Here’s a shocker: Most Virtual Private Networks (VPNs) aren’t very private, according to researchers researchers from the Sapienza University (Rome) and Queen Mary University (London). That surprised me as I am using a VPN right now from a hotel room in Israel.
The researchers recently tested 14 of the most popular commercial VPN services: Hide My Ass, IPVanish, Astrill, ExpressVPN, StrongVPN, PureVPN, TorGuard, AirVPN, PrivateInternetAccess, VyprVPN, Tunnelbear, proXPN, Mullvad, and Hotspot Shield Elite. They found that ten of them leak IP data, and all except one are vulnerable to IPv6 DNS hijacking attacks .
If you’ve been using a VPN for anonymity, protection from monitoring and tracking, or censorship circumvention, now’s the time to switch to Tor, the researchers concluded.
A news article providing a summary of the report may be found at http://www.net-security.org/secworld.php?id=18571 while the full text of the report is available at http://www.eecs.qmul.ac.uk/~hamed/papers/PETS2015VPN.pdf.