Concern latest Snowden Documents regarding VPN

[mazeman23 0]

HI

I just read an article where it says that the NSA is able to crack PPTP called project "Fourscore"

 

For the protocol IPsec they developed a tool what collects the encryption keys.

 

They also have an tool that can crack  the protocol SSH(Secure Shell).

 

The british MI6 collects data about encryption from TLS and SSL in an database called "flying pig"

 

 

Are we safe here at Airvpn ?

[snaggle 25]

Hi there,

 

PPTP has long been vulnerable.

I'm not aware of OpenVPN been broken, lets hope this is still the case.

This article http://www.spiegel.de/international/germany/inside-the-nsa-s-war-on-internet-security-a-1010361.html is a little ambivalent when mentioning SecurityKiss VPN and one could think OpenVPN had been broken.

The SecurityKiss response https://www.securitykiss.com/resources/articles/pptp_discontinued/ is more clear.

[Staff 9972]

Hello,

 

PPTP has not been taken seriously since years and years ago and we think that it does not deserve any consideration, unless security is not required. Maybe fifteen years ago, when several vulnerabilities were not yet discovered, it spread out considerably due to the fact that Microsoft strongly supported it. But we're talking about 1999, "ages ago" in computer science and networking.

 

Some more details here:

 

https://en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protocol#Security

 

As you can see, core problems are the protocol authentication implementations. By the way, it remains as an historical curiosity and a solution with quick deployment when security and other factors are not required.

 

Kind regards

[tranquivox69 27]

I think user "snaggle" wanted to link this: http://www.securitykiss.com/resources/articles/nsa_target/

[dwright 25]

AirVPN gets mentioned on page 12 of this document (a true honour): http://www.spiegel.de/media/media-35540.pdf

[snaggle 25]

I think user "snaggle" wanted to link this: http://www.securitykiss.com/resources/articles/nsa_target/

 

Hi,

I may well of linked this if it existed...

It was written a day after my post.