News for hackers. Stuff that matters.

A comment on Show HN: Easily connect to a VPN in a country of your choice. Parent comment

Re:Show HN: Easily connect to a VPN in a country of your choice by kijin on Friday January 27, 2017 @12:42AM (#13498001)
Even with DNS spoofing, you can't MITM an encrypted connection with pinned public keys. That includes Google, GitHub, most social networks, and any SSH host to which you have previously connected.

Almost everything I do while on the move falls into this tamper-proof category. It's been a while since I stopped caring which Wi-Fi I connect to. I just borrow anyone's connection and tunnel right through.

[ Parent | on HN ]
Re:Show HN: Easily connect to a VPN in a country of your choice by noja on Friday January 27, 2017 @02:46AM (#13498356)
> That includes Google, GitHub, most social networks, that includes Google, GitHub, most social networks,

Nearly all websites do not using pinning.

[ Parent | on HN ]
Re:Show HN: Easily connect to a VPN in a country of your choice by drvdevd on Friday January 27, 2017 @04:50AM (#13498776)
So you would still need a trusted cert though right for the TLS MITM? And presumably SSH is not affected any more than on the open internet?

Anyway, while these may be valid attack vectors, since I started getting traffic injected by my ISP a few years ago, and DNS hijacked for advertising, my level of trust has dropped to the same as that of some $VPN, wherever, or $WIFI.

But that's just my opinion.

[ Parent | on HN ]