Vulnerabilities exploited in VPN products used worldwide

Commercial enterprise VPN products are an open sewer, and there aren't any, from any vendor, that I trust. I don't like OpenVPN or strongSwan, but you'd be better off with either of them than you would be with a commercial VPN appliance. The gold standard, as ever, is Wireguard.

Re: Vulnerabilities exploited in VPN products used worldwide

#8

Post by dontbenebby » Fri, Oct 04, 2019, 6:05 PM UTC

m-p-3 wrote: post #5

inetknght wrote: post #3

> You need to enable JavaScript to run this app. Can someone provide a link to a page which isn't built by a retard?

IFPS mirror https://ipfs.io/ipfs/QmWux6nCqtWrYkcExi3yzrhoejfiQxK46dr6jGB... https://cloudflare-ipfs.com/ipfs/QmWux6nCqtWrYkcExi3yzrhoejf... PDF file at the bottom https://s3.eu-west-1.amazonaws.com/ncsc-content/files/VPN_Vu...

This is interesting. I wonder if I am more or less secure using an Algo VPN on AWS than a branded VPN company.

(I'm assuming they don't sit on all AWS servers/have broad access hence going after less mature businesses...)

Re: Vulnerabilities exploited in VPN products used worldwide

#9

Post by ihuman » Fri, Oct 04, 2019, 6:07 PM UTC

tptacek wrote: post #7

Commercial enterprise VPN products are an open sewer, and there aren't any, from any vendor, that I trust. I don't like OpenVPN or strongSwan, but you'd be better off with either of them than you would be with a commercial VPN appliance. The gold standard, as ever, is Wireguard.

Why do you prefer Wireguard over Openvpn?

Re: Vulnerabilities exploited in VPN products used worldwide

#10

Post by Havoc » Fri, Oct 04, 2019, 6:08 PM UTC

>These vulnerabilities are well documented in open source.

Seeing this awkward use of "open source" a lot lately. Its almost as if people think "readable on the internet for free" equals open source.