pull down to refresh

Linux is still slightly vulnerable according to the article.

reply

Yes. Do you know of a source to explain how to close the vulnerability?

reply

Linked in the articke: https://www.leviathansecurity.com/blog/tunnelvision

Using network namespaces on Linux can completely fix this behavior. However, in our experience, it is less commonly implemented.
WireGuard’s documentation shows how it’s possible to use a namespace for all applications with traffic that should be using a VPN before sending it to another namespace that contains a physical interface. However, this appears to be Linux-specific functionality and it’s not clear if there is a solution for Windows, MacOS, or other operating systems with the same amount of robustness.

Guess we'll have to see how the attack applies to different VPN providers. Maybe 1-2 do use namespaces.

Initially I thought this was more of a threat on mobile networks (I guess not Android) or when using public WiFi. If one has control over one's home router doing the DHCP it shouldn't be an issue. But what are our home router talking to? A DHCP server of our internet provider. I'm not sure whether these 121 configurations can pass multiple hops, have not investigated further.

reply

I have to ask: who the hell is not using Linux and android?

reply

Most people. I would say most stackers even.

reply

Yeah. I guess you're right. I forget that everyone doesn't despise Apple as much as I do. I assume a solution will be available soon.

reply

You are rare Siggy. Don't forget that.

reply

Yeah, my family says that too, but in an entirely different context.

reply

I think I understand. I've never fit in. I know the feeling. At least my friends and family like me.

reply

There's also this company called Microsoft you may have heard about.
I hear their software is kinda popular.

reply

Was that one founded by the guy who's going to save the world?

reply

I think you're thinking of Microstrategy. Similar name but different software.

reply

Similar egos, though? No?

reply