Re:VPNs on iOS are a scam
by xoa on Tuesday August 16, 2022 @05:34PM
(#32489263)
I hope Wireguard makes it into iOS/macOS at some point. Still early days relative to other protocols of course but it's so much simpler and more reliable (even beyond the security benefits). I use it extensively on both platforms for access to my own networks and services nowadays.
[ Parent
| on HN ]
It already exists in the App Store. I've been using it since April 28th of this year.
ios/ipad: https://apps.apple.com/us/app/wireguard/id1441195209
WireGuard is already available on both platforms - or do you mean kernel space WireGuard without an additional app?
Fwiw the existing app integrates seamlessly into the apple ecosystem.
I think the OP means so that it can be used without an app and so it can be used with Apple's "Always On VPN" setup. Right now I believe "Always On VPN" only works with the OS supported VPNs: IKEv2, L2TP, SSL VPN, and Cisco IPSEC https://support.apple.com/guide/deployment/vpn-overview-depa...
Re:VPNs on iOS are a scam
by happyopossum on Tuesday August 16, 2022 @06:26PM
(#32489795)
Nope, there are a ton of 3rd party SSL/other VPN clients that use the same frameworks that can be set to always on - the app just has to be written that way.
Consumer VPNs typically aren't.
My mistake! The docs I linked weren't clear about it.
The WireGuard app works with always on.
Re:VPNs on iOS are a scam
by Abishek_Muthian on Wednesday August 17, 2022 @08:41AM
(#32495480)
Here's one of those occasions where Linux mobile is shining, Wireguard(kernel) works OOB in Mobian, Requires custom kernel in postmarketOS due to Alpine quirk.
Considering the added benefits of taking your other desktop Linux security configuration to mobile, A Linux mobile could be a viable choice for those who need reliable transparent security.
It already is? It's been around for ages now and had a lot of eyes over it, but more importantly users. It's being used in a lot of services that are in production and turning over nicely. I think the 'early days' can be put to bed now, it's mature from a security perpective (imho).
[dead]
Changes to macOS and iOS a few versions back removed third party kernel extensions. So, that’s not an issue anymore.
It used to be a huge issue, but thankfully that’s been fixed. I can’t tell you how many times my Mac crashed due to faulty “enterprise” security kexts.
Well, whatever, but maybe you might like to know that it's a protocol specification, not a .ko soley and has been implemented in the user space is several languages. If you're reading every line of kernel source you compile with better knowledge than all of LKML then fair play to you!
Re:VPNs on iOS are a scam
by matthewmacleod on Tuesday August 16, 2022 @06:33PM
(#32489870)
There are several things wrong with this - to start with, WireGuard isn’t in the iOS kernel.