marcin-lis.pl

If you are looking a free, sovereign and GDPR-compliant recursive DNS resolver with a strong focus on security or DNS safe to use for children, with filtering out content from the Internet that is not suitable for children, you should check https://www.dns0.eu/

https://www.fortiguard.com/psirt/FG-IR-22-300 https://www.fortiguard.com/psirt/FG-IR-22-300

Summary An external control of file name or path vulnerability [CWE-73] in FortiNAC webserver may allow an unauthenticated attacker to perform arbitrary write on the system.

Affected Products FortiNAC version 9.4.0 FortiNAC version 9.2.0 through 9.2.5 FortiNAC version 9.1.0 through 9.1.7 FortiNAC 8.8 all versions FortiNAC 8.7 all versions FortiNAC 8.6 all versions FortiNAC 8.5 all versions FortiNAC 8.3 all versions

https://www.fortiguard.com/psirt/FG-IR-22-398

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Affected Products FortiOS version 7.2.0 through 7.2.2 FortiOS version 7.0.0 through 7.0.8 FortiOS version 6.4.0 through 6.4.10 FortiOS version 6.2.0 through 6.2.11 FortiOS-6K7K version 7.0.0 through 7.0.7 FortiOS-6K7K version 6.4.0 through 6.4.9 FortiOS-6K7K version 6.2.0 through 6.2.11 FortiOS-6K7K version 6.0.0 through 6.0.14

My today’s answer to the question from the telegram – maybe someone will need such a summary of information about VPN

The VPN set itself encrypts the data, but what servers do I connect to, etc., it still goes to the ISP?

• No matter how the VPN is set, whether it’s your own or bought, it should encrypt the data. If you set it yourself you know how it was configured and you know who has the encryption key – in case of purchased VPN not exactly.
• As for the ISP – you have to get out of that VPN somewhere, so at the point of the appointment, when traffic from a VPN starts to come out of the world with a “normal” connection yes – this or that ISP sees what comes out of you unencrypted + DNS queries.

Using an external NordVPN service – it takes care of the encryption + isp doesn’t know what I’m doing, it just knows that I’m connecting to the server of this NordVPN. *Apparently yes, the ISP sees traffic to the nord, but:

• • The ISP knows it’s VPN traffic, so you have something to hide.
• • Nord knows where you went next.

Using the external one allows you to impersonate another country and use the foreign vod offer.

• Yes, it is a very common use of VPN these days

  Czytaj dalej