News for hackers. Stuff that matters.

A comment on Reverse Shell from an OpenVPN Configuration File.

Re:Reverse Shell from an OpenVPN Configuration File by wepple on Friday June 22, 2018 @08:35AM (#17373440)
The other answer if course is that piping all your internet traffic through a single 3rd party has some obvious consequences: surveillance and traffic injection being the obvious ones. If anyone thinks they use TLS extensively; run a Bro packet analyzer off a cheap switch span port for a month on your upstream router and prepare to be surprised.
[ Parent | on HN ]
Re:Reverse Shell from an OpenVPN Configuration File by orivej on Friday June 22, 2018 @10:04AM (#17374017)
> piping all your internet traffic through a single 3rd party has some obvious consequences

Your internet service provider is one of these parties. With VPN, you have a large choice of whom to trust and an easy option to switch.

[ Parent | on HN ]
Re:Reverse Shell from an OpenVPN Configuration File by wepple on Monday June 25, 2018 @07:45AM (#17391542)
whilst I somewhat agree, the original SO question was specifically about free VPN providers.

I pay my ISP a significant amount each month, and I expect in return that they’re at least not going to inject extra JavaScript into all my browsing. A free VPN on the other hand? They’ve gotta make money, I’ll be things get shady real fast.

[ Parent | on HN ]
Re:Reverse Shell from an OpenVPN Configuration File by fibers on Friday June 22, 2018 @08:37AM (#17373459)
Is this possible on a ubiquiti switch?
[ Parent | on HN ]
Re:Reverse Shell from an OpenVPN Configuration File by whatthesmack on Friday June 22, 2018 @12:25PM (#17375232)
Yes. For UniFi, in the properties of the switch, go to Ports and click on the edit button for the port that should become the mirror. Then click "+" next to Profile Overrides. Under Operation, select Mirroring. Type the port number that should be mirrored and Save. I did this with a UniFi Switch 8 POE-150W.
[ Parent | on HN ]
Re:Reverse Shell from an OpenVPN Configuration File by adricnet on Friday June 22, 2018 @09:47AM (#17373909)
Probably so, the Security Onion wiki has some recommendations for affordable taps:

https://github.com/Security-Onion-Solutions/security-onion/w...

[ Parent | on HN ]