I've been reading the news about Lulzsec and I was wondering why they use a VPN before connecting to Tor or proxy servers?
The latter 2 can be used for hiding your identity so why is the VPN used too? I thought that was only used for connecting to business LANs etc.
Answer
TOR is designed to protect your anonymity (see this question over on security stackexchange) but it isn't tasked with providing protection over any information sent.
A VPN, on the other hand, provides an encrypted connection from the user to an endpoint, thus adding the confidentiality and authentication aspects to prevent others from gaining access to data and servers.
In the non-criminal world VPN's are used for exactly this purpose - restricting access to authorised users only, and protecting the confidentiality of usernames and passwords, sensitive data etc in transit.
The drivers are very similar in the criminal world - they too don't want others to see sensitive information, or carry out unauthorised connections.
No comments:
Post a Comment