Re: VPN service for personal devices

Scott, yes, it's finally starting to sink in. ;-) Years of indoctrination
where "coffee shop and hotel wifi will destroy your life" takes a bit of an
adjustment. Obviously, I should have been asking more "why" questions
along the way. Thank you for taking the time to patiently explain that to
me.

Chris, that's a good reminder. Fortunately, those two items were drilled
into my consciousness a long time ago.

Thanks!
- Dan

On Wed, Feb 11, 2015 at 11:42 PM, Scott Klement <pctech@xxxxxxxxxxxxxxxx>
wrote:

Dan,

It shouldn't be possible to inject data into the middle of an HTTP
conversation. HTTP is build on Transmission Control Protocol (TCP) which
is designed to make this pretty much impossible.

So someone might be able to see what you're sending/receiving... but
wouldn't be able to modify it at all.

But, even if they somehow found a way to interject data like this, they
could still do it while you're using a VPN service, if I understand the
scenario properly. In order for a VPN to really protect you properly, the
VPN should be providing you access to a private network like a
business/corporate network. If the VPN service has to send data plaintext
over the public internet to get to the HTTP server, then it's only
protecting you for the part between the VPN service and your PC, the rest
is just as vulnerable as it would've been without the VPN.

Hope you understand.



On 2/11/2015 4:32 PM, Dan wrote:

There is one other question that relates to this, however.

Have hackers figured out a way to "inject" malware into an HTTP
conversation, such that it could infect my PC that way? If yes, would a
VPN service protect against that?

Thanks,
Dan

--

This is the PC Technical Discussion for IBM i (AS/400 and iSeries) Users
(PcTech) mailing list
To post a message email: PcTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/pctech.