Services used by hundreds of thousands of people in the UK to protect their identity on the web are vulnerable to leaks, according to researchers at QMUL and others.
Virtual Private Networks (VPNs) are legal and increasingly popular for individuals wanting to circumvent censorship, avoid mass surveillance or access geographically limited services like Netflix and BBC iPlayer. Used by around 20 per cent of European internet users they encrypt users’ internet communications, making it more difficult for people to monitor their activities.
The study of fourteen popular VPN providers found that eleven of them leaked information about the user because of a vulnerability known as ‘IPv6 leakage’. The leaked information ranged from the websites a user is accessing to the actual content of user communications, for example comments being posted on forums. Interactions with websites running HTTPS encryption, which includes financial transactions, were not leaked.
The leakage occurs because network operators are increasingly deploying a new version of the protocol used to run the Internet called IPv6. IPv6 replaces the previous IPv4, but many VPNs only protect user’s IPv4 traffic. The researchers tested their ideas by choosing fourteen of the most famous VPN providers and connecting various devices to a WiFi access point which was designed to mimic the attacks hackers might use.
Researchers attempted two of the kinds of attacks that might be used to gather user data – ‘passive monitoring’, simply collecting the unencrypted information that passed through the access point; and DNS hijacking, redirecting browsers to a controlled web server by pretending to be commonly visited websites like Google and Facebook.
The study also examined the security of various mobile platforms when using VPNs and found that they were much more secure when using Apple’s iOS, but were still vulnerable to leakage when using Google’s Android.
Dr Gareth Tyson, a lecturer from QMUL and co-author of the study, said:
“There are a variety of reasons why someone might want to hide their identity online and it’s worrying that they might be vulnerable despite using a service that is specifically designed to protect them.
Read more: Most internet anonymity software leaks users’ details
You might find this VPN Guide of interest . . .
The Latest on: Internet anonymity
[google_news title=”” keyword=”Internet anonymity” num_posts=”10″ blurb_length=”0″ show_thumb=”left”]
via Google News
The Latest on: Internet anonymity
- Column by Pete Sirianni: Music dips into anonymity, AIon April 26, 2024 at 3:15 am
If you know me or anything about this column, you know one of my favorite times of the week is just around midnight Friday mornings.
- Current investigation sparked by anonymous message sent to Commissioner's personal email accounton April 25, 2024 at 5:00 pm
“Here no such complaint has been filed.” Instead, the city attorney referenced an anonymous e-mail sent to a City Commissioner’s private email address by an anonymous author claiming to be a City ...
- T-Mobile unveils new 5G internet plans for enhanced home and travel connectivityon April 23, 2024 at 11:11 am
T-Mobile has announced two new 5G Internet plans, “Home Internet Plus” and “Away.” Home Internet Plus targets a premium home internet experience with expanded Wi-Fi coverage and 24/7 tech support for ...
- WhatsApp may soon let you share encrypted files without an internet connectionon April 22, 2024 at 1:50 pm
WhatsApp is testing out a new feature that makes encrypted file sharing to nearby users super easy, even without an internet connection.
- Why is the Trump trial jury anonymous? The brief and imperfect history of anonymous juries in the USon April 18, 2024 at 2:56 pm
While former President Donald Trump is spinning conspiracy theories about people infiltrating the jury in his hush money criminal trial, the judge in the case is finding it difficult to protect jurors ...
- Everything to Know About the New USA Network Reality Series 'The Anonymous'on April 16, 2024 at 7:59 am
The reality show from the creators of 'The Traitors' will have players talking in person and behind a fake profile.
- The internet continues to become a little less anonymouson April 15, 2024 at 8:13 am
Reservations site OpenTable will no longer allow users post anonymous reviews a month after Glassdoor started requiring real names to use the service.
- SmutTok Is Where Horniness Thrives & Tumblr-Era Anonymity Dieson April 15, 2024 at 5:00 am
SmutTok, a niche subsection of the rising BookTok community, is full of Gen Z readers who share their desires and turn-ons without shame.
- Go From Anonymous to Internet Famous [Become a Travel Influencer]on April 12, 2024 at 1:00 am
While I was living in the Caribbean I came across a friend who was in the country on an influencer trip. I went to pick her up from her villa ...
- The Internet Created a Sixth Member of ‘The Simpsons’ Family That Doesn’t Existon April 11, 2024 at 11:00 am
Graggle Simpson isn't real; he's a meme satirizing The Simpsons and streaming services. The meme originated on a Japanese internet board and gained traction on Twitter. Graggle pokes fun at fans who ...
via Bing News