• 0 Posts
  • 6 Comments
Joined 1 year ago
cake
Cake day: July 24th, 2023

help-circle




  • But in the details this attack is not that bad. E.g. NordVPN and I guess also other VPNs use firewall rules to drop traffic on normal network interfaces.

    Their side channel is still routing traffic away from the VPN channel. Then they can observe that there is no traffic and guess that the user either didn’t make requests in that moment or that he wanted to visit a website in the range covered by the route. They can not spy on the traffic.

    Also you can not quickly move into a network and apply this attack, as DHCP leases usually last 1 day or at least 1 hour. Only when they expire you can apply the attack (or you force the user to drop from the network, which is easy if they are using WPA2, but only possible by blocking the wifi signal if they are using WPA3)

    It is a serious issue and should be mitigated, but not as huge as news articles make it.


  • This text is not from generative AI like GPT-4.

    How do I know?

    • Its original, e.g. the part around bubba. And with original I do not mean the exact phrase but the idea of the simile.
    • Is is not generic. A genAI always resorts to getting very generic the longer the text it is forced to generate is.
    • I does not follow a usual structure. genAI resorts to following a language teachers paradigm. Introduction, main part, conclusion.

    and other minor signs.

    This is just a fellow human giving solid advice.