8 ms·
> Use LTE connections, not wi-fi, for VPN connections I'd get it for non-VPN, but for VPN connections - how does it matter? As long as peers properly authentic
by drdaeman 9y ago
> Use LTE connections, not wi-fi, for VPN connections
I'd get it for non-VPN, but for VPN connections - how does it matter? As long as peers properly authenticate each other, of course.
> If you are an employee or contractor - your risk is higher
Higher than whose risk?
- elif 9y agoNo idea if this is was the commenter was implying, but I think the advice is because plenty of apps can send requests in the 1 second initial window as you authenticate your VPN. In theory, that could be sensitive data or enable a sophisticated attacker to correlate you with your VPN exit (if you were using it for pseudo-anonymity). I don't think key negotiation is compromised in any way...
- czbond 9y agoGreat question. For 'in flight' connections like a VPN, it is harder. I would most likely try to be "same network"... so I'd find them at a coffee shop and try to compromise the dev machine on the network, social engineer/phish, or if the dev was at home and I needed in, I'd try to impersonate their home WAP, or I'd try compromise their machine to cross a tunnel or look for codebases, etc. Edit: Totally derailed the topic, my bad.