Mozilla released the results of a recent third-party security audit of its VPN services as part of its commitment to user privacy and security. The survey revealed security issues that were presented to Mozilla to address with solutions to ensure user privacy and security.
Many search marketers use VPNs in the course of their business, especially when using a Wi-Fi connection to protect sensitive data, so the reliability of a VPN is essential.
Mozilla VPN
A Virtual Private Network (VPN) is a service that hides (encrypts) a user’s Internet traffic so that no third party (such as an ISP) can peek and see what sites a user is visiting.
VPNs also add a layer of security against malicious activity, such as session hijacking, which can give an attacker full access to the websites a user visits.
There is a high expectation from users that VPN will protect their privacy when surfing the Internet.
Therefore, Mozilla uses the services of a third party to perform a security audit to ensure that your VPN is completely blocked.
Security risks discovered
The audit revealed vulnerabilities of medium or higher severity, ranging from denial of service (DoS). risks for keychain access leaks (encryption-related) and lack of access controls.
Cure53, the third-party security company, discovered and addressed several risks. Among the issues were possible VPN leaks in a rogue extension vulnerability that disabled the VPN.
The scope of the audit included the following products:
Mozilla VPN Qt6 App for macOS Mozilla VPN Qt6 App for Linux Mozilla VPN Qt6 App for Windows Mozilla VPN Qt6 App for iOS Mozilla VPN Qt6 App for Androi
Here are the risks identified by the security audit:
FVP-03-003: DoS via serialized intent FVP-03-008: Keychain access level leaks WG private key in iCloud VP-03-010: VPN leak via captive portal detection FVP-03-011: Lack of access controls on local TCP server FVP-03-012: Rogue extension can disable VPN using mozillavpnnp (alt)
The rogue extension issue was rated high severity. Each risk was subsequently addressed by Mozilla.
Mozilla released the security audit results as part of its commitment to transparency and to maintaining the trust and security of its users. Conducting a third-party security audit is a good practice for a VPN provider that helps ensure the VPN is reliable and trustworthy.
Read Mozilla’s announcement:
Mozilla VPN Security Audit 2023
Featured image by Shutterstock/Meilun
[ad_2]
Source link
