Hot answers tagged

21

If the wireshark trace was made from the perspective of a passive eavesdropper, then there is nothing in the trace that could be used to tamper with future SSL/TLS connections. Keep in mind that there are many entities that are in a position to make the same trace that you made, including wireless hotspot operators, ISPs, backbone carriers, data centers, ...


5

As you noted, "languages/keyboards" may help. But it can be improved with "TimeZone" Also, if the application has enough privilege, it may: Ask the operating system what is the location Ask the list of Wifi in range and if any one of them have a known location If it can read your personal files it may - for example - reads pictures location metadata. ...


4

If the only port forwarded to the server is the port used by the game, you are fine. You can protect even Windows 95 with the correct measures. If you block everything but the game server, not use the computer for anything else but host the game (no browsing, no email, no running random programs), it will be reasonably safe.


4

Easy: disconnect the router from the internet and turn off data on your mobile. You still have a home network, but no access to the internet and the attacker is cut off. Connect to the router from wifi and reset the router to factory settings (see your manual). Factory reset your mobile devices. Everything is now back to a safe state.


2

The short answer is that it depends on how the VPN is set up. If truely all network traffic passes through the proxy, then the computer only knows the outside world through the proxy. But there are many ways for traffic to not go through the proxy, and indeed, the application might attempt to bypass the proxy.


2

Running Malware in a safe environment is called Sandboxing. A virtual machine and VPN Combo is an excellent choice for a Sandbox environment. The risk comes down to if the attacker can break out of the virtual environment and that comes down to what Virtualization software you are using. Other than that as long as you are careful not to enter sensitive ...


2

Yes, this is definitely possible and is likely a good solution to your problem, assuming it is set up properly. Firewall rules and routing should solve most of the usability and security issues. I don't think there is a particular name for this, as it is still just a VPN configuration. Maybe split tunnelling works to describe it?


2

CBHacking's answer is completely accurate regarding the benefits of VPNs. However, I do not believe it addresses your question of "does allowing VPN access to mobile devices increase risk?" You may have valid concerns. Depending on the type of mobile device, it may be a mobile phone that could be lost or stolen, or a industrial-type/other device that is ...


2

The main advantage of a VPN over a simple TLS connection (which HTTPS is) is that the VPN authenticates the client. TLS can do this as well; just use mutual TLS (TLS with client certificates), which nearly all TLS server and client implementations (including HTTPS servers and clients) support. Create and install a unique client certificate (with a unique ...


2

Even with port forwarding, you do not want to expose your filesystem to attackers as it might be possible to use your hacked server as a pivot for lateral privilege escalation through the router into your home server. It depends on your router's configuration/model too. I strongly suggest that you run the game from a Docker container, so that it will be ...


2

I have some doubts, like schroeder that your home router was hacked. The more likely explanation is something else in your network is infected. If you want to be 99% sure, flash the router firmware to the latest/greatest, and factory reset it. If you want to be 100% sure, buy a new router from a completely different manufacturer and completely disconnect ...


1

We wont allow people to go directly on the internet without going through the internal security measures thats setup on the company network. It is unclear what these internal security measures are, which means that one cannot say if they can be replicated in the setup you envision. For example it is not uncommon to have a deeper inspection for web traffic ...


1

If someone only has access to a packet capture, and no other key material, then they will obviously be able to see unencrypted data such as the server name (SNI) and the server certificate in TLS 1.2, but not the encrypted data. TLS is designed to prevent third parties from tampering with the session and to prevent replay attacks. The file generated by the ...


1

The current version of Windows File Sharing (SMB v3) includes a number of good security features, but they are not all enabled by default. If you want to ensure your file share uses cryptographic protections (signing and encrypting), you should explicitly check (and enable if needed) those features. See https://docs.microsoft.com/en-us/windows-server/storage/...


1

a desktop application able to run system commands All bets are off at this point. A malicious application could easily retrieve your real IP address and send it over the VPN to its C2 server. Or your local timezone. Or your locale settings such as language, date format, fonts...


Only top voted, non community-wiki answers of a minimum length are eligible