So? That’s not the point here.
This write up shared elsewhere in the thread covers why it’s a concern.
No. The VPN can’t control how trafficbis routed before reaching the VPN. This vulnerability is a bit ridiculous. Traffic is being hijacked before reaching the VPN. If your host is compromised, it would also be able to circumvent the VPN
Because over the past 5 years, many companies have been hiring people with 6 weeks of DevOps boot camp to run secure networks
Yeah, so simple! Give me a break.
Ars Tech has been a dumpster fire for years
Why not? I run wireguard over Mcdonalds WIFI all the time. Never had a problem
but can packet inspect and even MITM some ssl traffic if you want.
Not without an attack on the certificates you can’t.
You misunderstood the problem, evidently.
Mutahar is that you?
Android is the least affected. Of course that’s Linux based, but yeah… people use the term “Linux” pretty flexibly.
not really? https://www.reddit.com/r/technology/s/SSn2K3rAb7
so…it cannot be fixed? or patched? or whatever, i’m not saying it correctly i know
Public/hostile should be essentially considered the same thing anyway.
Obfuscating your IP is the entire point of a VPN.
“If I installed hidden cameras in your house, wearing a mask in public wouldn’t hide your identity from me!”
Yeah but your host isn’t compromised.
This pains me so so much that I know it’s true.
I used to work for a big tech company as a database engineer and spent entirely too much time leading mentoring sessions for “network engineers” who didn’t know DNS from DHCP.
I beat the “everyone in modern tech should have a solid foundation in networking” drum a lot. There is almost nothing we do wwith computers that doesn’t involve a network in some way. I have given up because I got tired of the “yeah I know…” And the eye rolls.
“Ohhh I want to become a devops engineer I hear the salaries are great!”
“If you’re just looking at the salary don’t, you’ll be miserable, you’ll make everyone on your team miserable, and you’ll burn out within 2 years. If you’re still interested, you need a solid foundation in Linux, Networking, and Python, or some other relevant scripting language…”
Its called ‘CV-engineering’. Getting credited to show ‘skill’ for their linkedin profile and next employer.
You guys really don’t know what you’re taking about or didn’t read the article.