Comment on Mullvad VPN: Introducing Defense against AI-guided Traffic Analysis (DAITA)

• SpaceCadet@feddit.nl ⁨1⁩ ⁨month⁩ ago

  True that. Hadn’t thought of that as it’s not my typical VPN use case.

  I’m not sure what a VPN provider could do about that though, they don’t control the operating system’s networking stack. If the user or an outside process that the user decides to trust (i.e. a dhcp server) adds its own network routes, the OS will follow it and route traffic outside of the tunnel.

  The defenses I see against it are:

  • Run the VPN and everything that needs to go through the VPN in a virtualized, non-bridged environment so it’s unaffected by the routing table.
  • Put a NAT-ing device in between your computer and the network you want to use
  • Modify the DHCP client so that option 121 is rejected

  source