Security in public wifi - Nexus 7 (2013) Q&A

When using the Nexus 7 in a public wifi (hotel, restaurant, etc) what can one do for privacy and security?
Are there free vpn or other tools available?
Thanks.

What I meant to say was: which vpn is really trustworthy in Android and what else should one consider while on a public wifi?

Don't enter sensitive info, like your bank credentials.

Anderson2 said:
When using the Nexus 7 in a public wifi (hotel, restaurant, etc) what can one do for privacy and security?
Are there free vpn or other tools available?
Thanks.
Click to expand...
Click to collapse
You may want to give versavpn or ibvpn a look. Both services are nice and have Android Apps to make setup very easy on the Nexus 7.

bananagranola said:
Don't enter sensitive info, like your bank credentials.
Click to expand...
Click to collapse
I know and never do that. But I like my privacy even for everything else.......

I assume running your own VPN server isn't something you'd consider? You can use OpenVPN on your own system (it'll run on a Raspberry Pi) and use either the official app or one of the third party ones to connect. One of the third party ones even has Tasker integration so you could configure it to auto-launch when you connect to WiFi that isn't your own...

99RedB said:
I assume running your own VPN server isn't something you'd consider? You can use OpenVPN on your own system (it'll run on a Raspberry Pi) and use either the official app or one of the third party ones to connect. One of the third party ones even has Tasker integration so you could configure it to auto-launch when you connect to WiFi that isn't your own...
Click to expand...
Click to collapse
I would if I knew how. But I'm afraid that is beyond my current capabilities.

Anderson2 said:
I would if I knew how. But I'm afraid that is beyond my current capabilities.
Click to expand...
Click to collapse
Then start learning. Public vpn operators are no more trustworthy than public wifi operators. Actually if you use one vpn in different public spots the vpn operator could collect much more data than each individual public wifi operator.

That's a very scary thought. Are you saying it is more dangerous than safe to use vpns?
I'm willing to learn. Where do I start? Any tutorial or guides available somewhere?

99RedB said:
I assume running your own VPN server isn't something you'd consider? You can use OpenVPN on your own system (it'll run on a Raspberry Pi) and use either the official app or one of the third party ones to connect. One of the third party ones even has Tasker integration so you could configure it to auto-launch when you connect to WiFi that isn't your own...
Click to expand...
Click to collapse
I'll look for openVPN and research it. Thank you.

Anderson2 said:
When using the Nexus 7 in a public wifi (hotel, restaurant, etc) what can one do for privacy and security?
Are there free vpn or other tools available?
Thanks.
Click to expand...
Click to collapse
Nothing lol.
If you want to download some illegal kind of porn, the best way is not to do so from your device. Neither vpn or other tool will provide absolute security.

You'll find the OpenVPN site at http://openvpn.net/. They offer an Access Server package (under VPN Solution) which has a fully featured GUI for managing it. That is a commercial package, but it comes with 2 licenses for evaluation purposes...

Wireless network can also be an access point for hackers and other intruders who may infiltrate your computer or transmit a virus as most hotel wireless networks aren't password-protected or encrypted with strong WPA2.
I always secure my browsing session by using VPN connection however I don't suggest using free VPN at all as they more likely to log your activities and serve contextual ads while you're connected. They're also more likely to use your usage habits to tailor future ads to you, have fewer exit locations, and weak commitments to privacy so if logging and privacy are important to you, you may want to avoid them. I personally subscribed to purevpn.com but you can find many similar companies by doing some googling.

Related

[Q] VPN on Rhod 100 TP2

I have the latest Froyo6 build on my Froyo TP2 Rhod_100 UK
I have been trying to set up the VPN, but I can not get it working. Does anyone know why and how I can sort this out please?
PS. I also tried to run a VoIP (SIP) client (3CX) on the machine, but that too does not work.
My airtime provider is Vodafone UK and they have assured me that both are enabled on my account at a princely sum of £15 per month! Needless to say at that cost I am dead keen to make this work.
jonners59 said:
I have the latest Froyo6 build on my Froyo TP2 Rhod_100 UK
I have been trying to set up the VPN, but I can not get it working. Does anyone know why and how I can sort this out please?
PS. I also tried to run a VoIP (SIP) client (3CX) on the machine, but that too does not work.
My airtime provider is Vodafone UK and they have assured me that both are enabled on my account at a princely sum of £15 per month! Needless to say at that cost I am dead keen to make this work.
Click to expand...
Click to collapse
Can you get either to work on wifi?
I know there were some Chinese users trying to get the VPN to work, and couldn't.
I haven't tried, as I have no use for a VPN on my phone lol.
Also, I have known people to get SIP working, but it wasn't so great from what I heard...
Sorry I was not getting alerts and the thread was not showing up in my subs....
If I use WiFi then I am at home and do not need the VPN, but the SIP Phone DOES work and very well.
If I use the WM as a gateway for my laptop, then the laptop can run a VPN and SIP Phone via the phone. If that makes sense to you. Thus the Router running the VPN is working and the config works, and the mobile operator has set up the service. So this is just the phone settings - I believe.
jonners59 said:
Sorry I was not getting alerts and the thread was not showing up in my subs....
If I use WiFi then I am at home and do not need the VPN, but the SIP Phone DOES work and very well.
If I use the WM as a gateway for my laptop, then the laptop can run a VPN and SIP Phone via the phone. If that makes sense to you. Thus the Router running the VPN is working and the config works, and the mobile operator has set up the service. So this is just the phone settings - I believe.
Click to expand...
Click to collapse
If I had a VPN I could connect to I would test it out...
Maybe its a misconfiguration in Android? broken driver or config?
I do not know. It tells me nothing. The settings are as per the router config. How do I find out what is incorrect/broken etc...?
Can you give as many details as possible on the type of VPN I'm trying to connect to?
It's probably not working because none of the devs use that function - and can't debug it without trying to reproduce your setup.
I might play with it a little as it would potentially let me remotely schedule MythTV recordings safely, but it would be pretty low-pri for me.
I am using at this stage a simple PPTP setup for now. The Android settings are minimal - username and PW, and that is it.
But my laptop, which works has more settings o configure. I.e. MSCHAP and MSCHAPv2
Point to point MPPE
Security 128b and/or 40b
Allow BSD
Allow Deflate data comp
Allow TCP header comp
Does this help
OK, sometime in the next week or two I'll try to get PPTP up and running using similar parameters. I've been meaning to do it in general (not phone-related) for other reasons anyway - but it's been a low priority for a long time.
Entropy512 said:
OK, sometime in the next week or two I'll try to get PPTP up and running using similar parameters. I've been meaning to do it in general (not phone-related) for other reasons anyway - but it's been a low priority for a long time.
Click to expand...
Click to collapse
Why not OpenVPN? Seems like it would be easier/more standards-compliant that a craptacular PPTP VPN .
arrrghhh said:
Why not OpenVPN? Seems like it would be easier/more standards-compliant that a craptacular PPTP VPN .
Click to expand...
Click to collapse
I'll look into what VPN options Android supports - although for the OP, he may have specific reasons forcing PPTP.
arrrghhh said:
Why not OpenVPN? Seems like it would be easier/more standards-compliant that a craptacular PPTP VPN .
Click to expand...
Click to collapse
Because I am working with Draytek, my router. Vendor to set up the VPN and this was the. First config as it was the simplest. Seems everything else works, just. Not the. Phone. The phone too has PPTP as a standard setting.
Eh, I prefer to avoid PPTP like the plague if I have any choice. Most companies don't provide a choice, so I figured that's why you were locked in.
If you do have a choice, I would try something different. That's just me tho, I'd prefer open to closed any day if I had the choice .
Just a side note - the built-in Android VPN support uses pppd. The ril currently uses "killall pppd" to disable mobile data. If you're using both at once, then this will kill the VPN too. This is a stupid flaw in the current ril code, which is fixed in the "initpppd" branch of my ril repo. (But the initpppd branch depends on a number of rootfs fixes before it is usable, and stinebd has not merged any of it yet.)
highlandsun said:
Just a side note - the built-in Android VPN support uses pppd. The ril currently uses "killall pppd" to disable mobile data. If you're using both at once, then this will kill the VPN too. This is a stupid flaw in the current ril code, which is fixed in the "initpppd" branch of my ril repo. (But the initpppd branch depends on a number of rootfs fixes before it is usable, and stinebd has not merged any of it yet.)
Click to expand...
Click to collapse
Thanks for the reminder of that, I remember the discussions on the dev list.
I'm going to shelve poking at the VPN stuff until the RIL overhaul stabilizes and gets mainlined in this case.
Entropy512 said:
I'll look into what VPN options Android supports - although for the OP, he may have specific reasons forcing PPTP.
Click to expand...
Click to collapse
OK, please excuse slowness of response. As arrghh knows from another thread I am in transit across Europe. I reached my destination, Italy and have spent the past few days getting internet access *broadband virtually does not exist here unless you are in a City, so I have to use a very slow mobile broadband).
I am not a techie, but I am a willing player with some knowledge - dangerous, I know. I have been assisted by the manufacturer of my Router, a Draytek 2820 to set up a VPN. We may make it a more sophisticated VPN later, but pptp is the easiest. I have it working on all laptops and PCs, including this old banger here in Italy. What I can NOT do, is get it working on the phone. I think it is communicating with the router, but it is not getting through.
PS the PCs and Laptops are all Linux - Ubuntu 10.10
Hope this helps
I'm one of those Chinese who tried using VPNs on my Raphael, but failed of course. Actually, neither on WM, nor on Android, neither via pptp, nor via l2tp over ipsec. What I wanna remind is VPN on most Android roms on hd2 works fine, but some roms also cannot support vpn.
If you have enough time, I don't know how to pray for, would you please explore l2tp over ipsec? Because in many cities in China, pptp is also blocked by ISP. And I can provide a test account if anyone needs it.
Btw, I believe vpn is necessary when connecting a public wifi
Sent from my MSM using XDA Premium App
One more report, vpn in pptp could not work..
At this point - I'm going to hold off on poking at this until highlandsun's new RIL settles out and is officially committed. Some of the dev traffic correspondence indicates that the way we currently handle PPP is incompatible with VPNs. His new ril + rootfs combo that changes the pppd control architecture MIGHT solve some of the PPTP issues, I haven't tried them yet.
See it.
May your works come out soon~

How to use VPN in CM10?

Just installed CM10 by Quarx. I found it requires enable some security before adding VPN accounts. That'll disable the slipe wheel for unlocking the phone.
Even I did that. I can not get my VPN established.
May there be somebody help me?
--------------------------------------- AUG 6 2012------------------------------
I found a solution only speed very slow but Ok for twitter. You can search and download in Google play
It's droidvpn. web:www.droidvpn.com
It required a rooted phone.
i have same issue. When i use pptp to establish VPN, but it failed.
CM9 also have the same problem.
Sent from my MB526 using xda app-developers app
I never use a cm9 before. But why can't the vpn be available?
I cannot go without vpn in China.
Government blocks YouTube, twitter, Facebook, Google drive, blogger, etc.
Sent from my MB525 using xda app-developers app
instantlx said:
I never use a cm9 before. But why can't the vpn be available?
I cannot go without vpn in China.
Government blocks YouTube, twitter, Facebook, Google drive, blogger, etc.
Sent from my MB525 using xda app-developers app
Click to expand...
Click to collapse
In English
I use VPN to sync my google account, thanks to our great GFW, i can't sync my google account without VPN..
Any solutions ?
In Chinese
:victory:难得在这看到自己人
可能VPN在CM9和CM10里有BUG。
Leicxan said:
In English
I use VPN to sync my google account, thanks to our great GFW, i can't sync my google account without VPN..
Any solutions ?
In Chinese
:victory:难得在这看到自己人
可能VPN在CM9和CM10里有BUG。
Click to expand...
Click to collapse
你好。好像同步账户是可以的。但是twitter,这个比较纠结啊。
Hi, seems I can sync account. But for twitter, no idea.
May be I should try Goagent and some other ways to get across the GFW
instantlx said:
你好。好像同步账户是可以的。但是twitter,这个比较纠结啊。
Hi, seems I can sync account. But for twitter, no idea.
May be I should try Goagent and some other ways to get across the GFW
Click to expand...
Click to collapse
还有个方法,就是你用电脑先连接VPN,然后再共享这个VPN,最后想办法让手机使用电脑的这个网络,比如adhoc或者是用无线路由器,不过这是临时方法,并不能真正解决问题
i have another solution, you can use your computer to establish VPN, then try to share this vpn, but i can't use this solution everytime, any developer can help us ?
Sent from my MB526 using xda app-developers app
VPN with CM9, CM10
instantlx said:
Just installed CM10 by Quarx. I found it requires enable some security before adding VPN accounts. That'll disable the slipe wheel for unlocking the phone.
Even I did that. I can not get my VPN established.
May there be somebody help me?
Click to expand...
Click to collapse
As far as I tried unfortunately nor CM9 neither CM10 support PPTP VPN.
The only VPN I could use is OpenVPN. You can download two apps (Installer and settings) from the Google Play. Installer shows you if you have all necessary files installed.
You must establish VPN server or get approach to one of commercial OpenVPN servers. The problem is that OpenVPN server normally works with server/client certificates what demands cert key on the client side. You can't install cert key on Android so you must follow this solution:
http://openvpn.net/index.php/open-source/documentation/howto.html#auth
It might be a problem to install effective OpenVPN server for you because it will face the same obstacles which demands use of VPN for uncensored approach to web in your country. Possible solutions are:
1. ask a friend abroad to share VPN server with you;
2. use commercial VPN server but be cautious: a few support user/password identification of the client, which is the only appropriate approach for android.
Take a look on this site:https://www.privateinternetaccess.com/. You can have 2 clients connected simultaneously for les than 40$ a year. If you share VPN with someone...
I've got GAE agent working on my defy
I've got GAE agent working on my defy. Say goodbye to VPN now.
piskr said:
As far as I tried unfortunately nor CM9 neither CM10 support PPTP VPN.
The only VPN I could use is OpenVPN. You can download two apps (Installer and settings) from the Google Play. Installer shows you if you have all necessary files installed.
You must establish VPN server or get approach to one of commercial OpenVPN servers. The problem is that OpenVPN server normally works with server/client certificates what demands cert key on the client side. You can't install cert key on Android so you must follow this solution:
http://openvpn.net/index.php/open-source/documentation/howto.html#auth
It might be a problem to install effective OpenVPN server for you because it will face the same obstacles which demands use of VPN for uncensored approach to web in your country. Possible solutions are:
1. ask a friend abroad to share VPN server with you;
2. use commercial VPN server but be cautious: a few support user/password identification of the client, which is the only appropriate approach for android.
Take a look on this site:https://www.privateinternetaccess.com/. You can have 2 clients connected simultaneously for les than 40$ a year. If you share VPN with someone...
Click to expand...
Click to collapse
Does CM10 support L2TP VPN?
Sent from my MB526 using xda app-developers app

(Q) VPN on Windows RT

My work uses a specific VPN setup for use. How can I setup VPN to their servers on my Surface RT? Are any clients able to run on RT?
Thanks.
On non-jailbroken RT, there are only two options I know of for VPN access:
1) Use the built-in Microsoft VPN capability. This is accessed the same way as on other Windows machines. It won't work with most third-party VPN servers, though.
2) Use a device that is able to access the VPN and then share a WiFi network from that device, exposing the VPN via connection sharing. This is likely against company policy, though, since in that case anybody who can see that WiFi network can get into the VPN as well (if they have / can guess / can crack the password).
GoodDayToDie said:
On non-jailbroken RT, there are only two options I know of for VPN access:
1) Use the built-in Microsoft VPN capability. This is accessed the same way as on other Windows machines. It won't work with most third-party VPN servers, though.
2) Use a device that is able to access the VPN and then share a WiFi network from that device, exposing the VPN via connection sharing. This is likely against company policy, though, since in that case anybody who can see that WiFi network can get into the VPN as well (if they have / can guess / can crack the password).
Click to expand...
Click to collapse
Thanks ! Did not think about the connection sharing thing....
I don't know for home the RT was made, since iOS and Android have more functionality than RT. I may end up selling my RT...... :crying:
Depends how you define "more functionality" - I mean, neither iOS nor Android have a built-in VPN feature, for example, as far as I know. They most certainly didn't at less than 1.5 years since release. However, it is true that both of them eventually added support for third-party VPNs (Android had unofficial support via rooting the device earlier, which is sort-of possible on RT if anybody bothered to port VPN clients to jailbroken RT) and RT does not have any such official support yet.
With that said, yeah, Microsoft markets RT as a home-and-student thing, not a business thing (the first version didn't have Outlook, for example).

[Q] Fake Wifi connection when on Ethernet

Howdy folks, I am looking to find out if there is a way to have Wifi show as active and the primary network connection when the FireTV is actually connected via Ethernet. Many apps, specifically streaming apps, require a wifi connection and will not run without it. I prefer to run my FireTV via Ethernet due to the environment mine is in.
This type of hack or workaround would also be useful for the Ouya and any other android device that has an Ethernet port.
To sum up, I am looking for a hack or workaround that will present the Ethernet connection as Wifi to the OS or applications.
I found this document, and page 30 reference what I am looking to do:
http://www.elinux.org/images/9/98/Dive_Into_Android_Networking-_Adding_Ethernet_Connectivity.pdf
Thoughts?
Thanks!
This would benefit our android phones as many apps won't work over carrier network to avoid data overages. I got unlimited data and get better speeds from Verizon than I do at home. If it was an app, xposed module, or some other mod, I would pay for it.
Sent from my One M8 using Tapatalk
A better way would be contacting the developers of that particular app and having them fix it, so that Ethernet is treated the same way as Wi-Fi.
Chahk said:
A better way would be contacting the developers of that particular app and having them fix it, so that Ethernet is treated the same way as Wi-Fi.
Click to expand...
Click to collapse
It is only an assumption, but I am guessing that apps such as the Xfinity TV app by Comcast are setup that way so that people can not use devices such as the FireTV and the Ouya as a replacement for renting a set top box from them. Yes, I can get around this issue by going on wifi, but why use an worst connection method when there may be another way around it? Also Androids open environment is supposed to encourage the creation of alternative ways of doing things.
Looking through other threads, there appears to be a desire for an app that spoofs wifi for people who are also only on 4G or other wireless methods. Having an app on android that could spoof a wifi connection when you are 3G or 4G wireless would be just as useful for some people.
Spelvin said:
Looking through other threads, there appears to be a desire for an app that spoofs wifi for people who are also only on 4G or other wireless methods. Having an app on android that could spoof a wifi connection when you are 3G or 4G wireless would be just as useful for some people.
Click to expand...
Click to collapse
I can see the usefulness of such an app, but it would probably require a rooted device. As far as I know, Fire TV has not been rooted yet.
It has been rooted. But the method has not been shared yet. I believe he said it wasn't ready for release yet. Something along those lines. At any rate it will be eventually
Sent from my One M8 using Tapatalk
Since Fire TV is rooted how do we go about faking WiFi when wired?
Looks like it actually exists!
http://repo.xposed.info/module/com.lemonsqueeze.fakewificonnection
You need Xposed installed to run it.
Enjoy!

[Q] Hide Hotspot Traffic via VPN

I want to prevent my carrier from knowing that I am using CM11's native Hotspot or Tethering features. I know that they can look at the TTL of packets or analyze the traffic (Windows Update, Steam) to detect this. I have a subscription to a VPN service, Private Internet Access, which has an app on Android. If I enable the VPN mode of this app, will all the Hotspot traffic be routed through it, completely invisible to the carrier?
Searching showed me some conflicting answers on this, with some people saying to run it on the tethered device, and others saying to run it on the phone. I am thinking running VPN on phone, as the packets should appear to originate from the phone, rather than something 1 hop behind it.
kcattakcaz said:
I want to prevent my carrier from knowing that I am using CM11's native Hotspot or Tethering features. I know that they can look at the TTL of packets or analyze the traffic (Windows Update, Steam) to detect this. I have a subscription to a VPN service, Private Internet Access, which has an app on Android. If I enable the VPN mode of this app, will all the Hotspot traffic be routed through it, completely invisible to the carrier?
Searching showed me some conflicting answers on this, with some people saying to run it on the tethered device, and others saying to run it on the phone. I am thinking running VPN on phone, as the packets should appear to originate from the phone, rather than something 1 hop behind it.
Click to expand...
Click to collapse
To the best of my knowledge, they could easily know that you are connecting to the VPN tunnel as it utilizes a certain ports. However if it's correctly set up and utilize a secure protocol, all your traffic will get through the VPN and your ISP won't be able to decipher your online activities and your connection type or make sense of your internet traffic.
In other words, you may be using the VPN to connect to websites A, B, and C and send all sorts of interesting information to those websites; or send email; or whatever. Your ISP can see none of that. All they can see is encrypted data that they can't decrypt. So they know you're using a VPN, but they don't know what you're using it for.
Hope it could help.

Categories

Resources