OkayFreedom VPN Service injecting html code into forms

Bluscream

Retired Staff
Member of the Month
Contributor
Joined
May 8, 2015
Messages
938
Points
171
Location
Germany
OkayFreedom's service executable (Not the UI executable, so it doesn't stop when you kill OkayFreedom.exe; you have to stop the service) does inject HTML code in forms that seem to support it for whatever reason.

Here's me talking about this in the
You do not have permission to view link Log in or register now.

Bluscream, [16.01.18 07:11]
Did anyone here know that "OkayFreedom" VPN is injecting html elements into forms?

Bluscream, [16.01.18 07:12]
Just found out about that because of a VT comment
You do not have permission to view link Log in or register now.


Denis Novitsky, [16.01.18 07:12]
Had no idea. Any proof?

Bluscream, [16.01.18 07:12]
You do not have permission to view link Log in or register now.


Denis Novitsky, [16.01.18 07:12]
Sounds shifty as hell.

Bluscream, [16.01.18 07:12]
yeah

Bluscream, [16.01.18 07:13]
I don't know if it's worth a blogpost tho

Bluscream, [16.01.18 07:15]
OkayFreedom doesn't even have to be started for that

Bluscream, [16.01.18 07:15]
The service does it

Denis Novitsky, [16.01.18 07:18]
hm

Denis Novitsky, [16.01.18 07:18]
i wonder if that is reflected in their privacy policy

Denis Novitsky, [16.01.18 07:20]
> As a result, it is not possible for Steganos to ascertain the content an OkayFreedom user has accessed.

well, they pretty much lie in their very first paragraph

Denis Novitsky, [16.01.18 07:20]
You do not have permission to view link Log in or register now.


Denis Novitsky, [16.01.18 07:21]
absolutely no words about any kind of http injections

DrDeda, [16.01.18 07:27]
[In reply to Denis Novitsky]
it's in the 101 of VPN usage: "Never use proprietary software"

Denis Novitsky, [16.01.18 07:28]
i agree, at least when it comes to free VPNs

DrDeda, [16.01.18 07:30]
which part of "never" don't you understand?

Andrey Meshkov, [16.01.18 09:33]
[In reply to Bluscream]
don’t use google for that

Andrey Meshkov, [16.01.18 09:33]
publicwww is your friend:
You do not have permission to view link Log in or register now.
 

IEX

Member
Joined
Jan 30, 2017
Messages
2
Points
33
Age
26
Eh, that's what you get with a free VPN. I highly suggest either ProtonVPN freedomVPN
 

Top