3 ms·
Huge Security Flaw Can Expose VPN Users' Real IP-Adresses
- omribahumi 11y agoI don't understand how the attack works from reading this. Seems to me like it's related to UPnP. Any idea?
- jacquesm 11y agoIf I understood it right it connects to the same VPN server, sets up port forwarding there, then uses the default route to trick the victim into connecting outside the VPN to a resource the attacker controls for instance by making them visit a webpage with an embedded resource placed there by the attacker.
- ogurechny 11y agoIt's a standard gimmick with NAT users accessing their own external IP address. Someone was in a hurry to make easy money and didn't read http://www.netfilter.org/documentation/HOWTO/NAT-HOWTO.html http://www.netfilter.org/documentation/HOWTO/NAT-HOWTO.html Notice how they haven't informed any software developers about that “huge flaw”? That's because there is no flaw and no one to blame except themselves.
- brudgers 11y agoThe original article at Perfect Privacy: https://www.perfect-privacy.com/blog/2015/11/26/ip-leak-vulnerability-affecting-vpn-providers-with-port-forwarding/ https://www.perfect-privacy.com/blog/2015/11/26/ip-leak-vuln... HN: https://news.ycombinator.com/item?id=10636912 https://news.ycombinator.com/item?id=10636912