Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
The mitigation is to disable local network access while the VPN is connected. Many clients do this, at least on some platforms. It was interesting to see that on iOS every tested app was vulnerable to this data leaking attack, and nearly every one of them on the macOS. It appears that the iOS API for working with VPNs has only recently introduced a control for how to handle local network traffic, leading to the abysmal results.
Not surprised mac OS sucks at this but is Linux vulnerable as well?
as long as you have a firewall via iptables or something similar forcing everything through the VPN only, you should be fine I would think.
if not I'll have to change my configs a lot lol.
You are right, it's very simple. Traffic will go wherever is shortest by default, because that's just how networking works on your pc. Shut off the shortest path (or every other path) and it's forced through your VPN connection.
Semi related but there has been so much anti VPN stuff of late on the web. I blame the big vpn providers for their miss marketing and poor ads from sponsoring deals. The repercussions are making it out like vpns are not useful. Noone thought they were silver bullet before. now they are made out to be a waste of money? All the "you don't need a VPN" stuff needs to stop. Im concerned people are gonna stop caring about anonymity and enhancing privacy with VPN.
VPNs are a waste of money for the most part