VPN leaking user details.

[jos]

The study of fourteen popular VPN providers found that eleven of them leaked information about the user because of a vulnerability known as 'IPv6 leakage'. The leaked information ranged from the websites a user is accessing to the actual content of user communications, for example comments being posted on forums.

 

Researchers attempted two of the kinds of attacks that might be used to gather user data - 'passive monitoring', simply collecting the unencrypted information that passed through the access point; and DNS hijacking, redirecting browsers to a controlled web server by pretending to be commonly visited websites like Google and Facebook.

 

The study also examined the security of various mobile platforms when using VPNs and found that they were much more secure when using Apple's iOS, but were still vulnerable to leakage when using Google's Android.

 

 

Source: http://www.qmul.ac.uk/media/news/items/se/158459.html

 

Full paper: http://www.eecs.qmul.ac.uk/~hamed/papers/PETS2015VPN.pdf

 

I use private internet access for VPN they have support for IPV6,DNS and email leak protection;

You can check your VPN here:

http://ipv6leak.com/

http://dnsleak.com/

http://emailipleak.com/

[sms1202]

I guess NSA is everywhere now

[,,,,,,,,,,,,,,,,,,,,,,,,,,]

This is why I tell everyone never trust a VPN that is public... make your own.

[Agent181]

at this point everyone knows everything

[SImoHayha]

This is why I tell everyone never trust a VPN that is public... make your own.

make your own ? Is that possible ?

[,,,,,,,,,,,,,,,,,,,,,,,,,,]

make your own ? Is that possible ?

 

lol yeah. Fairly easy too.

[Johannes_Lazor]

Put tin/aluminium foil over the ethernet cable before you plug it in and you're good.

jk

[Colonel_Gerdauf]

And people were saying that VPNs somehow stop the governments in their tracks. If such an exploit can be found by researchers, do you honestly think that they even slow down the surveillance efforts from NSA, GCHQ, ASD, etc.?

[mr moose]

I have long wondered just how anything that is as intertwined as the internet could be "secure"?  It does appear every so often even some of supposedly most hidden internet activities get uncovered.

[Beskamir]

lol yeah. Fairly easy too.

But then won't they be able to tell that it's you thus defeating the at least some of the reason why people use VPNs?

 

Personally I have my own VPN which I currently only use to access my home server, since for whatever reason I have yet to set it up so that it works as a regular VPN that would allow the user to access the internet through it. Main reason for that is because I don't know how to set it up and I'm too lazy to do the research on my own. Of course if someone told me what I was missing or walked me through the process I'd get it set up. Anyways if I didn't want someone to know that it's me then I'd want to use a VPN which couldn't be tracked back to me. Thus using my own wouldn't be the best idea.

[Rekx]

I use Nordvpn/avast and i get no leak when running the ipv6/email test, though its wierd because i get DNS leak even though they have DNS leak protection

 

Apperently it's not leaking my information, but the vpn/proxy im using

[,,,,,,,,,,,,,,,,,,,,,,,,,,]

But then won't they be able to tell that it's you thus defeating the at least some of the reason why people use VPNs?

 

Personally I have my own VPN which I currently only use to access my home server, since for whatever reason I have yet to set it up so that it works as a regular VPN that would allow the user to access the internet through it. Main reason for that is because I don't know how to set it up and I'm too lazy to do the research on my own. Of course if someone told me what I was missing or walked me through the process I'd get it set up. Anyways if I didn't want someone to know that it's me then I'd want to use a VPN which couldn't be tracked back to me. Thus using my own wouldn't be the best idea.

 

How would they know its you? Purchase a random RDP, use offshore servers, purchase with false information, ect ect many ways to solve that issue. Not to mention public VPNs give out your info anyways.

[Beskamir]

How would they know its you? Purchase a random RDP, use offshore servers, purchase with false information, ect ect many ways to solve that issue. Not to mention public VPNs give out your info anyways.

I actually didn't consider that you could set it up that way. I just instantly thought of running your own servers even though I'm obviously aware of the fact that can buy servers/resources that you will never actually see in person. So yeah, I guess posting late at night while watching a movie seems to result in a fairly poorly thought out post.

[,,,,,,,,,,,,,,,,,,,,,,,,,,]

I actually didn't consider that you could set it up that way. I just instantly thought of running your own servers even though I'm obviously aware of the fact that can buy servers/resources that you will never actually see in person. So yeah, I guess posting late at night while watching a movie seems to result in a fairly poorly thought out post.

 

No worries, I've posted a lot of dumb shit tonight. Can't seem to sleep, so damn hot!

[FakezZ]

Put tin/aluminium foil over the ethernet cable before you plug it in and you're good.

jk

Instructions unclear. Started nuclear war

[Johannes_Lazor]

Instructions unclear. Started nuclear war

So that is how fallout began, Fallout 5 confirmed.

[That Norwegian Guy]

You can check your VPN here:

 

 

 

 

Cyberghost, ladies and gentlemen. Just continues to stomp all over the competition.

[jos]

I use Nordvpn/avast and i get no leak when running the ipv6/email test, though its wierd because i get DNS leak even though they have DNS leak protection

 

Apperently it's not leaking my information, but the vpn/proxy im using

If you have DNS leak they can redirect to fake website pretending to be real deal..

[Rekx]

If you have DNS leak they can redirect to fake website pretending to be real deal..

Well i kind of figured that out

[Rekx]

 

Cyberghost, ladies and gentlemen. Just continues to stomp all over the competition.

 

 

I passed all the test with Nordvpn. So now it stomps all over its competition    B)

[Uwillparish]

My DNS is leaking, and im using just verizon fios, Guess who's getting a call today

EDIT: so should i actually? or should i not worry about it

[narutoninjakid]

I believe PIA (Private Internet Access) is one of the most popular VPN's and it has IPv6 Leak protections as well as DNS Leak protection and I passed all the tests as well.

[dalekphalm]

My DNS is leaking, and im using just verizon fios, Guess who's getting a call today

EDIT: so should i actually? or should i not worry about it

Did you connect to a VPN before running the test?

 

Because if you're just connecting to the website on an unencrypted connection via your regular ISP, then of course it will show as "leaked", since your connection (by default) is not secure or encrypted.

 

So yeah. If you're not using a VPN, then it's totally normal.

[Anthony10]

Hotspot shield worked for me, it said it was not leaking.

[Anthony10]

My DNS is leaking, and im using just verizon fios, Guess who's getting a call today

EDIT: so should i actually? or should i not worry about it

This article is about Virtual Private Networks not your regular internet connection. It is totally normal for that to happen.

You should not worry about it.