Privacy

31993 readers

539 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

Be mindful of VPNs as then are once again not a silver bullet (hackaday.com)

submitted 1 year ago by possiblylinux127@lemmy.zip to c/privacy@lemmy.ml

9 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] 1984@lemmy.today 13 points 1 year ago (3 children)

The mitigation is to disable local network access while the VPN is connected. Many clients do this, at least on some platforms. It was interesting to see that on iOS every tested app was vulnerable to this data leaking attack, and nearly every one of them on the macOS. It appears that the iOS API for working with VPNs has only recently introduced a control for how to handle local network traffic, leading to the abysmal results.

Not surprised mac OS sucks at this but is Linux vulnerable as well?

[–] girsaysdoom@sh.itjust.works 13 points 1 year ago* (last edited 1 year ago)

This isn't exactly a platform specific problem because having local network access while using a VPN is actually a feature called "split-tunnelling". The tunnelcrack issue goes beyond this but can be mitigated by using full tunnel VPN that resolves the server by IP address instead of DNS.

[–] zwekihoyy@lemmy.ml 3 points 1 year ago (1 children)

as long as you have a firewall via iptables or something similar forcing everything through the VPN only, you should be fine I would think.

if not I'll have to change my configs a lot lol.

[–] Ricaz@lemmy.ml 2 points 1 year ago

You are right, it's very simple. Traffic will go wherever is shortest by default, because that's just how networking works on your pc. Shut off the shortest path (or every other path) and it's forced through your VPN connection.