VPN-enabled advance fee fraud

Grant Taylor gtaylor at tnetconsulting.net
Mon Mar 21 18:00:45 UTC 2022


On 3/21/22 11:30 AM, TJ Trout wrote:
> We have carefully engineered our apps and VPN servers to categorically 
> eliminate sensitive information. As a result, ExpressVPN can never be 
> compelled to provide customer data that does not exist.

I understand and appreciate your architecture.

However, there seems to be one piece of information that you neglected / 
elided.

What will ExpressVPN do regarding /established/ connections?  I would 
expect that network flows / netstat / etc. could provide some 
information for current, established, and ongoing.



-- 
Grant. . . .
unix || die

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4017 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20220321/c38029bd/attachment.bin>


More information about the NANOG mailing list