ProtonVPN, does the VPN server run DNS resolution upon receiving the request, similar to a Tor exit node, thereby bypassing the device's DNS cache? Or do my browser's DNS queries still ...
yellow-saint's user avatar
0 votes
1 answer
130 views

wireshark captures vpn tun0 smtp as unencrypted, why?

I am trying to learn more about cryptography and am stumped, i dont know what direction to move to even research an answer myself so would appreciate any input. I have a vpn set up to an adapter, tun0,...
joboi_lax's user avatar
0 votes
1 answer
235 views

Do I need an IP whitelist on top of a VPN?

My company requires me to access resources through a VPN connection -- specifically, an OpenVPN client configured to require a password plus an authenticator token. But the company also restricts ...
Sasgorilla's user avatar
3 votes
1 answer
303 views

Modern VPNs and average MITM attacks

I am trying to untangle a number of concepts (all of which i am unfamiliar with) in this question, but they all point to a seemingly basic question; With modern tunneling protocols, SSL ciphers and ...
myol's user avatar
  • 175
1 vote
0 answers
308 views

Using Android Wireless Hotspot while connected to Hotel internet via VPN

I want to make sure I understand the security implications of this scenario: I am staying in a hotel. I have a VPN on my android phone. I connect to the hotel's unencrypted WiFi network with the ...
stochastic's user avatar
-2 votes
2 answers
246 views

How do vpn providers prevent other user internal ip access?

For example, user1 and user2 use some public VPN provider like proton/nord or so on. User1 has internal IP 10.96.0.4 and user2 has 10.96.0.10. How do a vpn provider prevent user1 from scanning user2 ...
Ghost Rider's user avatar
0 votes
3 answers
568 views

Why do most VPN protocols work on the Transport Layer and not on the Network Layer instead?

In both the TCP/IP model and the OSI model, IPSEC offers encryption on the Network Layer (IP), while other VPN protocols such as OpenVPN offer it on the Transport Layer (TCP). Due to encapsulation ...
Bob Ortiz's user avatar
  • 6,685
1 vote
0 answers
298 views

How was Ross Ulbricht's IP address in San Francisco linked to Silk Road?

Ross Ulbricht used a VPN server to connect to the Silk Road's server in order to configure the server.[¹] The FBI stated that Silk Road's server leaked its own IP address via a misconfigured login ...
Matthias Braun's user avatar
0 votes
1 answer
163 views

Connecting my Windows desktop JavaFX app to my external server by VPN or Wireguard

I have a desktop application with JavaFX and I need to connect it to the server in a safer way. Right now, the program connects by mysql and FTP without TLS. I've thought to connect it by VPN, but the ...
Arkhan6's user avatar
0 votes
2 answers
334 views

Any tool that can prevent ISP from knowing which websites we visit? beside tor?

Any tool that can prevent ISP from knowing which websites we visit? beside tor? while https can help, but still ISP knows which domains/websites we visit. There is no way around it? Also believe that ...
Maxfield's user avatar
  • 157
0 votes
1 answer
122 views

Feasible for China to stop all VPN use within its borders?

Is it technically feasible for China to stop all VPN use within its borders? A slightly narrower goal might be to stop all new users of VPNs within its borders while doing nothing about temporary ...
H2ONaCl's user avatar
  • 953
0 votes
1 answer
304 views

Benefits of VPN vs. HTTPS + DoH + ECH for Corporate Network Security

I'm currently researching network security measures for my company, and I'm trying to understand the advantages of using a VPN (Virtual Private Network) compared to a combination of HTTPS (Hypertext ...
bakaDev's user avatar
  • 103
1 vote
3 answers
314 views

self signed certificate

I read a lot of articles about self signed certificates and I'm not exactly sure if I'm getting near to what I want to actually achieve. I'm trying to implement a self signed certificate so that the ...
Reefo Relaxo's user avatar
0 votes
1 answer
881 views

NordVPN Couldn't Estabish a Secure Connection - ISRG Root X2

I'm using NordVPN and it's popped up with this about how it couldn't validate a TLS certificate: I've tried looking up what ISRG is but I don't get much of an explanation on it anywhere. It appears ...
aspanda's user avatar
1 vote
0 answers
83 views

wget throwing errors on vulnerable machine [closed]

I’m trying to crack a Proving Grounds machine. I was making great progress, but once I got in, wget refused to work. On small files (i.e. one that contains a single string) it works fine, but for any ...
Noah Massey's user avatar
0 votes
2 answers
465 views

What is the difference between a VPN and a Tor Socks proxy on public wifi?

I seek protection against MITM & snooping of VPN or Tor proxy traffic on public WiFi. So, what are the different security impacts of each of these 2 solutions: Using a VPN (like Proton VPN) to ...
John's user avatar
  • 1
17 votes
2 answers
7k views

Is Tor over VPN a security risk?

In his talk about OPSEC, The Grugq stresses that you first have to go through TOR before connecting to a VPN. Otherwise, the VPN would be a direct link from the endpoint to you. He summarizes: TOR ...
Arbuiwer's user avatar
  • 171
2 votes
1 answer
2k views

How to know whether a VPN is blocking a website or a website is blocking a VPN

So I've got two VPN subscriptions, let's call them VPN A and VPN B. And I like going to a somewhat popular website, which I'll call Site C. I'm a new customer to VPN B, and I've noticed that I can't ...
hilltothesouth's user avatar
2 votes
0 answers
847 views

Couldn't establish a secure connection

NordVPN popped up with "Couldn't establish a secure connection." "We couldn't validate this TLS certificate and ensure a secure connection required for NordVPN to run. It looks like ...
Richard's user avatar
  • 21
0 votes
0 answers
32 views

Does VPN on app and router result in double encryption? [duplicate]

I have a VPN installed on my router and it is permanently connected to a city (City A). I also have a VPN app on my laptop. If I am connected to the WiFi on my VPN-enabled router and use the app on my ...
user avatar
0 votes
0 answers
29 views

VPN used while updating files to VPS via FTP (WinSCP) - what IP is logged? [duplicate]

When I went out for holiday I was working on my websites on local WI-Fi, I was connected all the time with Surfshark VPN. I’m sure that my location is secured but what about the situation where I ...
Ryan Slight Edge's user avatar
1 vote
1 answer
117 views

What are the risks with PPTP (MS-CHAPV1/V2)?

What are the risks with PPTP (MS-CHAPV1/V2)? Are the only ways that it can be exploited are if someone already has access to the network and can ARP poison etc or capture packets some way? Or can it ...
Floppa's user avatar
  • 11
0 votes
1 answer
247 views

can a VPN provider do DNS poisoning?

I was wondering if we push our DNS over the VPN and basically let them do DNS resolution, is it possible to perform DNS poisoning and man in the middle attack on us? I know browsers check certificates ...
Naadiyaar's user avatar
2 votes
1 answer
224 views

Do VPNs log and analyze OCSP requests?

I am a privacy-conscious user currently living in Russia where the Internet is censored and monitored by the Russian state. Russian ISPs are legally required to log and store all users’ Internet ...
Gilgamesh's user avatar
2 votes
0 answers
45 views

Is it possible to see someone using vpn who is connected to my AP and turned on hotspot for his mobile in which he uses vpn [duplicate]

I want to monitor traffic in my Access point of the users who turned on hotspots in their PC after connecting to the wi-fi. I want to monitor users who use vpn to access blocked sites in my ...
XAVERY KAZIMOTO's user avatar
3 votes
1 answer
132 views

What viable methods can be used to prevent bypassing of country IP blacklisting edge controls by using VPN?

I work in the cybersecurity division of my employer in a regulated field. Where I work, edge perimeter controls on firewall are set up to DENY All incoming connections originating in blacklisted ...
Anthony's user avatar
  • 1,756
1 vote
1 answer
818 views

Implications of accessing a web app via a VPN

I have a cloud-hosted server that I can Remote Desktop into. I have a web application that is hosted on this server via IIS. I also have a backend server on this same server that runs to get backend ...
Americo Perez's user avatar
0 votes
0 answers
18 views

Can an attacker sniff the encryption details when connecting to a VPN? [duplicate]

I thought I would be protected from sniffing if I use a VPN, even in a setting where my traffic is going through a «man-in-the-middle» either by ARP poisoning or an evil twin attack. Now I was told, ...
Merc's user avatar
  • 101
0 votes
0 answers
150 views

ISP-restricted VPN on Android

How to connect to VPN service on Android via its app if it's restricted by state ISPs, but you're able to connect via cloud VPS network outside the state My idea is about concepts in general: you ...
agiAWjoa0za's user avatar
1 vote
0 answers
176 views

Is this sign of hacked VPN?

I have some issues with Epicbrowser´s VPN. I write a URL in the address bar like duckduckgo.com. Then mfr.cdn.dcop.cz appears just for a moment. It´s so brief that it took me a few days to capture the ...
veronika's user avatar
3 votes
1 answer
926 views

Restrict VPN access to only authorised machines

Let's say the situation is this: I'm a big corporation with a whole bunch of GDPR compliance and other regulatory stuff which means I need to ensure that certain data doesn't leak (so basically most ...
Peter David Carter's user avatar
0 votes
1 answer
110 views

Is VPN "safer" for public key encrypted connections

I don't know much about encryption and how internet work in general, so my question might be ill-defined... but I guess I will still try to ask a question here. When you connect to a website directly ...
Bohan Xu's user avatar
  • 101
0 votes
0 answers
425 views

VPN vs. DoH or both? [duplicate]

I have set my Mac system WiFi DNS to 1.1.1.1. and I believe Safari supports DoH now. Should I use both DoH and a VPN together? Is using both better or does using both decrease security in any way?
GrumbleCat's user avatar
1 vote
1 answer
526 views

Bandwidth limitation in the censorship systems

Recently, Iran’s government has launched a sort of new censorship system that manipulates bandwidth as I will describe below. When a user connects to a VPN server and does an Ookla speed test, the ...
Erfan's user avatar
  • 13
-1 votes
1 answer
205 views

proxy anonymity level, what is the tehnical difference ? (specific example from hide my name)

By using hidemy name I can check for a proxy if it is up or down, and also check the anonymity level using the app. A sample result looks like this: IP address Port Country, City Speed ...
C.Unbay's user avatar
  • 207

1
2 3 4 5
28