Virtual Private Networks, or VPNs, are popular services for (supposedly) increasing your security and privacy on the internet. They are often marketed as all-encompassing security tools, and something that you absolutely need to keep hackers at bay. However, many of the selling points for VPNs are exaggerated or just outright
  • xenspidey@lemmy.zipEnglish
    331·
    1 year ago

    It protects your ip address, and your ISP from knowing what you’re doing. It also protects you on public wifi from nefarious actors. VPN’s aren’t meant to protect you from Google advertising while checking your Gmail account…

    • corbin@infosec.pubOPEnglish
      614·
      1 year ago

      Are there attack vectors through public Wi-Fi in recent history? Now that most sites and services are HTTPS there’s nothing they can do except do network-level blocks.

      • grabyourmotherskeys@lemmy.worldEnglish
        14·
        1 year ago

        Unless they intercept the handshake as a proxy and have access to everything after that. The average Starbucks employee is not doing this.

        An Israeli spy tracking down an arms dealer might figure out how to do this at a hotel the target was using, but the arms dealer would know that.

        Edit: I think some vps would notice this happening, fwiw.

        • hedgehog@ttrpg.networkEnglish
          3·
          1 year ago

          Unless they intercept the handshake as a proxy and have access to everything after that.

          You’re thinking of a MitM proxy, and generally speaking what you described is not a risk when using public wifi.

          There are two ways you can set up a MitM proxy:

          1. Forward all traffic back to the user unencrypted (over HTTP)
          2. Forward all traffic back to the user encrypted (with HTTPS)

          The first option will result in prominent warnings in all modern browsers. If the sites in question implemented HSTS and the user has visited them before, the browser will outright refuse to load them.

          The second option will result in even more prominent warnings that you have to go out of your way to bypass in all browsers. The only way it wouldn’t would be if one or more of the following is true:

          1. your computer has already been compromised and root certificates were installed, such that the proxy owner could use it to sign the certificates
          2. if a certificate authority was compromised, or
          3. if the site itself was compromised (e.g., if the attacker was able to acquire the SSL cert used for the site or the credentials necessary to generate a new, trusted one).
          • grabyourmotherskeys@lemmy.worldEnglish
            1·
            1 year ago

            Hence “won’t happen at Starbucks, might if Mossad is after you”. Thanks for adding the details. I feel like most people think vpns are magic but also radically overestimate their personal risk.