4 ms·
How can you tell if the commercial VPN service you are using is vulnerable? The client on mine is very easy to use, but has no debug output/log or console that
by arielweisberg 11y ago
How can you tell if the commercial VPN service you are using is vulnerable?
The client on mine is very easy to use, but has no debug output/log or console that I can find so I don't know what it is doing.
- schoen 11y agoDo you know what VPN protocol it is? I wonder if it would be easy to figure out in Wireshark if you had a recording of the beginning of a session.
- arielweisberg 11y agoQUIC is what WireShark says I am looking at. I can see the DNS lookup, and then a stream of encrypted UDP packets with not much plain text in the payloads. I get what the other poster says about asking the provider, but I wouldn't have much confidence in the answer.
- schoen 11y agoI'm not really familiar with QUIC, but are there any cryptographic setup steps that Wireshark can parse out of the first (say) three or four packets that get exchanged? (Or maybe the key was established when you first used the VPN and is being cached on your machine and re-used whenever you reconnect?)
- netheril96 11y agoWireshark routinely mislabels encrypted UDP packets as QUIC. My guess is that the protocol is actually OpenVPN on UDP.
- subliminalpanda 11y agoYou could always ask them. As an alternative, VPSs are cheap nowadays and you can easily spin up a VPN server automatically with something like Streisand