Virtual Private Networks (VPNs) are legal and increasingly popular for individuals wanting to circumvent censorship, avoid mass surveillance or access geographically limited services like Netflix and BBC iPlayer. Used by around 20 per cent of European internet users they encrypt users' internet communications, making it more difficult for people to monitor their activities.
The study of fourteen popular VPN providers found that eleven of them leaked information about the user because of a vulnerability known as 'IPv6 leakage'. The leaked information ranged from the websites a user is accessing to the actual content of user communications, for example comments being posted on forums. Interactions with websites running HTTPS encryption, which includes financial transactions, were not leaked.
The leakage occurs because network operators are increasingly deploying a new version of the protocol used to run the Internet called IPv6. IPv6 replaces the previous IPv4, but many VPNs only protect user's IPv4 traffic. The researchers tested their ideas by choosing fourteen of the most famous VPN providers and connecting various devices to a WiFi access point which was designed to mimic the attacks hackers might use.
http://phys.org/news/2015-06-internet-anonymity-software-leaks-users.html
[More Info]: GWI Infographic: VPN Users
The paper 'A Glance through the VPN Looking Glass: IPv6 Leakage and DNS Hijacking in Commercial VPN clients' by V. Perta, M. Barbera, G. Tyson, H. Haddadi, A. Mei will be presented at the Privacy Enhancing Technologies Symposium on Tuesday 30 June 2015.
See also our story here.
(Score: 4, Interesting) by _NSAKEY on Tuesday June 30 2015, @10:05PM
A lot of stuff still pretends that IPv6 doesn't exist. For example, the Tor Project volunteers who watch for censorship events have never seen IPv6-related censorship, not even in China. Apparently the censorship gear just lets IPv6 traffic pass through unmolested.
(Score: 2) by Freeman on Tuesday June 30 2015, @10:44PM
Wow, loophole much?
Joshua 1:9 "Be strong and of a good courage; be not afraid, neither be thou dismayed: for the Lord thy God is with thee"
(Score: 2) by takyon on Tuesday June 30 2015, @11:01PM
Or even better, a honeypot.
[SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]