Tiger Board Logo

Donor's Den General Leaderboards TNET coins™ POTD Hall of Fame Map FAQ
GIVE AN AWARD
Use your TNET coins™ to grant this post a special award!

W
50
Big Brain
90
Love it!
100
Cheers
100
Helpful
100
Made Me Smile
100
Great Idea!
150
Mind Blown
150
Caring
200
Flammable
200
Hear ye, hear ye
200
Bravo
250
Nom Nom Nom
250
Take My Coins
500
Ooo, Shiny!
700
Treasured Post!
1000

YOUR BALANCE
So, the main VPN advocate out there has been hacked
storage This topic has been archived - replies are not allowed.
Archives - General Boards Archive
add New Topic
Replies: 10
| visibility 359

So, the main VPN advocate out there has been hacked


Oct 21, 2019, 2:07 PM

If you put yourself in a digital environment, you're never anonymous


https://techcrunch.com/2019/10/21/nordvpn-confirms-it-was-hacked/amp/


badge-donor-05yr.jpg flag link military_tech thumb_downthumb_up


I've said this before..


Oct 21, 2019, 2:10 PM

A VPN setup like this, unless you are out of the US and trying to look like you are in the US, is pretty useless.

Basically, the only thing you are doing using this is adding friction to your network connection.

badge-donor-05yr.jpg flag link military_tech thumb_downthumb_up

Re: concur....


Oct 21, 2019, 3:28 PM

but their ads/marketing is pretty much the opposite.

Be safe, browse without care, etc....

If you don't want it out there, don't use it, IMO.

badge-donor-05yr.jpg flag link military_tech thumb_downthumb_up


It will stop letters like this


Oct 21, 2019, 5:06 PM [ in reply to I've said this before.. ]



I signed up with a 3 year subscription. It's paid for itself already.

Now please excuse me while I go download the Clemson vs. Louisville football game off Youtube. As for the "hack", it wasn't much of one really. It DID enable them to spoof a NordeVPN server if they wanted to, but you would have to be a target for them do do a man-in-the-middle attack anyway. Not concerned at all.

2024 orange level memberbadge-donor-15yr.jpgringofhonor-tiggity-110.jpg flag link military_tech thumb_downthumb_up


Re: So, the main VPN advocate out there has been hacked


Oct 21, 2019, 3:40 PM

WhoNix is free

flag link military_tech thumb_downthumb_up


Thats just another *nix download isn't it?


Oct 21, 2019, 4:11 PM

It doesn't really perform any functions of a VPN, does it? (I mean no more than any other OS will, if configured for that)

badge-donor-05yr.jpg flag link military_tech thumb_downthumb_up

Re: Thats just another *nix download isn't it?


Oct 21, 2019, 4:36 PM

Yes, but it routes network traffic through the onion protocol (not just browser traffic). So it's Tor, but for the operating system and not for the browser.

It's super slow, but if you're looking to obfuscate your client IP address, it accomplishes the same thing without exposing you to a couple of points of failure (i.e. Nord VPN) in the event that the exit nodes are monitored and/or the network is compromised.

There's still the risk of attacks on VM (looking at your, VirtualBox), so it's recommended to run your Gateway on bare metal on one machine and running the desktop instance in a VM on another host machine. I haven't gone that far because I do it more as a hobby, but it's fun to play around with and research. I also wonder where someone like Edward Snowden went wrong.

flag link military_tech thumb_downthumb_up


If you're really trying to hide an IP, I'd just use


Oct 21, 2019, 4:41 PM

https://www.anonymizer.com/


Or sponge the internets off a hotel, restaurant or bar or something using a secondary NIC or spoofed MAC.

With anything that you have to access using YOUR IP provider...they have logs of DNS requests for whatever you first try and connect to. If I was trying to hide my IP, I'd keep it as far away from my own internet provider as possible.

badge-donor-05yr.jpg flag link military_tech thumb_downthumb_up

Yeah, I've always understood the ISP as a weakspot


Oct 21, 2019, 4:47 PM

in the whole system. In most cases, I hope that I'm not doing anything that's going to have the FBI subpoena my ISP for whatever logs, etc.

$220/month is pretty steep for personal use. I might give it a shot once I launch my opiate distribution business on the dark web.

flag link military_tech thumb_downthumb_up


Dark web isn't really dark. Yes, you can hide your


Oct 21, 2019, 5:48 PM

DNS requests, your IP through a VPN, and even more using Tor. BUT, the ultimate weakness of the dark web is that no matter how much security you have between you and your endpoint, you are ALWAYS going to be vulnerable to malware and zero day exploits through whatever browser you use. Your chances decrease when you disable javascript, and other scripts, but even then the browser itself is always vulnerable too.

What usually happens is a hosting service notices unusual traffic in large amounts to a certain server they host, usually through an audit or something. They then look on their servers and find your illegal darkweb website. They then notify authorities. Authorities then move in, access the WEBSITE itself, plant their browser exploit in the webpages that are served, and then keep things running as usual for as long as possible, harvesting the IP and MAC address of every machine that connects. They set up a dummy server to harvest the IP hits and MAC address info. Then after a while they shut it down, and go out and arrest tons of people. Read an article on this once, and this is why government and the private security sector don't share zero day exploits anymore. Years ago if the government found a weakness, they'd alert Microsoft, Mozilla, Google, etc. And if Microsoft found one they'd alert the government. Now, the government sits on zero day exploits, and uses them frequently.

So you click on the Stubborn Heroin Distribution Network page on the dark web. If the police have found it, they then modify the webpage code so that everyone who accesses Stubborn Distribution Network and loads a page then has their PC browser send a random ping to a server operated by law enforcement. In that ping is included your REAL IP address and your PC's MAC address, with a date and time stamp. Usually it's not the main page on a drug website they insert the code, but into the payment page, or confirmation page. That way they know you've purchased drugs. Quick subpoena to your ISP and they have you. When they knock on your door, they take your PC and find the matching MAC address. And you're done. This is just one example. But it is based on a real case. They even found the website operator in one case by planting their code on the admin page only he could access. They found he logged in at a certain time and found a pattern. Guy was "smart" and logged in from a coffee shop public wifi. Well, they then staked out the place, saw him enter the shop. He logged in right on time sending his MAC address, and they monitored the data from the public wifi and found his laptop. Walked over to his table and arrested him.

Point is the darkweb is not safe. If they want you bad enough, they will get you.

2024 orange level memberbadge-donor-15yr.jpgringofhonor-tiggity-110.jpg flag link military_tech thumb_downthumb_up


Excuse me Special Agent Smith,


Oct 21, 2019, 7:19 PM

I was just trying to stream the Seattle Seahawks games in South Carolina! Why are you accusing me of running an international drug ring?!?!?? ;)

flag link military_tech thumb_downthumb_up


Replies: 10
| visibility 359
Archives - General Boards Archive
add New Topic