3 ms·
always the breathless sensationalized vulnerability headlines... it's interesting, but of limited usefulness - the device has to accept responses from a dhcp s
by fargle 2y ago
always the breathless sensationalized vulnerability headlines...
it's interesting, but of limited usefulness - the device has to accept responses from a dhcp server. if an attacker controls a dhcp server, he's either on the network already or has already had to do a lot worse than installing a couple static routes to get there.
it's not nothing - a compromised home gateway could use this technique to sneak into a corporate VPN via a users' laptop, but if you have a compromised home gateway, you have a lot of other problems that could lead to the same result.
- Aloisius 2y agoI think a public wifi network effectively being able to disable someone's VPN is pretty bad.
- JackSlateur 2y agoThere are lots of ways to disable vpn : basic firewall on the router, if you have access ARP poisoning if you do not.
- Aloisius 2y agoYes, but this disables a user's VPN without alerting the user. Firewalling off their VPN service would cause a visible connection failure.
- fargle 2y agoif you are on a public wifi, particularly if you can control an evil dhcp server, there are sooo many other ways to attack someone's pc client and network. this is just another. it doesn't even seem that unexpected.
- vel0city 2y agoBut this heavily undermines one major selling point VPN providers use: safety on public wifi and other untrusted networks.