[Dismas]

Not the first time a VPN has misled its customers. While it might be unintentional, the consequences are apparent.

Privacy tools-seller Windscribe said it failed to encrypt company VPN servers that were recently confiscated by authorities in Ukraine, a lapse that made it possible for the authorities to impersonate Windscribe servers and capture and decrypt traffic passing through them.

The Ontario, Canada-based company said earlier this month that two servers hosted in Ukraine were seized as part of an investigation into activity that had occurred a year earlier. The servers, which ran the OpenVPN virtual private network software, were also configured to use a setting that was deprecated in 2018 after security research revealed vulnerabilities that could allow adversaries to decrypt data.

“On the disk of those two servers was an OpenVPN server certificate and its private key,” a Windscribe representative wrote in the July 8 post. “Although we have encrypted servers in high-sensitivity regions, the servers in question were running a legacy stack and were not encrypted. We are currently enacting our plan to address this.”

Read More: https://arstechnica.com/gadgets/2021/07/...encrypted/

[mothered]

Not the first time a VPN has misled its customers

As I've mentioned countless times on this board - you never know what happens behind closed doors.

Encrypting data Is first and foremost with VPN services.

[Miamoo]

There are so many VPN available online for free as well as paid downloads that all cannot be trusted. In this present case, though not intentional as stated, the very fact that datas were not encrypted made it very vulnerable for misuse.

[mothered]

There are so many VPN available online for free as well as paid downloads that all cannot be trusted.

Enough said.