Technology

59587 readers

2584 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

403

Never-before-seen Linux malware gets installed using 1-day exploits (arstechnica.com)

submitted 8 months ago by catculation to c/[email protected]

91 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 10 points 8 months ago (2 children)

I pay for ProtonVPN, and I still run my traffic through OpenVPN.

Hate to victim blame, but unless you're going to audit every line of code yourself, don't use obscure software.

[–] [email protected] 23 points 8 months ago* (last edited 8 months ago) (2 children)

As TonyTonyChopper this thread said, sometimes that obscure software is what you are required to use in your institution, or they don't offer support for anything else.

[–] [email protected] 3 points 8 months ago

Yeah it sucks. Of course there are outlying situations where people are obliged to use shit software.

But for those with a choice, just don't use shit software.

[–] [email protected] 1 points 8 months ago

Are these tools implementing proprietary protocols or something? So far I have not found a VPN I couldn't make work with openvpn or wireguard.

[–] [email protected] 4 points 8 months ago (1 children)

To be fair you should be using wire guard then. Because multiple of the largest and most well-known security auditing firms in the world have said that openvpn is impossible to truly audit. It's too large, you can audit individual parts of it, and you can audit individual interactions between parts. But it's not possible to fully audit.

Meanwhile wireguard is quite small so it can be fairly easily audited by a small team and has been multiple times

[–] [email protected] 2 points 8 months ago (1 children)

But it could be banned by DPI. Russia does it, China also obviously

[–] [email protected] 2 points 8 months ago

You can wrap it into https with nginx if you wanna get super fancy so it just looks like web traffic even with dpi. Takes a latency and speed hit but it works