Using a VPN abroad when paying online?

poppy10_2

AndyPix wrote: »

Not the case.

SSL strip works by opening an https connection to the real site, but then serving an http version to the user. So all communication with the real server is using SSL

But it is trivial for the end-user to detect as they would be browsing the site via plain HTTP and therefore would not have the padlock or green text they are used to for the secure site

AndyPix

poppy10 wrote: »

But it is trivial for the end-user to detect as they would be browsing the site via plain HTTP and therefore would not have the padlock or green text they are used to for the secure site

You would be shocked how often that doesn't seem to deter would-be victims ..
I have a 100% success rate with any MITM I have run (for testing purposes obviously )

paddyrg

Tada! 14 top paid VPN's have security issues

http://www.theregister.co.uk/2015/06/30/worlds_best_vpns_fall_flat_in_security_tests/

Strider590

paddyrg wrote: »

Tada! 14 top paid VPN's have security issues

http://www.theregister.co.uk/2015/06/30/worlds_best_vpns_fall_flat_in_security_tests/

Your ISP probably does DNS hijacking anyway, most ISPs do. That's how the content filtering works. You may think you've set your browser to use Google DNS, but the ISP hijacks port 53 traffic.

Granted, you might get hijacked onto a fake website, but these are easy to spot as the functionality is never the same.

gunte

paddyrg wrote: »

Tada! 14 top paid VPN's have security issues

http://www.theregister.co.uk/2015/06/30/worlds_best_vpns_fall_flat_in_security_tests/

The Vpn I use has Tor over vpn server which provides the solution to the attacks mentioned in that paper.

gunte

paddyrg wrote: »

Tada! 14 top paid VPN's have security issues

http://www.theregister.co.uk/2015/06/30/worlds_best_vpns_fall_flat_in_security_tesRs/

Responses from Vpn companies

http://torrentfreak.com/vpn-providers-respond-to-allegations-of-data-leakage-150701/

The_stingemeister

Just resurrecting this topic, and thanks for the replies even 'though a lot of it was over my head. I was comparing 2 vpn's: hidemyass...British based, $9.99 per month, can use 2 devices for that price, decent reviews and 161 countries served. Or Avast...only $2.59 per month and I already have their free a/virus and pleased enough with it, but with a very small selection of countries served. I would be looking at a pay per month one as I won't be away for 6 months at a time and would use my own data package when home.

So the question I'd like to ask is simply: what does countries served mean? Is it the list of countries you can use that VPN in, or is it where you connect to? If its the former I think Avast is pretty limiting, for example Italy is unlisted. I guess it means the country you connect to?

The_stingemeister

Bump and stuff....

buglawton

In last weekend's BBC Click TV programme there was a nice little item on building your own home VPN using a Rasberry Pi. The full instructions are on the BBC website. There are free apps on IOS and Android to connect into it. Since you own and control it, the chances of a dodgy or hacked VPN provider causing you problems are reduced.

virgo17

buglawton wrote: »

In last weekend's BBC Click TV programme there was a nice little item on building your own home VPN using a Rasberry Pi. The full instructions are on the BBC website. T

I think this is the article by Kate Russell.

http://www.bbc.co.uk/news/technology-33548728

Still very useful a year on.