Windscribe VPN Leaking DNS in Linux

This post pertains to the Windscribe GUI app on Linux as encountered here on Debian and Ubuntu based Linux Mint with the latest version 2.6.14 as well as the previous version. To be fair the GUI app is still marked as in beta.

If you go to the download page it funny enough first attempted to serve me the older and more reliable CLI program, supposedly tried and tested, and only at the second attempt offered the GUI program for download. I'ld have to check if this problem is also present in the CLI version (it wasn´t previously when used around three years ago as I ran frequent tests) but for now with the move to a more comfortable graphical interface I've only got the new app installed.

Most sites like whatismyip.com will tell you that everything is fine. It seems like they're only running one test. Also, when tested on AirVPN's ipleak.net everything appears fine at first glance. However, they're running more tests and eventually after around 20-30 seconds suddenly a second DNS is detected and pops up as visible in the screenshot below. This is the DNS of the ISP.

DNS Level Blocking with Control D

As you probably know I'm quite interested and active in testing different security approaches like sandboxing, firewalls and VPNs. Compartmentalizing with virtual machines is also a good strategy. Part of a good multi-layered defence is also a well curated hosts file like this one kept by Dan Pollock and secure, encrypted DNS services. Better even if you can combine features of the last two and keep the nasties out with DNS level blocking. This will give us a much cleaner internet and might even negate the need for a browser level blocker like uBlock Origin.

VPN Providers with Custom Clients for Linux (Updated)

Virtual Private Networking providers and company are more than you can shake a stick at these days. While there's always installable client software for Windows, Android and usually MacOS and whatever the mobile version is called not all are offering desktop clients for Linux distributions. Even if they do it's usually non-GUI, you know, with the excuse that Linux nerds love and want the power of the command line, with stripped-down functionality, or even a browser extension only which might work on a Chromebook but not on any other OS if you actually want to channel your entire traffic. And no, a proxy is not a replacement for a proper VPN.

Block This: An Ad-Blocker for Android Without Requiring Root

Recently I discovered Block This in my long search for an ad-blocker for Android worth the name. There are of course several products around, first and foremost perhaps the venerable AdblockPlus, but they all have the problem that they require root access, i.e. the phone to be rooted. I have no intention of doing this as I simply can't be bothered enough to mess around with a smart phone and security-wise it's a much better idea to keep it locked down. If you don't know what I'm talking about don't worry, you don't need to.

Consider Using a VPN: More Privacy for All Your Traffic

One option for anonymous browsing and privacy for other types of network traffic is using the Tor network which has been covered in a few articles here before. But although traffic is encrypted within the network when bouncing between relays, plain text over Tor is still plain text. Other problems are the slow speed and connectivity issues users may be facing with a volunteer network, user-unfriendly configuring of exit nodes and switching them on demand, and the fact that Tor is not suited to stream large files and video content, if only not to abuse donated bandwidth.