Re: VPN service for personal devices

[Scott Klement <pctech@xxxxxxxxxxxxxxxx>]

Dan,

It shouldn't be possible to inject data into the middle of an HTTP 
conversation.  HTTP is build on Transmission Control Protocol (TCP) 
which is designed to make this pretty much impossible.

So someone might be able to see what you're sending/receiving...  but 
wouldn't be able to modify it at all.

But, even if they somehow found a way to interject data like this, they 
could still do it while you're using a VPN service, if I understand the 
scenario properly.  In order for a VPN to really protect you properly, 
the VPN should be providing you access to a private network like a 
business/corporate network.  If the VPN service has to send data 
plaintext over the public internet to get to the HTTP server, then it's 
only protecting you for the part between the VPN service and your PC, 
the rest is just as vulnerable as it would've been without the VPN.

Hope you understand.


On 2/11/2015 4:32 PM, Dan wrote:
> There is one other question that relates to this, however.
>
> Have hackers figured out a way to "inject" malware into an HTTP
> conversation, such that it could infect my PC that way?  If yes, would a
> VPN service protect against that?
>
> Thanks,
> Dan