Saint TunnelVision, Who Lets Traffic Out of the Tunnel

Patron of VPNs on hotel Wi-Fi, overly generous DHCP servers, and everyone who felt safe because of the padlock icon.

Life

On 6 May 2024 researchers at Leviathan Security showed that a malicious DHCP server, using option 121 for static routes, could convince a computer to send its traffic outside the VPN while the VPN still said it was connected. It worked on almost every system except Android, which doesn't implement that option, and according to the authors it had been possible since 2002.

Prayer

O Saint TunnelVision, who opens a side window in every tunnel, let our traffic stay in the tunnel we dug for it. Amen.

How to celebrate

Celebrated by using network namespaces on Linux and distrusting free Wi-Fi that comes with the coffee.

The padlock on the screen doesn't lock the back door.