Collaborate Disseminate
I’ve been using OpenVPN and SSH tunnels for a multitude of scenarios over the years and recently I’ve been earning a lot of buzz around the simplicity and security of WireGuard. Now I’ve found some troubling information about CVE-2019-1489… Continue reading WireGuard / CVE-2019-14899: How secure the protocol really is?
I recently set up a wireguard server-network configuration with a home server and client devices. I have one main domain that I hope to route everything through via subdomains (in this example, abc.example.com, def.example.com, etc.). I ho… Continue reading Is there a security vulnerability in setting a public DNS entry to a private IP Address?
OpenWrt announced a problem in opkg, their super-lightweight package manager. OpenWrt’s target hardware, routers, make for an interesting security challenge. A Linux install that fits in just 4 MB of flash memory is a minor miracle in itself, and many compromises had to be made. In this case, we’re interested …read more
Continue reading This Week in Security: OpenWrt, ZOOM, and Systemd
I have installed a WireGuard VPN server on a Raspberry Pi (running Raspbian) using PiVPN and I would like to
either block the VPN clients to access specific websites (i.e. block them access https://www.foo.com and https://www.bar.com) o… Continue reading Block WireGuard clients’ access to specific websites
An issue in Unix virtual private networks was disclosed recently, where an attacker could potentially hijack a TCP stream, even though that stream is inside the VPN. This attack affects OpenVPN, Wireguard, and even IPSec VPNs. How was this possible? Unix systems support all manner of different network scenarios, and …read more
Continue reading This Week in Security: VPNs, Patch Tuesday, and Plundervault
Which is better in what scenario?
What cons and pros do they have? (optional question)
Which is more secure? (optional question)
Best use case of each one?
Isn’t WireGuard based on OpenVPN?
Truism: Doing security right, is subtle and full of snags for the clueless.
Concern: I haven’t ever set up a connection between 2 computers using RSA/SSH keys or certificates, in my life. Realistically, I’m very aware of the… Continue reading Step by step guide for doing Wireguard VPN security and setup properly, for Android phone to OPNSense/pfSense LAN
I use WireGuard on iOS and was wondering if there is a kill switch. Developers wrote very short:
It’s on by default.
Any details about that? I did not found anything in menu navigation (called different?). How to test i… Continue reading How to test WireGuard killswitch for iOS? More details about it? [on hold]
In an era where everything seems to be getting “smarter” every year, it will probably come as no surprise to find that even relatively middling networking hardware is now packing advanced features and considerable computational power. A case in point is the Dell N1108T-ON Ethernet switch. Despite only costing around …read more
Continue reading Exploring The Dell N1108T-ON Ethernet Switch
Is Wireguard suitable for road-warrior scenarios where the IP address of the client keeps changing? If anyone tried it out already, I also would like to know if it’s really easier to setup than, say, OpenVPN.
Continue reading Wireguard: Is it suitable for road-warrior scenarios?