What's new
  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

“Voracle” compression vulnerability in OpenVPN

AveAdvenae

New Around Here
The solution that most VPN providers have implemented for now is to turn off compression.

Yes, I know that in day-to-day use compression offers little benefit as much of the content is compressed already, but I can nevertheless notice an impact - depending on the visited sites of course.

For anyone using ExpressVPN as their VPN provider you can still opt for compression in the following way:

Choose "LZO Adaptive" as compression method in VPN client settings and add the following to the end of the Custom Configuration window:

comp-lzo yes
push "comp-lzo yes"

At your own risk: "...ExpressVPN considers the exploit serious but limited in application, as an attacker would need not only to be able to observe the encrypted traffic but also be able to inject data into the unencrypted data stream..."
 

Attachments

  • asus vpn edit.PNG
    asus vpn edit.PNG
    128.3 KB · Views: 611

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Back
Top