Technology

59589 readers

2891 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

239

ExpressVPN bug leaks DNS requests for Windows users with split tunneling: (www.bleepingcomputer.com)

submitted 9 months ago by Squire1039@lemm.ee to c/technology@lemmy.world

10 comments fedilink hide all child comments

Bug:

Affected versions 12.23.1-12.72.0 (May 2022-Feb 2024) with split tunneling feature.

Impact:

Exposed visited domains to user's ISP, potentially leaking browsing history.

Affected users:

Windows users with active split tunneling (about 1%).

Fix:

Upgrade to version 12.73.0 (removes split tunneling temporarily).

Alternatives:

Disable split tunneling or use ExpressVPN version 10.

Note:

All other traffic and content remain encrypted.

you are viewing a single comment's thread
view the rest of the comments

[–] ArchAengelus@lemmy.dbzer0.com 11 points 9 months ago (2 children)

Uh, I might be wrong here, but isn’t the whole purpose of split tunneling to allow you to send only necessary traffic through a given tunnel? Then the rest of your traffic goes whatever the default path is?

This seems more like a feature than a CVE. Maybe I’m missing something.

[–] Still@programming.dev 5 points 9 months ago

so it would be like you say I want Firefox to go thru the tunnel, you would want the DNS requests made from it to go thru as well, in this case they weren't tunneled and were just going to the normal dns server

load more comments (1 replies)