Road Warrior VPN.com Blog » Articles http://blog.roadwarriorvpn.com Securing the Wired world Thu, 29 Jul 2010 14:09:23 +0000 en hourly 1 http://wordpress.org/?v=3.0 Why TCP over TCP is bad? http://blog.roadwarriorvpn.com/why-tcp-over-tcp-is-bad/ http://blog.roadwarriorvpn.com/why-tcp-over-tcp-is-bad/#comments Fri, 26 Mar 2010 14:32:51 +0000 rwvpn http://blog.roadwarriorvpn.com/?p=162 You might of asked why Road Warrior VPN.com offers two different kinds of VPN options TCP and UDP?  Which one is better and why?  To start off we offer two different kinds of VPN servers in case one type happens to be blocked.  We have found that some very restricting environments will only allow TCP over port 443, which is what encrypted websites use.

In genearal TCP will try to retransmit a packet if it does not make it to the final destination.  A example of TCP would be any website that you go it uses TCP already.  So using the TCP VPN and going to a website would be a example of TCP over TCP.  Not only are TCP packets larger, but they also have other features that make them not desirable for a VPN server such as timeouts.  That is why we suggest using the UDP VPN server when ever possible.  As always contact Support@RoadWarriorVPN.com if you have issues with the VPN server.

Article about why TCP over TCP is bad explained in greater detail. http://sites.inka.de/~W1011/devel/tcp-tcp.html

]]> http://blog.roadwarriorvpn.com/why-tcp-over-tcp-is-bad/feed/ 0 Google CEO Says Privacy Worries Are For Wrongdoers http://blog.roadwarriorvpn.com/google-ceo-says-privacy-worries-are-for-wrongdoers/ http://blog.roadwarriorvpn.com/google-ceo-says-privacy-worries-are-for-wrongdoers/#comments Tue, 08 Dec 2009 19:16:12 +0000 rwvpn http://blog.roadwarriorvpn.com/?p=147 “If you have something that you don’t want anyone to know, maybe you shouldn’t be doing it in the first place,” Google CEO Eric Schmidt tells CNBC

That is just the wrong stance to have on protecting customers data.  So if I don’t have anything to hide should I allow the police to strip search me every time I get on the train, definitely not!  Which is how I would interpret that statement that Google CEO Eric Schmidt made.

Further reading Google CEO Says Privacy Worries Are For Wrongdoers

About Eric Schmidt from Wikipedia’s point of view

]]> http://blog.roadwarriorvpn.com/google-ceo-says-privacy-worries-are-for-wrongdoers/feed/ 0 Hack 5 – Hacking PPTP VPNs with ASLEAP http://blog.roadwarriorvpn.com/hack-5-hacking-pptp-vpns-with-asleap/ http://blog.roadwarriorvpn.com/hack-5-hacking-pptp-vpns-with-asleap/#comments Thu, 05 Nov 2009 01:22:55 +0000 rwvpn http://blog.roadwarriorvpn.com/?p=88 This is a very informative video about cracking PPTP VPN’s Hack 5 -Episode 612.  Showing how unsecured PPTP protocol is.  Starting at 4:38 Darren goes into how PPTP works and why it is so insecure.  For example they show how the user name is sent in the clear which is half of the log in, which is never a good idea for a secure VPN.  This is one of the many reasons why Road Warrior VPN.com does not support PPTP VPN’s and only supports OpenVPN VPN’s.

During Episode 614 they finish the follow up showing  how to convert the PPTP hash into the actual password.  The explanation starts at 11:30 minutes into the video.  They show how the proper way to parse the hex string captured using wire shark.  There is a PHP script included in the show notes that makes it very easy to generate a properly formatted hash.  Once this hash is formatted asleap will output the plain text password.

Hack 5 – Episode 612 – Hacking PPTP VPNs with ASLEAP

Hack 5 – Episode 614 – Firewall evasion, SSH and virtual appliances!

So in review it is scary to use PPTP as a VPN because of how unsecured the user name and password are protected by PPTP.  While Road Warrior VPN.com supports OpenVPN because it is able to protect against all of these attacks, so you don’t just have the illusion of security but you have actual security.

]]> http://blog.roadwarriorvpn.com/hack-5-hacking-pptp-vpns-with-asleap/feed/ 0