58
submitted 2 months ago by [email protected] to c/[email protected]

cross-posted from: https://beehaw.org/post/13643895

Pulling this off requires high privileges in the network, so if this is done by intruder you're probably having a Really Bad Day anyway, but might be good to know if you're connecting to untrusted networks (public wifi etc). For now, if you need to be sure, either tether to Android - since the Android stack doesn't implement DHCP option 121 or run VPN in VM that isn't bridged.

top 4 comments
sorted by: hot top controversial new old
[-] [email protected] 13 points 2 months ago

Interesting it does not work on Linux or Android... Didn't understand why though 😬

[-] [email protected] 23 points 2 months ago

Android doesn't implement the option that's being abused for this exploit; and Linux offers more control allowing you to lock down the network stack enough to not be affected.

[-] [email protected] 5 points 2 months ago

Good explanation, thank you!

[-] [email protected] 3 points 2 months ago* (last edited 2 months ago)

It does affect Linux, tho! In fact that's the only platform where proton claims to have no solution yet.

this post was submitted on 07 May 2024
58 points (98.3% liked)

Proton

4669 readers
70 users here now

Empowering you to choose a better internet where privacy is the default. Protect yourself online with Proton Mail, Proton VPN, Proton Calendar, Proton Drive. Proton Pass and SimpleLogin.

Proton Mail is the world's largest secure email provider. Swiss, end-to-end encrypted, private, and free.

Proton VPN is the world’s only open-source, publicly audited, unlimited and free VPN. Swiss-based, no-ads, and no-logs.

Proton Calendar is the world's first end-to-end encrypted calendar that allows you to keep your life private.

Proton Drive is a free end-to-end encrypted cloud storage that allows you to securely backup and share your files. It's open source, publicly audited, and Swiss-based.

Proton Pass Proton Pass is a free and open-source password manager which brings a higher level of security with rigorous end-to-end encryption of all data (including usernames, URLs, notes, and more) and email alias support.

SimpleLogin lets you send and receive emails anonymously via easily-generated unique email aliases.

founded 1 year ago
MODERATORS