Go Back   Wireless and Wifi Forums > News > Newsgroups > alt.computer.security
Register FAQ Forum Rules Members List Calendar Search Today's Posts Advertise Mark Forums Read

 
Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 02-13-2011, 06:15 AM
Searching_____
Guest
 
Posts: n/a
Default is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?

For example, a VPN company will have you install their own modified
version of OpenVPN, but what about replacing it with the original
installer from Openvpn.net?

Any privacy or security implications from doing this? Are you less
anonymous? Is your vpn encrypted traffic more prone to leaking?

Thanks in advance.
--
An alkaline environment is detrimental to the "flu" organism, hence
alkalizing agents and an alkaline-reacting diet are helpful.
Edgar Cayce for Edgar Cayce Diet Recommendations
MBAM - I put that **** on everything!

Reply With Quote
  #2 (permalink)  
Old 02-13-2011, 06:16 AM
hierophant
Guest
 
Posts: n/a
Default Re: is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?

On Sun, 13 Feb 2011 02:15:14 -0500, Searching_____ wrote:

> For example, a VPN company will have you install their own modified
> version of OpenVPN, but what about replacing it with the original
> installer from Openvpn.net?
>
> Any privacy or security implications from doing this? Are you less
> anonymous? Is your vpn encrypted traffic more prone to leaking?
>
> Thanks in advance.


For some services, there may be capabilities in the client that you
wouldn't get with stock OpenVPN. For example, the Mullvad client
includes an option to block traffic if the VPN connection fails.
Using stock OpenVPN, as noted above, you'd need to handle that
yourself. And FWIW, I don't like the method that Mullvad uses, but
that's another conversation.

OTOH, some services use clients that do potentially annoying things.
For example, there's one (which, I forget) that "hides" the TAP
adapter in Windows -- in that it doesn't show up in Network
Connections. Even worse, after uninstalling the software, TAP
adapters created by other VPN services are also hidden. I'm sure that
there's a way to fix that, but I never bothered to find it.
--
heremypants@hushmail.com
http://heremypants.weebly.com/

Reply With Quote
  #3 (permalink)  
Old 02-13-2011, 06:18 AM
Searching_____
Guest
 
Posts: n/a
Default Re: is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?

On Sun, 13 Feb 2011 02:16:44 -0500, hierophant wrote:

> On Sun, 13 Feb 2011 02:15:14 -0500, Searching_____ wrote:
>
>> For example, a VPN company will have you install their own modified
>> version of OpenVPN, but what about replacing it with the original
>> installer from Openvpn.net?
>>
>> Any privacy or security implications from doing this? Are you less
>> anonymous? Is your vpn encrypted traffic more prone to leaking?
>>
>> Thanks in advance.

>
> For some services, there may be capabilities in the client that you
> wouldn't get with stock OpenVPN. For example, the Mullvad client
> includes an option to block traffic if the VPN connection fails.
> Using stock OpenVPN, as noted above, you'd need to handle that
> yourself. And FWIW, I don't like the method that Mullvad uses, but
> that's another conversation.
>
> OTOH, some services use clients that do potentially annoying things.
> For example, there's one (which, I forget) that "hides" the TAP
> adapter in Windows -- in that it doesn't show up in Network
> Connections. Even worse, after uninstalling the software, TAP
> adapters created by other VPN services are also hidden. I'm sure that
> there's a way to fix that, but I never bothered to find it.


Hierophant, so basically OpenVPN.net stock should include all the
basics & critical components of OpenVPN in terms of VPN and encrypted
traffic. Anything that a VPN provider might add would then appear to
be "extra features," which can maybe improve privacy.

I am not sure if our methods are any different but I secure my VPN
connection using a route delete command:

route delete 0.0.0.0 192.168.1.1

After my OpenVPN connection is disconnected, my applications will not
leak my real ip address. (Without this command, my real ip address
will leak).

For example, let's say OpenVPN is connected and my VPN ip address is
"22.222.22.222" If my vpn connection is disconnected, firefox will
leak my real ip address "166.167.166.167". With a route delete
command, firefox will not leak my real ip address and simply not
connect any longer. (As far as I understand)

Is using route delete command not good enough? Am I missing something?
Is your method any better/more secure?
--
An alkaline environment is detrimental to the "flu" organism, hence
alkalizing agents and an alkaline-reacting diet are helpful.
Edgar Cayce for Edgar Cayce Diet Recommendations
MBAM - I put that **** on everything!

Reply With Quote
  #4 (permalink)  
Old 02-13-2011, 06:21 AM
nix
Guest
 
Posts: n/a
Default Re: is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?

On Sun, 13 Feb 2011 02:18:03 -0500, Searching_____ wrote:

> On Sun, 13 Feb 2011 02:16:44 -0500, hierophant wrote:
>
>> On Sun, 13 Feb 2011 02:15:14 -0500, Searching_____ wrote:
>>
>>> For example, a VPN company will have you install their own modified
>>> version of OpenVPN, but what about replacing it with the original
>>> installer from Openvpn.net?
>>>
>>> Any privacy or security implications from doing this? Are you less
>>> anonymous? Is your vpn encrypted traffic more prone to leaking?
>>>
>>> Thanks in advance.

>>
>> For some services, there may be capabilities in the client that you
>> wouldn't get with stock OpenVPN. For example, the Mullvad client
>> includes an option to block traffic if the VPN connection fails.
>> Using stock OpenVPN, as noted above, you'd need to handle that
>> yourself. And FWIW, I don't like the method that Mullvad uses, but
>> that's another conversation.
>>
>> OTOH, some services use clients that do potentially annoying things.
>> For example, there's one (which, I forget) that "hides" the TAP
>> adapter in Windows -- in that it doesn't show up in Network
>> Connections. Even worse, after uninstalling the software, TAP
>> adapters created by other VPN services are also hidden. I'm sure that
>> there's a way to fix that, but I never bothered to find it.

>
> Hierophant, so basically OpenVPN.net stock should include all the
> basics & critical components of OpenVPN in terms of VPN and encrypted
> traffic. Anything that a VPN provider might add would then appear to
> be "extra features," which can maybe improve privacy.
>
> I am not sure if our methods are any different but I secure my VPN
> connection using a route delete command:
>
> route delete 0.0.0.0 192.168.1.1
>
> After my OpenVPN connection is disconnected, my applications will not
> leak my real ip address. (Without this command, my real ip address
> will leak).
>
> For example, let's say OpenVPN is connected and my VPN ip address is
> "22.222.22.222" If my vpn connection is disconnected, firefox will
> leak my real ip address "166.167.166.167". With a route delete
> command, firefox will not leak my real ip address and simply not
> connect any longer. (As far as I understand)
>
> Is using route delete command not good enough? Am I missing something?
> Is your method any better/more secure?


There are various ways of securing openvpn. The problem is not openvpn
itself, but the way windows does networking altogether. In a linux
system, it is relatively trivial to make openvpn all-or-nothing. In
windows, it is less so: no proper network stack or routing tables,
adapters can fight for metric 1 (like hamachi), leaks are possible.
and it gets worse with leaky protocols added on top.

There are some new methods coming on that should work much better, and
when The Wizard releases Safehouse, it will also act as a free and
leakproof vpn client that you can use with any OpenVPN connection on
any provider.

Trust My Wizard;;; From OZ he does not come;;;
--
I want love and kisses and ponies in a field of ****ographic pleasure.
My favorite website ;0) www.platanalytics.com
Call/email the Owner ;) Nancy Norelli 305.926.8245
nnorelli@platanalytics.com
http://uscybercomresistanceleague.co...nalcapability/

Reply With Quote
  #5 (permalink)  
Old 02-13-2011, 07:28 AM
DasFox
Guest
 
Posts: n/a
Default Re: is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?

On Sun, 13 Feb 2011 02:21:12 -0500, nix wrote:

> On Sun, 13 Feb 2011 02:18:03 -0500, Searching_____ wrote:
>
>> On Sun, 13 Feb 2011 02:16:44 -0500, hierophant wrote:
>>
>>> On Sun, 13 Feb 2011 02:15:14 -0500, Searching_____ wrote:
>>>
>>>> For example, a VPN company will have you install their own modified
>>>> version of OpenVPN, but what about replacing it with the original
>>>> installer from Openvpn.net?
>>>>
>>>> Any privacy or security implications from doing this? Are you less
>>>> anonymous? Is your vpn encrypted traffic more prone to leaking?
>>>>
>>>> Thanks in advance.
>>>
>>> For some services, there may be capabilities in the client that you
>>> wouldn't get with stock OpenVPN. For example, the Mullvad client
>>> includes an option to block traffic if the VPN connection fails.
>>> Using stock OpenVPN, as noted above, you'd need to handle that
>>> yourself. And FWIW, I don't like the method that Mullvad uses, but
>>> that's another conversation.
>>>
>>> OTOH, some services use clients that do potentially annoying things.
>>> For example, there's one (which, I forget) that "hides" the TAP
>>> adapter in Windows -- in that it doesn't show up in Network
>>> Connections. Even worse, after uninstalling the software, TAP
>>> adapters created by other VPN services are also hidden. I'm sure that
>>> there's a way to fix that, but I never bothered to find it.

>>
>> Hierophant, so basically OpenVPN.net stock should include all the
>> basics & critical components of OpenVPN in terms of VPN and encrypted
>> traffic. Anything that a VPN provider might add would then appear to
>> be "extra features," which can maybe improve privacy.
>>
>> I am not sure if our methods are any different but I secure my VPN
>> connection using a route delete command:
>>
>> route delete 0.0.0.0 192.168.1.1
>>
>> After my OpenVPN connection is disconnected, my applications will not
>> leak my real ip address. (Without this command, my real ip address
>> will leak).
>>
>> For example, let's say OpenVPN is connected and my VPN ip address is
>> "22.222.22.222" If my vpn connection is disconnected, firefox will
>> leak my real ip address "166.167.166.167". With a route delete
>> command, firefox will not leak my real ip address and simply not
>> connect any longer. (As far as I understand)
>>
>> Is using route delete command not good enough? Am I missing something?
>> Is your method any better/more secure?

>
> There are various ways of securing openvpn. The problem is not openvpn
> itself, but the way windows does networking altogether. In a linux
> system, it is relatively trivial to make openvpn all-or-nothing. In
> windows, it is less so: no proper network stack or routing tables,
> adapters can fight for metric 1 (like hamachi), leaks are possible.
> and it gets worse with leaky protocols added on top.
>
> There are some new methods coming on that should work much better, and
> when The Wizard releases Safehouse, it will also act as a free and
> leakproof vpn client that you can use with any OpenVPN connection on
> any provider.
>
> Trust My Wizard;;; From OZ he does not come;;;


TOPLETZ comes from inside a POCKETBOOK...

THANKS
--
Gays make sick attempt at Harry Potter
http://www.methodshop.com/gadgets/re...-stick/big.jpg
https://ari.jottit.com/ YOU want to be next...? **** with 'FOX then...
https://www.icmag.com/ic/showpost.ph...9&postcount=25
Anybody with an internet connection, 5 grand, an iq above room
temperature and basic literacy can grow outstanding cannabis.

Reply With Quote
  #6 (permalink)  
Old 02-16-2011, 11:22 AM
DasFox
Guest
 
Posts: n/a
Default Re: is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?

On Sun, 13 Feb 2011 02:16:44 -0500, hierophant wrote:

> On Sun, 13 Feb 2011 02:15:14 -0500, Searching_____ wrote:
>
>> For example, a VPN company will have you install their own modified
>> version of OpenVPN, but what about replacing it with the original
>> installer from Openvpn.net?
>>
>> Any privacy or security implications from doing this? Are you less
>> anonymous? Is your vpn encrypted traffic more prone to leaking?
>>
>> Thanks in advance.

>
> For some services, there may be capabilities in the client that you
> wouldn't get with stock OpenVPN. For example, the Mullvad client
> includes an option to block traffic if the VPN connection fails.
> Using stock OpenVPN, as noted above, you'd need to handle that
> yourself. And FWIW, I don't like the method that Mullvad uses, but
> that's another conversation.
>
> OTOH, some services use clients that do potentially annoying things.
> For example, there's one (which, I forget) that "hides" the TAP
> adapter in Windows -- in that it doesn't show up in Network
> Connections. Even worse, after uninstalling the software, TAP
> adapters created by other VPN services are also hidden. I'm sure that
> there's a way to fix that, but I never bothered to find it.


hierophant the OPs question was general in nature as it relates to any
VPN, yet you specifically reply starting out talking about
Xerobanks...STOP...

Please stay on topic as this doesn't relate to an particular
company...GROW UP...

CHEERS

THANKS
--
Gays make sick attempt at Harry Potter
http://www.methodshop.com/gadgets/re...-stick/big.jpg
https://ari.jottit.com/ YOU want to be next...? **** with 'FOX then...
https://www.icmag.com/ic/showpost.ph...9&postcount=25
Anybody with an internet connection, 5 grand, an iq above room
temperature and basic literacy can grow outstanding cannabis.

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Question on Linksys Router WRT54G or WRT54GS Hardware version. pattyjamas@hotmail.com alt.internet.wireless 5 09-03-2006 07:05 PM
PGP 8.1 for Windows & Mac PGP Version 8.1 downloads comp.security.misc 1 10-25-2005 07:49 PM
[SSL-Talk List FAQ] Secure Sockets Layer Discussion List FAQ v1.1.1 Shannon Appel comp.security.misc 0 10-19-2005 04:37 AM
[SSL-Talk List FAQ] Secure Sockets Layer Discussion List FAQ v1.1.1 Shannon Appel comp.security.misc 0 08-30-2005 04:26 AM
[SSL-Talk List FAQ] Secure Sockets Layer Discussion List FAQ v1.1.1 Shannon Appel comp.security.misc 0 07-31-2005 04:25 AM


All times are GMT. The time now is 03:19 AM.



Powered by vBulletin® Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.6.0 PL2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45