Re:Inferring and hijacking VPN-tunneled TCP connections
by the8472 on Thursday December 05, 2019 @10:27AM
(#21713096)
I wonder whether this attack also works when the VPN device and VPNed is put in a separate network namespace, which would have its own routing table.
[ Parent
| on HN ]
Re:Inferring and hijacking VPN-tunneled TCP connections
by bytK7 on Thursday December 05, 2019 @11:24AM
(#21713578)
I was thinking the same thing as I read the on the description. I see no reason that a separate VPN namespace would be vulnerable to this attack. The compromised device would be able to spoof packets with whatever IPs it wanted, but they would never be received in a context where the tunnel interface would be directly accessible and therefore the device would never see a response from that address, even if correctly guessed and probed.