Guide | How To Protect Yourself Against MITM Attacks

[Maliek]

Thanks!

 

[Fonda Bellamy]

Thanks for sharing, really helped a lot.

 

[simmerskool]

Does, or should, Simple DNSCrypt affect VPN? I don't want to break something that is working.

 

[Deleted member 178]

Im sometimes using a VPN alongside, i don't have issues. In the GUI , you can include/exclude your VPN

 

[inuyasha]

@Umbra is there any disadvantages to using this?

 

[Deleted member 178]

@inuyasha Yes , because you depend of a 3rd party , so if its server has issues you can have slowdown or disconnection, but you can then select another one in the meantime.

 

[simmerskool]

Im sometimes using a VPN alongside, i don't have issues. In the GUI , you can include/exclude your VPN

thanks!

 

[simmerskool]

basically you have to secure the transmission via encryption , for this we use the DNScrypt protocol:
There is a simple apps called Simple DnsCrypt that will automatize and really simplify the implementation of this protocol
Simple DNSCrypt - Official Project Home Page
We will then choose from the list a DNS provider using DNSSEC.
Simple as that

just double checking if it's too simple for me, ie, is it working? How do I know it's working? Looking at the network with killswitch I do see dnscrypt-proxy.exe with 3 tcp & 1 udp connection, but sent traffic= 0, received traffic= 0. Does this sound right? Do I need to tweak something in browser, chrome, or does the installation of simplednscrypt do everything needed automagically? sometimes I don't see the forest looking at the trees. thanks!

 

[Deleted member 178]

just double checking if it's too simple for me, ie, is it working? How do I know it's working? Looking at the network with killswitch I do see dnscrypt-proxy.exe with 3 tcp & 1 udp connection, but sent traffic= 0, received traffic= 0. Does this sound right? Do I need to tweak something in browser, chrome, or does the installation of simplednscrypt do everything needed automagically? sometimes I don't see the forest looking at the trees. thanks!

it is automatic , select a server, enable it and the appropriate network device (if it wasn't) .
Normally your dns should be changed to : 127.0.0.1 or 2 , check via ipconfig -all in cmd.

 

[simmerskool]

it is automatic , select a server, enable it and the appropriate network device (if it wasn't) .
Normally your dns should be changed to : 127.0.0.1 or 2 , check via ipconfig -all in cmd.

ok thanks! will update.

 

[simmerskool]

it is automatic , select a server, enable it and the appropriate network device (if it wasn't) .
Normally your dns should be changed to : 127.0.0.1 or 2 , check via ipconfig -all in cmd.

now I see, my network cards were NOT selected, so I just selected and it add checkmark, so now will test and see if anything seems or looks different. thanks!!

 

[Windows_Security]

Nice free program to check against MITM relays is SSL eye (SSL Eye Protects You From Prism | Eagle Eye Digital Solutions | Muscat Oman)

 

[Deleted member 178]

@Windows_Security yep i mentioned it in another "guide" : Q&A - Umbra's Great Paranoid Guide (Update in progress)

 

[Av Gurus]

Is this program FREE?
What do these results mean?

 

[Sunshine-boy]

Is this program FREE?
What do these results mean?

View attachment 148791

its free but Updated on: 8.11.2014
IDK it's useful or not

 

[Sunshine-boy]

@Windows_Security yep i mentioned it in another "guide" : Q&A - Umbra's Great Paranoid Guide (Update in progress)

Hello
can I use this tool with open DNS home ?

 

[Deleted member 178]

Hello
can I use this tool with open DNS home ?

which one?

 

[Sunshine-boy]

which one?

hello SSL Eye

 

[Deleted member 178]

yes it can work, SSL eye just check the path to see if some points have been compromised.

 

[WinXPert]

@Windows_Security yep i mentioned it in another "guide" : Q&A - Umbra's Great Paranoid Guide (Update in progress)

Paranoid as always but I love it!