News for hackers. Stuff that matters.

A comment on NordVPN library and client code open-sourced. Parent comment

Re:NordVPN library and client code open-sourced by irrational on Tuesday March 14, 2023 @11:24AM (#35152998)
I was wondering the same thing. How would my ISP even know that I am using a site like z-library if everything is over HTTPS?
[ Parent | on HN ]
Re:NordVPN library and client code open-sourced by Laaas on Tuesday March 14, 2023 @11:27AM (#35153049)
Host names are commonly unencrypted. See [0]. IP addresses also tell a lot. They can check what domain names map to that IP address.

[0]: https://www.cloudflare.com/learning/ssl/what-is-encrypted-sn...

[ Parent | on HN ]
Re:NordVPN library and client code open-sourced by Ekaros on Tuesday March 14, 2023 @11:27AM (#35153056)
IP addresses? DNS queries? Later if you either use ISP provided DNS servers or unencrypted DNS. You can identify host from queries and IPs and then match it to TLS connection.
[ Parent | on HN ]
Re:NordVPN library and client code open-sourced by ivann on Tuesday March 14, 2023 @11:33AM (#35153182)
By looking at the SNI [0] if the connection does not use TLS 1.3 and ESNI.

[0] https://en.wikipedia.org/wiki/Server_Name_Indication

[ Parent | on HN ]
Re:NordVPN library and client code open-sourced by rafael09ed on Tuesday March 14, 2023 @11:30AM (#35153109)
Because the base URL isn't encrypted. The packet still needs to be able to be routed
[ Parent | on HN ]
Re:NordVPN library and client code open-sourced by SV_BubbleTime on Tuesday March 14, 2023 @11:28AM (#35153058)
They still likely get your DNS info, and also they know you are connected to x ip address which is likely y service.

All HTTPS does is make sure they can’t see what you are transferring. There is still meta data to whom.

Why do you think google runs 8.8.8.8? It’s not out of kindness.

[ Parent | on HN ]
Re:NordVPN library and client code open-sourced by ed_mercer on Tuesday March 14, 2023 @07:33PM (#35161109)
Do I care that can see metadata? If they don’t know what was transferred, how is that useful to them? Data-mining?
[ Parent | on HN ]
Re:NordVPN library and client code open-sourced by devmor on Tuesday March 14, 2023 @11:26AM (#35153021)
DNS for one, if you're using theirs.
[ Parent | on HN ]