[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[apc.members] OpenVPN
- Subject: [apc.members] OpenVPN
- From: grarpamp at gmail.com (grarpamp)
- Date: Sun, 16 Apr 2017 04:24:39 -0400
- In-reply-to: <[email protected]>
- References: <CAG2tMp5RYBgKN3B9pZt0efj4rzeAYNod+rRQ_KcVk0osYppGkg@mail.gmail.com> <CAG2tMp5aW4nrVwJM_u3fZusetLcrbsZJ8YBLRVE9VMBpxxvQjQ@mail.gmail.com> <CAG2tMp4t57kPst_=vQQF0s0gEBLiEFSXAhd3HQVb1ok7O8Z5RQ@mail.gmail.com> <CAG2tMp7pvTCqdwMXZEdLok_63Zq6QSZWaAX=H_X3neA8wQhSHA@mail.gmail.com> <CAG2tMp4WC=qvUkUM=KX36P394Pxw6Q4xfRYK7_=JwbqMfuhC7g@mail.gmail.com> <CAG2tMp4AvoRxQi2b=75-OuxYZH7RfB-hD7L1PKCMAXFQ1ULg8g@mail.gmail.com> <CAG2tMp4vig_ZBH8d634k4gZTK8=KN_s7cxpHMYB1hnv8tLAWWA@mail.gmail.com> <CAG2tMp7o=MV5xxDOAe+O6w=1KMxo4c6mPy34X8XZZdMOXdEA5Q@mail.gmail.com> <CAG2tMp6E-VZyP9uLyUODSddvSsED5JCGS64uqsmiErx8F=maTQ@mail.gmail.com> <CAG2tMp7m4nrwsL1YQ9UMqUPho2LOAjstcQq9RnpJX0j63dvFtA@mail.gmail.com> <CAG2tMp5N-wTTo70rCEv1_tor71hc4n2xt3SRRnt1GhFEKgeAFg@mail.gmail.com> <CAG2tMp5zKKQDgF-5B9OVQ1PXJWT3QvPFARbTC-0oyL8Tg9OuHQ@mail.gmail.com> <CAG2tMp4Q2mOvtwWM3cQLghiMK-Qkuv7NVQK6S_UqnujVyuo9Kg@mail.gmail.com> <CAD2Ti28dgbqo98ZTL_1ObNoee7NWac5h-bQWXic7nCfm7ciQbw@mail.gmail.com> <[email protected]>
> 1 2 3 4
So what... put the thing in a vm / jail / whatever that offers separate
routing table from rest of system, use that to split horizon.
> 3 4 click
Toggling bad... cookies, tls session keys, browser / stack retransmits,
homing intervals, etc. Separate instances are needed to avoid.
> *
Plugin, openvpn, whichever... you still have basic security architecture
issues to address.
> level for leaks with no problem so far.
Doesn't mean it wont. Packet filter is needed protection.
Though not as bad as the remote-load-js-code-on-every-use
of 'encrypted' webmail services (lol), plugins still phone home
autoupdate, may be binary blobs, etc.
> anon free sign up
Some vpn's need only a VC transaction, ie: bitcoin, z*, etc.
Get from ATM / meetup / labor, mix, contribute to VC economy.