[FUD] Leak: lastpass data leak using Eddie.

[gabariala 1]

Eddie IS without a doubt leaking lastpass connections to the web through the vpn. Eddie is still using the 2.4.3 client; though seeing eddie is a big program it could be some other function of Eddie. Using OpenVPN 2.4.5 solves this leakage. So, OpenVPN 2.4.5 it is.

 

Here is a screenshot of the leak inside Wireshark. https://ibb.co/jgdQqH

https://image.ibb.co/gzbBVH/Leaks_using_Eddie.png

 

[Staff 9972]

Hello,

 

remember to activate Network Lock, this option will prevent any possible leak, including leaks caused by programs binding to the physical network interface (which is not an OpenVPN problem, it's how routing works). It will also block IPv6 when the system is not connected to IPv6-supporting servers.

 

The screenshot shows that you had Network Lock disabled.

 

Also remember (for other cases you might assume as suspicious) that the TCP and UDP traffic in the system connected to the VPN is not encrypted and wrapped when passing through that system tun/tap interface (and this is correct too, of course).

 

Kind regards

[gabariala 1]

Ok I see I had not enabled "activate network block." Well its good to know OpenVPN does this automatically default anyway. I'm not sure what you're talking about in the second comment you made there, however if you are referring to the fact using Wireshark on an adapter that is already tunneled is shown as unencrypted, I'm fully aware of the difference between encrypted / non encrypted adapters, thanks though. If you're talking about something else, please elaborate because I have no idea otherwise.

[Staff 9972]

Ok I see I had not enabled "activate network block."

 

Network Lock, not block.

 

Nothing else, that's all. Locking.

 

Kind regards