اگر شما در محل با wifi نقطه که شما 99% مطمئن شوید تا زمانی که شما قادر به اتصال به VPN خود را شما هنوز هم از آن استفاده ناقص، است؟
19 دیدگاه برای “تا زمانی که شما یک شبکه اختصاصی مجازی شبکه شما راحت به هر فای اتصال کنید؟”
دیدگاه‌ها بسته شده‌اند.
بهترین فیلترشکن آسان برای موبایل لپ تاپ تبلت و تمام سیستم عامل ها با یک کلیک
yes.
Yes, but I also wouldn’t allow local traffic from that network.
Typically I just check to see if I’m leaking, that usually helps before I allow real connection and start using my browsers. I’m always a little weary about what I do in public even with a VPN, but if I’m not leaking and I remotely trust a network I don’t worry too much
Yes, as long as my linux firewall allows only my VPN to pass.
Deny inbound
Deny Outbound
Allow VPN port outbound
Anywhere allow out anywhere on tun0.
If I felt it were 99% sketchy, then no. I’d use my phone as a mobile hot spot and forget about the wifi, altogether. If that wasn’t an option, then I just wouldn’t connect.
I would trust it. For the common person, an anonymizing vpn will be more than secure enough, assuming their machine is configured properly.
yes
Generally yes as long as the kill switch is engaged as well.
No
Yup
I have my IronKey for that, as well as my VPN.
In a pinch, yes.
Just for boredom browsing, no, I can wait.
Yes.
Why wouldn’t you be? That’s the very problem that VPN technology was created to solve. I marvel at people who say things like you should never connect to the wireless network at Defcon. Why would you ever assume any other network was any safer?
No. Link-local traffic must also be filtered, and some kind of effort to erase the default route.
Define “sketchy” and “sure”… https://www.krackattacks.com
Yes, as long as I’m also denying all inbound traffic and IPv6 is disabled.
You have to make sure all traffic is going through the VPN, that that’s the ONLY traffic entering and leaving your computer, and that you’re blocking all other attempts to connect to your computer. Also disable JS on any wifi signin portal if you’re worried.
So, you kind of need to know what you’re doing I guess, but yes, it is possible to be secure.
There is still dns to worry about. Get some sort of DNS protection like cloudflair
Well, for me…. i won’t …… case i am not trusting the connected network.
firstly …… device might mark it as public net and could block several software for me !!
~~Yes, but you will want to harden your shit. You still have to send data across the LAN to make your first hop, that’s where MITM and friends will be waiting.~~ Just assume you have already been compromised, and pucker up.