Services used by hundreds of thousands of people in the UK to protect their identity on the web are vulnerable to leaks, according to researchers at QMUL and others.
Virtual Private Networks (VPNs) are legal and increasingly popular for individuals wanting to circumvent censorship, avoid mass surveillance or access geographically limited services like Netflix and BBC iPlayer. Used by around 20 per cent of European internet users they encrypt users’ internet communications, making it more difficult for people to monitor their activities.
The study of fourteen popular VPN providers found that eleven of them leaked information about the user because of a vulnerability known as ‘IPv6 leakage’. The leaked information ranged from the websites a user is accessing to the actual content of user communications, for example comments being posted on forums. Interactions with websites running HTTPS encryption, which includes financial transactions, were not leaked.
The leakage occurs because network operators are increasingly deploying a new version of the protocol used to run the Internet called IPv6. IPv6 replaces the previous IPv4, but many VPNs only protect user’s IPv4 traffic. The researchers tested their ideas by choosing fourteen of the most famous VPN providers and connecting various devices to a WiFi access point which was designed to mimic the attacks hackers might use.
Researchers attempted two of the kinds of attacks that might be used to gather user data – ‘passive monitoring’, simply collecting the unencrypted information that passed through the access point; and DNS hijacking, redirecting browsers to a controlled web server by pretending to be commonly visited websites like Google and Facebook.
The study also examined the security of various mobile platforms when using VPNs and found that they were much more secure when using Apple’s iOS, but were still vulnerable to leakage when using Google’s Android.
Dr Gareth Tyson, a lecturer from QMUL and co-author of the study, said:
“There are a variety of reasons why someone might want to hide their identity online and it’s worrying that they might be vulnerable despite using a service that is specifically designed to protect them.
You might find this VPN Guide of interest . . .
The Latest on: Internet anonymity
via Google News
The Latest on: Internet anonymity
- Redditor allowed to stay anonymous, court rules on May 22, 2019 at 3:48 pm
Online free speech has been given a victory, with a federal court ruling that a Redditor can remain anonymous in a copyright lawsuit ... Reddit, the self-described "front page of the internet," was ... […]
- This Browser Lets You Be Anonymous On the Go (Just Don't Expect It on Your iPhone) on May 22, 2019 at 9:37 am
Being truly anonymous on the Internet is practically impossible. A new app is hoping to make it a little bit simpler when you head over to your smartphone. The Tor Browser, which is used around the ... […]
- Court Throws out Lawsuit Against Tor for Providing Anonymous Routing on May 21, 2019 at 3:11 pm
Tor provides software for enabling anonymous communication and transactions on the internet. To use the Tor Browser, an individual must visit Tor's website to download the software. When ... […]
- If You Think Bitcoin is Anonymous, Think Again on May 21, 2019 at 5:33 am
In reality, Bitcoin isn’t anonymous by design and the advent of blockchain analysis ... which will let you minimize the VPN’s impact on your internet use. If you insist on using a free VPN - beware. ... […]
- Internet divided over stay-at-home mum wanting husband to pay her £2,700 a month on May 20, 2019 at 11:42 pm
The Internet is divided over one stay-at-home mum's request that her husband gives her £2,700 a month which would cover "little treats". The anonymous mum posted the question on Reddit's 'Am I the A** ... […]
- EFCC arrests another 10 internet fraudsters in Abuja on May 20, 2019 at 7:02 am
The Economic and Financial Crimes Commission, EFCC, Abuja Zonal Office, has raided and arrested another 10 suspected internet scammers at Favour Estate Land Estate, Life Camp, Abuja. They were ... […]
- Courteney Cox's 'Friends' Throwback Photo On Instagram Is The Best Thing On The Internet RN on May 20, 2019 at 2:41 am
"I had me and six of them and I said — I don't know why I said this — I said, 'This is your last shot at anonymity. Once the show comes on the air, you guys will never be able to go anywhere without ... […]
- Anonymous took the hacktivism community with them when they died on May 19, 2019 at 7:15 am
Why it matters: Activist hacking, or hacktivism if you will, has been one of the most bitter epidemics to infest the internet. While heroic when used ... But for better or for worse, new data suggests ... […]
- Revenge porn should be made sexual offence so victims can be granted anonymity, campaigners say on May 19, 2019 at 2:11 am
Some said it was because of the lack of anonymity and others said it was because they didn ... of abuse sparked by an ex-partner posting intimate photographs of her on the internet. “I was being ... […]
- My unknown father — anonymous sperm donations undermine German law on May 18, 2019 at 6:41 am
The German law, which prohibits anonymity, only applies to fertility practices ... Even in a nightclub or via the internet, if necessary. Getting a donation from a sperm bank, where the sperm is ... […]
via Bing News