Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
∞ take a peek at our legendary cryptostorm_is twitter feed if you're into that kind of thing ∞
Ξ we're rolling out voodoo network security across cryptostorm - big things happening, indeed! Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit GitHub Ξ
Ξ We've updated our CA certificate. All members need to be using the latest ones by Dec 22. See this page for more infoΞ

[The Register] 'Get a VPN to defeat metadata retention' is good advice. Sometimes

Industry news items concerning VPNs, darknets, crypto, surveillance and secure computing.
User avatar

Topic Author
parityboy
Site Admin
Posts: 1220
Joined: Wed Feb 05, 2014 3:47 am

[The Register] 'Get a VPN to defeat metadata retention' is good advice. Sometimes

Postby parityboy » Fri Nov 13, 2015 5:36 pm

With the kind-of-launch of the Australian government's telecommunications data retention regime, there's been a plethora of advice everywhere – from “lad mags” to the tech press to political parties – with one theme: “get a virtual private network” (VPN).

Which moves Vulture South to idly wonder: do people know that a VPN on Android might only protect data emanating from the phone, and not (for example) a laptop tethered to its WiFi?

This isn't news, it's just an observation that consumer-level advice about information security is not to be trusted. To make recommendations about security you have to be the kind of obsessive that assumes nothing, takes nothing at face value and checks everything.

Vulture South can't claim that kind of attention to detail: the issue was pointed out to us by someone else. We do, however, like to test things for ourselves, so we downloaded two copies of OpenVPN (one on the MacBook Pro, one on the Samsung S5) and set to work.

TLDR: OpenVPN on Android only protects communications originating on the phone, but not a tethered PC, as we show below.


Source

User avatar

Topic Author
parityboy
Site Admin
Posts: 1220
Joined: Wed Feb 05, 2014 3:47 am

Re: [The Register] 'Get a VPN to defeat metadata retention' is good advice. Sometimes

Postby parityboy » Fri Nov 13, 2015 5:37 pm

The test they do is crap, in my opinion. An IP checker test would have been far simpler and far more revealing.

User avatar

marzametal
Posts: 505
Joined: Mon Aug 05, 2013 11:39 am

Re: [The Register] 'Get a VPN to defeat metadata retention' is good advice. Sometimes

Postby marzametal » Sat Nov 14, 2015 5:05 am

I'm not sure I would have the guts to use my smartphone as a wifi hotspot, or even as a router... knowing all the creepy-crawlies out there are just waiting to jump on the bandwagon and archive my data (plus whatever else they have planned) is enough to prevent me from trying.

If I can't connect A to B via cable, I ain't using it.


Return to “crypto, VPN & security news”

Who is online

Users browsing this forum: No registered users and 6 guests

Login