• VIP content is now being released for free. Consider this an early Christmas gift! We have decided to do this for anyone poor and unable to afford VIP membership.

OkayFreedom VPN Service injecting html code into forms

Bluscream

Retired Staff
Contributor
Member
Messages
929
Likes
886
Points
110
#1
OkayFreedom's service executable (Not the UI executable, so it doesn't stop when you kill OkayFreedom.exe; you have to stop the service) does inject HTML code in forms that seem to support it for whatever reason.

Here's me talking about this in the
You do not have permission to view link Log in or register now.

Bluscream, [16.01.18 07:11]
Did anyone here know that "OkayFreedom" VPN is injecting html elements into forms?

Bluscream, [16.01.18 07:12]
Just found out about that because of a VT comment
You do not have permission to view link Log in or register now.


Denis Novitsky, [16.01.18 07:12]
Had no idea. Any proof?

Bluscream, [16.01.18 07:12]
You do not have permission to view link Log in or register now.


Denis Novitsky, [16.01.18 07:12]
Sounds shifty as hell.

Bluscream, [16.01.18 07:12]
yeah

Bluscream, [16.01.18 07:13]
I don't know if it's worth a blogpost tho

Bluscream, [16.01.18 07:15]
OkayFreedom doesn't even have to be started for that

Bluscream, [16.01.18 07:15]
The service does it

Denis Novitsky, [16.01.18 07:18]
hm

Denis Novitsky, [16.01.18 07:18]
i wonder if that is reflected in their privacy policy

Denis Novitsky, [16.01.18 07:20]
> As a result, it is not possible for Steganos to ascertain the content an OkayFreedom user has accessed.

well, they pretty much lie in their very first paragraph

Denis Novitsky, [16.01.18 07:20]
You do not have permission to view link Log in or register now.


Denis Novitsky, [16.01.18 07:21]
absolutely no words about any kind of http injections

DrDeda, [16.01.18 07:27]
[In reply to Denis Novitsky]
it's in the 101 of VPN usage: "Never use proprietary software"

Denis Novitsky, [16.01.18 07:28]
i agree, at least when it comes to free VPNs

DrDeda, [16.01.18 07:30]
which part of "never" don't you understand?

Andrey Meshkov, [16.01.18 09:33]
[In reply to Bluscream]
don’t use google for that

Andrey Meshkov, [16.01.18 09:33]
publicwww is your friend:
You do not have permission to view link Log in or register now.
 

Top