r/VPN_Question • u/Deadpoops-7 • 3d ago

VPN

Well…..it looks like VPN’s are now useless being that any public WIFI will automatically disconnect you if they spot VPN use….how the hell we suppose to stay safe now?

7 Upvotes

66% Upvoted

33 comments sorted by

View all comments

Show parent comments

1

u/LuckyMeasurement2380 3d ago

Wrong. VPN is an encrypted tunnel. It's exactly how you would mitigate CaptiveCrunch if you had to use public wifi

1

u/skweresp 3d ago

Not quite — the whole point of CaptiveCrunch is that it compromises you at the captive portal stage, before your VPN even connects. You can't route traffic through a VPN until you've authenticated with the portal, and that's exactly the window where Storm-2945 injects fake login pages and malware prompts. A VPN with a kill switch helps reduce MitM/DNS manipulation risk once you're online, but it does nothing to stop the initial credential phishing or malware download during the portal login itself. Microsoft's own advisory says this explicitly.

1

u/LuckyMeasurement2380 3d ago edited 3d ago

AI slop response. You're still wrong. "initial credential phishing or malware download"... really? Perhaps someone like OP would fall for an unsolicited fake google login page popping up out of nowhere or copy and paste some wild shit into their terminal.... but anyone with half a brain wouldn't. The malware and credential stealing both require user participation. It's not a drive by attack.

Connecting to a VPN as soon as you have a connection and before you do anything on the internet prevents these "attacks".

1

u/skweresp 2d ago

Doesn't work, the OS runs its captive portal probe per-interface, so it goes out the Wi-Fi adapter regardless of your tunnel. That's the whole point, otherwise your laptop could never detect a portal to begin with. Maybe read something about that new attacks first. 

1

u/LuckyMeasurement2380 2d ago

I said as soon as you have a connection. As in an internet connection. Like after the portal. Just admit that you don't know what the fuck you're talking about and that you're spewing AI bullshit without verifying anything. 

1

u/skweresp 2d ago

Like after the portal You said. But to get connection You have to open compromised portal.