Jump to content


Photo

[FUD] Leak: lastpass data leak using Eddie.

eddie leak ip data lastpass openvpn 2.4.3

  • This topic is locked This topic is locked
3 replies to this topic

#1 gabariala

gabariala

    Member

  • Members
  • PipPip
  • 16 posts

Posted 23 March 2018 - 10:08 AM

Eddie IS without a doubt leaking lastpass connections to the web through the vpn. Eddie is still using the 2.4.3 client; though seeing eddie is a big program it could be some other function of Eddie. Using OpenVPN 2.4.5 solves this leakage. So, OpenVPN 2.4.5 it is.

 

Here is a screenshot of the leak inside Wireshark. https://ibb.co/jgdQqH

https://image.ibb.co/gzbBVH/Leaks_using_Eddie.png

 

Leaks using Eddie.png



#2 Staff

Staff

    Advanced Member

  • Staff
  • PipPipPip
  • 7149 posts

Posted 23 March 2018 - 01:59 PM

Hello,

 

remember to activate Network Lock, this option will prevent any possible leak, including leaks caused by programs binding to the physical network interface (which is not an OpenVPN problem, it's how routing works). It will also block IPv6 when the system is not connected to IPv6-supporting servers.

 

The screenshot shows that you had Network Lock disabled.

 

Also remember (for other cases you might assume as suspicious) that the TCP and UDP traffic in the system connected to the VPN is not encrypted and wrapped when passing through that system tun/tap interface (and this is correct too, of course).

 

Kind regards



#3 gabariala

gabariala

    Member

  • Members
  • PipPip
  • 16 posts

Posted 23 March 2018 - 02:27 PM

Ok I see I had not enabled "activate network block." Well its good to know OpenVPN does this automatically default anyway. I'm not sure what you're talking about in the second comment you made there, however if you are referring to the fact using Wireshark on an adapter that is already tunneled is shown as unencrypted, I'm fully aware of the difference between encrypted / non encrypted adapters, thanks though. If you're talking about something else, please elaborate because I have no idea otherwise.



#4 Staff

Staff

    Advanced Member

  • Staff
  • PipPipPip
  • 7149 posts

Posted 23 March 2018 - 02:28 PM

Ok I see I had not enabled "activate network block."

 

Network Lock, not block. :)

 

Nothing else, that's all. Locking.

 

Kind regards







Similar Topics Collapse


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Servers online. Online Sessions: 14701 - BW: 36116 Mbit/sYour IP: 54.156.37.174Guest Access.