Search the Community

Hot off the press! Arstechnica 'VPN servers seized by Ukrainian authorities weren’t encrypted' Why did they wait almost 2 weeks? The post was published on July 9th. The blog post seems to rather be in full damage control mode than to admit how much of a failure it was that it apparently contained the single VPN certificate shared across all servers. (looks like I got it wrong read first reply) On top of that a technically incorrect explanation of when this acquired certificate can be successfully exploited. I don't wanna rant right now but will expand on my points when asked. I'm also curious whether AirVPN actually keeps all sensitive data in RAM as stated in the Torrentfreak article: Although I don't see that Windscribe had actually lied about any of their stuff (beyond omissions in current damage control), can we be sure AirVPN actually has all of the above implemented? Though I like how specific the response in the description. Also AMD's Zen CPUs are currently the only ones on the market (in x86 space fore sure) with actual RAM encryption. Having data on RAM disk wouldn't be enough for a prepared attacker due to technical possibility of extracting the data in a cold boot attack. Such an upgrade would not only take a while for the infrastructure and but be costly.