5 ms·
> Does not install Tor, OpenVPN, or other risky servers what's risky about openvpn? (or tor, for that matter)
by tribby 9y ago
> Does not install Tor, OpenVPN, or other risky servers
what's risky about openvpn? (or tor, for that matter)
- the_common_man 9y agoI would like to know this as well. Why is OpenVPN risky?
- jaimex2 9y agoits Open, duh. In seriousness though, the author is not a infosec expert so I would take the advice with a grain of salt.
- 45h34jh53k4j 9y agoyou are very wrong about this; dan is most certainly an infosec expert and I take his recommendation not to use openvpn seriously. Seems he was correct: https://ostif.org/the-openvpn-2-4-0-audit-by-ostif-and-quarkslab-results/ https://ostif.org/the-openvpn-2-4-0-audit-by-ostif-and-quark...
- deleted 9y ago[deleted]
- tribby 9y agothe linked audit does reveal a DoS vuln that was patched, but I wouldn't discredit the project based on something so small. audits are a good thing for a project.
- jaimex2 9y ago^ what he said. Also, he's a business school grad. But you taking infosec advice from one is none of my business. dont forget to downvote this one too on your way out.
- jd007 9y agothe algo faq gave sort of an answer: https://github.com/trailofbits/algo/blob/master/docs/faq.md#why-arent-you-using-openvpn https://github.com/trailofbits/algo/blob/master/docs/faq.md#...
- tribby 9y agothis mostly points to bad defaults and openssl being problems, which I don't see as problems with openvpn itself. I do agree it's a pain that there isn't a multi-platform client maintained by the project.