Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Is OpenVPN really secure?
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Is OpenVPN really secure?

Issam2204Issam2204 Member
edited April 2015 in General

By using it is your privacy really protected?

I enabled OpenVPN and I checked my IP: Belgium (before) ----> USA (after). However, Google was still able to pinpoint where I live (from Google Maps).

What do you think about it?

Comments

  • @Issam2204 logout from google. Clear your cookies, etc.

    Thanked by 2Issam2204 ATHK
  • Did you disable/disallow the location sharing feature in browser?

    Thanked by 1Issam2204
  • Issam2204Issam2204 Member
    edited April 2015

    @rds100
    I just did. It's still happening :(

    @eLohkCalb
    It is set on "Ask when a website tries to have your location".

    If any of you did a custom made OpenVPN server (like I did) can you please share experience? Perhaps it's just my inexperience in setting the whole thing up. If you have a paid service even better, so we can see how efficient they are.

    Thanks for the answers so far!

  • eLohkCalbeLohkCalb Member
    edited April 2015

    @Issam2204, if I remember correctly you will have to disable location history service from Google (could be linked to mobile phone) as well.

    Edit: Found the link from Google - https://support.google.com/websearch/answer/179386?p=ws_settings_location&hl=en&rd=1

    Thanked by 1Issam2204
  • Mmmh...okay I'll do it. It could be interesting if this was the reason.

  • ben78ben78 Member

    Self made or paid service are both as efficient if they are set up correctly and you follow some basic rules on both the server side & the client side.

    If you want no easy link to be done between your new ip and the old one, you have to clear your cache for sure and logout from everything where you could have been logged in...

    Thanked by 1Issam2204
  • 4n0nx4n0nx Member

    Maybe you are connecting to google over IPv6 while the VPN only covers IPv4

    Thanked by 1Issam2204
  • Still finding me. I disabled location on my phone, removed SIM card and battery, deleted cookies and everything else (except passwords) from my browser. I think it's something in their Chrome browser that finds you anyway.

  • Issam2204Issam2204 Member
    edited April 2015

    @4n0nx said:
    Maybe you are connecting to google over IPv6 while the VPN only covers IPv4

    My VPN does cover only IPv4 indeed. I have IPv6 enabled on my router. Could that be the reason?

  • 4n0nx4n0nx Member

    Issam2204 said: My VPN does cover only IPv4 indeed. I have IPv6 enabled on my router. Could that be the reason?

    Yes, if your VPN setup does not disable IPv6. Try disabling IPv6 in your network settings?

    Thanked by 1Issam2204
  • I'll try right now :)

  • NomadNomad Member
    edited April 2015

    That's thanks to HTML5 Geolocation API and maybe also WebRTC.

    There are some extensions for Chrome that allows you to fake even those.
    I use Location Guard with Chrome to fix my location.

    Google those and you'll see.

    Thanked by 2Issam2204 k0nsl
  • Master_BoMaster_Bo Member
    edited April 2015

    There are many technique to disclose your location, naming a few:

    • JavaScript/other client-side script code
    • cookies
    • HTML5 storage/cached documents
    • extensions
    • browser-specific features (such as Google Chrome sync feature)

    So, if you wish to test how well you 're hidden try services like StayInvisible etc to see what is actually passed.

    • Switch anonymous surfing mode ("Incognito surfing" in Chrome)
    • Disable extensions/plugins
    • Clear cached data/clear cookies and don't store them
    • Disconnect from whatever online features (sync etc) and accounts
    • Disable Flash, JavaScript/other scripting

    and after that test again.

  • NomadNomad Member

    Check https://www.browserleaks.com/ to see what you leak.

    Thanked by 2Issam2204 raindog308
  • I re-installed the OpenVPS on a DigitalOcean droplet instead than OVH VPS. I don't know if I can say that it works. At least this time Google says "Unable to find your location". Also, using browserleaks and stayinvisible looks like I'm okay :)

  • k0nslk0nsl Member

    Another thing: make sure your DNS does not leak. I recommend DNSCrypt.

    Thanked by 2deadbeef Issam2204
  • @Master_Bo said:
    There are many technique to disclose your location, naming a few:

    • JavaScript/other client-side script code
    • cookies
    • HTML5 storage/cached documents
    • extensions
    • browser-specific features (such as Google Chrome sync feature)

    So, if you wish to test how well you 're hidden try services like StayInvisible etc to see what is actually passed.

    • Switch anonymous surfing mode ("Incognito surfing" in Chrome)
    • Disable extensions/plugins
    • Clear cached data/clear cookies and don't store them
    • Disconnect from whatever online features (sync etc) and accounts
    • Disable Flash, JavaScript/other scripting

    and after that test again.

    This.

  • @k0nsl said:
    Another thing: make sure your DNS does not leak. I recommend DNSCrypt.

    Windows is particularly terrible for leaking DNS queries as it tends to still send them to your LAN adaptors configured DNS even when a VPN is connected.

    Thanked by 1Issam2204
  • try check http://whoer.net/ext you can see problem

    Thanked by 1Issam2204
  • Thank you all for the answers :) Indeed, it was the fault of WebRTC which cannot be disabled from Chrome (be aware of that :) ).

    I have a couple of questions about OpenVPN:

    1) I'm using the same VPN server on my Linux laptop and on my Windows Desktop. Linux can almost get full bandwidth (like if I was not on a VPN), while Windows can't get over 20Mbps/s (I have 45Mbps/s Download speed). Both use the official OpenVPN client. Why such a difference?

    2) At the beginning I had some issues with making my Linux laptop connecting with the VPN server. I use the terminal client and the output was always "Initialization Sequence Completed", but I wasn't able to connect to the internet. Then from the network manager I put "Automatic (DHCP) addresses only" in the IPv4 tab with OpenDNS as primary and secondary DNS. Now it works. Is this the right way of doing it? Am I missing something? Why do I have to change DNS on my Linux laptop to make it work?

    Thanks everyone!

Sign In or Register to comment.