
eisfeld
Advanced Member-
Posts
4,382 -
Joined
-
Last visited
Content Type
Events
Forums
Downloads
Quizzes
Gallery
Blogs
Everything posted by eisfeld
-
Surprising Statistics: Uncovering Thailand's Hidden Population Crisis
eisfeld replied to snoop1130's topic in Thailand News
What does a more than a decade old picture of people on a demonstration in a spanish speaking country have to do with demographics of Thailand? And what crisis is the article talking about? How can overcrowding be hidden? Why is it surprising when the same survey is made very year? Nothing makes sense 😞 -
Free Trade Agreement Nearing Completion Between Thailand and EU
eisfeld replied to snoop1130's topic in Thailand News
There is no EU embassy. The EU is not a country. There is a delegation of the EU. -
Trump Courts Oil Executives for $1 Billion Campaign Boost
eisfeld replied to Social Media's topic in World News
Presidential policies openly for sale. Fantastic. Whenever you think he cant drag things lower he comes in with another punch in the face. An infinite fractal of a disaster. Just kinda from the inside out because the disasters get bigger not smaller. -
There are similarities for sure that's why I also said earlier this new attack is just a variation of similar prior attacks and nothing shocking. Even TunnelCrack is not the first of this kind. And even before attacks on VPNs there have been attacks on routing tables for decades to leak traffic somewhere where it was not intended to go. That's why there are carefully designed VPN clients which are not vulnerable to these attacks because the basic idea behind them is always the same. Classic examples are BGP hijacking or DNS cache poinoning. The idea is always the same: redirect traffic from its intended destination. Just using different features and attacking different layers. The problem with attacks that work directly on an enduser device is that they can prevent the traffic from entering the VPN in the first place and therefore getting encrypted. That's why you still want a layer of encryption that doesn't depend on the network routing in applications like TLS for websites, email servers and so on.
-
No I'm not saying that and I don't know why you suggest I would have. Al Jazeera is not the Thaiger 🙂 But it's really easy to spin facts and present information in misleading ways. Nobody is denying the destruction and I've critized Israel for it. That doesn't change the fact that 1. Qatar supports Hamas and 2. Al Jazeera is the "soft power" broadcast of Qatar. You should take anything they distribute with the understanding that they are not exactly unbiased.
-
1. That's an older, different attack from what this topic is about and therefore can't act as an explanation. 2. It's not a backdoor, just many VPN clients didn't handle simple network configurations properly
-
Not everyone is running a darknet drug marketplace and hiding from the police 🙂
-
I actually agree with you here. Multiple layers don't help in any way against this attack because the attack causes the clients to not even send the traffic through the first hop and so subsequent hops are bypassed as well. In other words it causes the traffic to not enter the VPN in the first place and flow out somewhere else.
-
Nothing they researches published mentioned the number 50. I don't know where Heise took that from. Anyways notifying a vendor about a problem doesn't mean they tested it. And it also doesn't mean that the users of a vendor need to worry about it - even if their VPN is vulnerable. Again don't be dense. Of course I have no source. It's a figure of speech and not a claim of fact. You really are German 🙂
-
Uhm no, the attack is on the IP routing table via DHCP. TCP, UDP, ports etc don't matter. It's at a layer under that.
-
Where is the number 50 from? It's not from the linked article. They don't mention at all how many they tested. And I want to ask again where the 77% you mentioned is from. Anyways you have to be a bit realistic about the threat model for the majority of users. Most people read these headlines and articles and get duped into fear while in reality it's not going to hurt them in any way. Corporate VPN users for example... if the traffic doesn't go through the VPN then it also wont have access to their networks. Most of these route to non-public IPs anyways in the 10.0.0.0/8 range or similar. Nobody will be able to snoop on that because there's nothing to route to. And then you have the big number of users who use VPNs to cirmcumvent geo blocking or some such. Again nothing to worry. Big nothing burger for most.
-
It's getting blown way out of proportion. 99% of VPN users have nothing to worry about. They can continue watching their Netflix or downloading torrents or whatever they use it for.
-
VPNs on Android. Don't be dense. BTW Android does have a VPN built in.
-
Alternative facts, bro. Android is not affect. Proper VPN clients setting firewalls are not affected. Wireguard with proper usage of namespaces is not affected. Users using something like a mobile router are not affected. Users at home are not affected. The list goes on. Again, where did the 77% come from?
-
Where did you take that number from? BTW the second link in your OP just redirects to https://www.techradar.com/features/why-your-business-needs-a-vpn which is a generic article trying to sell VPNs.
-
Misleading topic. It's absolutely untrue that all VPNs are vulnerable to this attack which btw isn't exactly a new idea just the variation of using that specific DHCP option. It's a variant of prior attacks like Poison Tap. Good VPN clients add firewall rules that prevent this issue. And it's only a concern if you are using someone elses network like a public Wifi. At home you got nothing to worry about because it's the router that has to perform the attack. Nobody on the general internet can snoop on you with this.
-
Man drowns after getting caught in a rip at Kata Noi Beach
eisfeld replied to snoop1130's topic in Phuket News
If he was just random trolling then it would be OK. But his "advise" can mislead people into dangerous situations. We are not argueing for his sake but for the random readers sake. -
Ex-President Faces Jail Threat for Repeated Gag Order Violations
eisfeld replied to Social Media's topic in World News
The judge is instructing the jury and the jury will decide if Trump is guilty and what amounts will be paid according to the framework that the judge explains to them. I don't think that losing the trial will help him in the election. It will strengthen the believes of those who already believe he is being persecuted by the system but he already won these voters. There are plenty of voters on the fence who might not want to vote for a convicted felon. It would mean admitting to themselves either that the justice system is broken or that it's not broken but they are ok with a criminal in charge. Both would be hard to swallow. So by voting against him they can maintain to themselves that the american system works and they did the right thing. Trumps play will be to try to delay the trial until after election but I think he wont succeed in that. After the second loss and the legal cases closing in on him he will also lose massive support in the wider rupublican base. Will he go to prison? I'm not sure. But his political career will be pretty much over. He burned too many former allies on the way. -
Bangkok Bank has an office in London. I don't have experience with this bank in such circumstances but in a similar circumstance in another bank it was possible to remotely do the transfer with the help of the branch in the other country.
-
MP Criticizes Plan to Use Central Fund for Digital Wallet Scheme
eisfeld replied to webfact's topic in Thailand News
You have to admire the audacity. They promise voters 10k THB if they vote them into power. Money that is not theirs but belongs to the people and so essentially they promised them 10k out of their own money. But it gets better. The funds for that are not even there, the people don't have the 10k THB to give to themselves. They have to borrow. So they promised to give the voters 10k THB which they want the voter to borrow from somewhere else. Isn't that a super nice present? Anyone want a free car? I can give you one as long as you borrow 1M THB to pay for it. Any takers? No? 😞 -
Man drowns after getting caught in a rip at Kata Noi Beach
eisfeld replied to snoop1130's topic in Phuket News
You have to distinguish between rip currents and rip tides. Rip tides are due to tidal movement. Rip currents are mostly induced by waves but can also in certain circumstances come due to other currents. Both of these rips are due to sea floor impediments to the current which channels a normally slow current through a narrower volume which will increase the currents speed. Sandbanks can be enough for that and those are fairly common along Thai beaches. -
Man drowns after getting caught in a rip at Kata Noi Beach
eisfeld replied to snoop1130's topic in Phuket News
You seem to be mixing rip tides and rip currents. Rip tides have not much to do with waves. Both exist in Thailands waters btw.