Sales Queries > Product Enquiries

VPN Vulnerability

(1/2) > >>

Bahadir:
Hi Boleh VPN admins

Occasionally, I come across some VPN audits carried out by either a group of academic researchers or tech savvy guys as below and for sure you may already be aware of these studies conducted:

http://www.theregister.co.uk/2015/06/30/worlds_best_vpns_fall_flat_in_security_tests/

and

https://www.wilderssecurity.com/threads/my-vpn-testing-site-is-finally-up.386556/

Now, my very simple question is that if both of those audits included Boleh VPN, what would we see in terms of vulnerabilities, leaks, etc., if there is any?

I strongly believe that when many of the VPN companies that present themselves as reliable, secure, etc., fail those security tests, our growing concerns, as customers, about the false sense of security offered by the VPN companies should be of concern to the those who strive to meet their clients' privacy expectations to the highest degree possible, in terms of establishing their trust in them.

Thanks in advance

Reuben:
Hey Bahadir sorry for the late reply. Give me some time to go through them :D

Jarper:
Interesting, I look forward to hearing your thoughts on this Reuben.

Reuben:
Hi I've done some preliminary tests and with the DNS leak option and lock down feature turned on in Settings, there are no leaks either on ipv4 or ipv6. My ISP has both full ipv4 and ipv6 support.

If the dns leak option turned off, it will leak. There's a reason why we leave this as an option as sometimes those in corporate environments still require their dns to work to resolve local hostnames.

The lockdown is also by default turned off.

There are two ways to address leaks:
a) Firewall method
b) Gateway removal method

Our lockdown feature uses the gateway method but this means is that if there's a disconnection, it will not reconnect automatically. This works by specifying only the VPN gateway as the gateway. This is however a simple and relatively foolproof method.
The firewall method is more advanced and possible for users to manually configure it but it introduces a lot of compatibility issues especially those with existing firewall solutions so we prefer the gateway method. This can be configured manually by installing your own firewall in any case (https://www.bolehvpn.net/forum/index.php?topic=6621.0).

Bahadir:
Reuben, thanks a lot for the reply.


--- Quote from: Reuben on January 27, 2017, 01:49:28 PM ---Our lockdown feature uses the gateway method but this means is that if there's a disconnection, it will not reconnect automatically. This works by specifying only the VPN gateway as the gateway. This is however a simple and relatively foolproof method.
--- End quote ---

If it is not going to reconnect automatically, should I concerned that my ISP might see what I was doing and where?


--- Quote from: Reuben on January 27, 2017, 01:49:28 PM ---The firewall method is more advanced and possible for users to manually configure it but it introduces a lot of compatibility issues especially those with existing firewall solutions so we prefer the gateway method. This can be configured manually by installing your own firewall in any case (https://www.bolehvpn.net/forum/index.php?topic=6621.0).

--- End quote ---

So, are there any benefits of using the firewall method, compared to the gateway method? Or are they both the same except the compatibility issues in the gateway method as you mentioned?

What about DNS hijacking? Is your VPN immune to this?

Navigation

[0] Message Index

[#] Next page