This is a country that has had an entire province seized by a hostile, authoritarian neighbour (Russia) and which has been teetering on the brink of civil war for years. Now, anyone who has followed the news in recent years will wonder how on earth Ukraine cannot be classified as a “high sensitivity” region. Windscribe tell us that “Although we have encrypted servers in high sensitivity regions, the servers in question were running a legacy stack and were not encrypted.” We then come to one of the standout sentences of the post. But they do admit that on these servers was an OpenVPN server certificate and its private key. It is important to stress at this state that Windscribe do not believe that user data has been compromised. It was only when they reached out to the company which provides the servers for them that they were told they had been seized by law enforcement agencies after a judicial order as part of an investigation into activity that took place a year previously. Ukrainian Seizureīack on 24th June, two of Windscribe's Ukrainian servers went offline.
This is even more concerning for Windscribe users in Ukraine when you read down the article and discover this security issue has emerged as a result of two Windscribe servers in that country being seized. The blogpost on the Windscribe website, and social media coverage of it, gloss what appears to have been a pretty serious and fundamental security issue that could have compromised user data. Windscribe VPN has announced that it is “sunsetting” its current OpenVPN certification authority in a bombshell post where it admits that it needs updating in order “to follow industry best practice.”
0 kommentar(er)
