this post was submitted on 12 Mar 2024
400 points (96.5% liked)
Technology
59374 readers
3714 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Did I miss the bit where they said how it was delivered?
Seems it's exploiting vulnerabilities in some software called "Ivanti Connect Secure VPN", so unless you're running that, you're safe I guess. Says in the past they used vulnerabilities in "Qlik Sense" and Adobe "Magento". Never heard of any of those, but I guess maybe some businesses use them?
I pay for ProtonVPN, and I still run my traffic through OpenVPN.
Hate to victim blame, but unless you're going to audit every line of code yourself, don't use obscure software.
As TonyTonyChopper this thread said, sometimes that obscure software is what you are required to use in your institution, or they don't offer support for anything else.
Yeah it sucks. Of course there are outlying situations where people are obliged to use shit software.
But for those with a choice, just don't use shit software.
Are these tools implementing proprietary protocols or something? So far I have not found a VPN I couldn't make work with openvpn or wireguard.