Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #229577

Re: VPN ideas

Show all headers | View raw

On Wed, 9 Dec 2020 10:03:59 -0500
Henning Follmann <hfollmann@itcfollmann.com> wrote:

> On Wed, Dec 09, 2020 at 11:00:41AM +0000, Joe wrote:
> > On Wed, 9 Dec 2020 12:49:44 +0200
> > Andrei POPESCU <andreimpopescu@gmail.com> wrote:
> >   
> > > On Mi, 09 dec 20, 10:21:46, Joe wrote:  
> > > > On Wed, 9 Dec 2020 11:49:45 +0200
> > > > Andrei POPESCU <andreimpopescu@gmail.com> wrote:
> > > >     
> > > > > On Ma, 08 dec 20, 12:27:40, Joe wrote:    
> > > > > >   
> 
> [...]
> 
> > > 
> > > Let me rephrase that: how is connecting to the internet from some
> > > public hot-spot decreasing my security?
> > > 
> > > I can think of possibly messing with DNS queries (use "own" DNS
> > > server instead, maybe with DNSSEC) and possible some attacks are
> > > easier via the local network (e.g. by other hot-spot users or
> > > local staff).
> > > 
> > > Other that that, as far as I'm aware, the biggest threat are the
> > > servers I access with my client software (typically web sites
> > > accessed with a browser), in which case it doesn't make any
> > > difference whether I access them via some VPN and/or (home)
> > > firewall.
> > > 
> > > (Assuming one doesn't run NFS, Samba, etc. *listening* software on
> > > the laptop in which case stopping those and/or running a firewall
> > > would be indicated.)
> > >   
> > 
> > I suppose it may depend on where you are. In the UK, public wifi
> > normally uses no encryption, because there are no local staff who
> > can help with problems. So any unencrypted protocol you use can be
> > overheard.
> >   
> 
> So let me be devils advocat here.
> 
> Is the network connection from your ISP encrypted?
> I guess not. So why is it more secure or trustworthy?
> 

It's not more secure, (apart from using wifi only occasionally) but the
kind of people looking at other peoples' network activities are more
likely to target public wifi than to sit outside my house. It will
require significantly more resources and risk to tap into an ISP cable
than to sit in a cafe somewhere with a laptop (running Linux) and some
black hat software.

-- 
Joe

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

VPN ideas ellanios82 <ellanios82@gmail.com> - 2020-12-07 22:30 +0100
  Re: VPN ideas Roberto C. Sánchez <roberto@debian.org> - 2020-12-07 22:40 +0100
    Re: VPN ideas ellanios82 <ellanios82@gmail.com> - 2020-12-07 23:40 +0100
    Re: VPN ideas Mark Fletcher <mark27q1@gmail.com> - 2020-12-08 00:50 +0100
  Re: VPN ideas Georgi Naplatanov <gosho@oles.biz> - 2020-12-07 22:50 +0100
  Re: VPN ideas Charles Curley <charlescurley@charlescurley.com> - 2020-12-08 02:00 +0100
    Re: VPN ideas john doe <johndoe65534@mail.com> - 2020-12-08 08:20 +0100
      Re: VPN ideas <tomas@tuxteam.de> - 2020-12-08 09:50 +0100
        Re: VPN ideas Alex Mestiashvili <amestia@rsh2.donotuse.de> - 2020-12-08 10:00 +0100
        Re: VPN ideas Celejar <celejar@gmail.com> - 2020-12-08 14:00 +0100
  Re: VPN ideas Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-08 10:50 +0100
    Re: VPN ideas Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-08 11:20 +0100
    Re: VPN ideas Joe <joe@jretrading.com> - 2020-12-08 13:30 +0100
      Re: VPN ideas Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-09 11:00 +0100
        Re: VPN ideas Joe <joe@jretrading.com> - 2020-12-09 11:30 +0100
          Re: VPN ideas Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-09 12:00 +0100
            Re: VPN ideas Joe <joe@jretrading.com> - 2020-12-09 12:10 +0100
              Re: VPN ideas Stefan Monnier <monnier@iro.umontreal.ca> - 2020-12-09 15:30 +0100
              Re: VPN ideas Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-09 16:10 +0100
                Re: VPN ideas Celejar <celejar@gmail.com> - 2020-12-09 18:10 +0100
              Re: VPN ideas Henning Follmann <hfollmann@itcfollmann.com> - 2020-12-09 16:10 +0100
                Re: VPN ideas Joe <joe@jretrading.com> - 2020-12-09 20:10 +0100
                Re: VPN ideas Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-10 09:10 +0100
    Re: VPN ideas Celejar <celejar@gmail.com> - 2020-12-08 20:50 +0100
      Re: VPN ideas Roberto C. Sánchez <roberto@debian.org> - 2020-12-08 23:10 +0100
        Re: VPN ideas Celejar <celejar@gmail.com> - 2020-12-08 23:40 +0100
          Re: VPN ideas Long Wind <longwind2@yahoo.com> - 2020-12-09 03:10 +0100
          Re: VPN ideas Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-09 11:10 +0100
            Re: VPN ideas Celejar <celejar@gmail.com> - 2020-12-09 18:00 +0100
              Re: VPN ideas Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-10 09:50 +0100
                Re: VPN ideas Celejar <celejar@gmail.com> - 2020-12-10 18:50 +0100
        Re: VPN ideas <tomas@tuxteam.de> - 2020-12-09 09:50 +0100
          Re: VPN ideas Henning Follmann <hfollmann@itcfollmann.com> - 2020-12-09 15:30 +0100
          Loadbearing services Henning Follmann <hfollmann@itcfollmann.com> - 2020-12-09 16:00 +0100
            Re: Loadbearing services Stefan Monnier <monnier@iro.umontreal.ca> - 2020-12-09 16:40 +0100
              Re: Loadbearing services Henning Follmann <hfollmann@itcfollmann.com> - 2020-12-09 17:40 +0100

csiph-web