4 ms·
Hmm I'm not sure if a vpn will protect you from this attack. Your traffic will need to cross out of the vpn somewhere/sometime. Unless you're connecting to a hi
by SCHiM 12y ago
Hmm I'm not sure if a vpn will protect you from this attack. Your traffic will need to cross out of the vpn somewhere/sometime. Unless you're connecting to a hidden service or something.
It actually depends more on whether you use https on your first connection or not. Because even if the server is set up to only accept https and it tries to redirect you at the first opportunity you'll be vulnerable.
Generally a server configured to use https only will still listen on port 80, and send a 302 to redirect you to it's https version. That redirection can be hijacked by QI.
- tux 12y agoWell if that true then everyone has much bigger problem. Because then any VPN services becomes useless. It would be nice to see if Fox-IT could do similar tests by using VPN/TOR. But I think that VyperVPN still is the most secure VPN if it really does have this; "Chameleon scrambles OpenVPN packet metadata to ensure it’s not recognizable via deep packet inspection (DPI)"
- SG- 12y agoI wouldn't be too surprised if they're already taking steps to place equipment near major VPN providers. It might actually open up people to being exploited by the NSA using these techniques if they're trying to target someone else using the same VPN provider as collateral damage.