- everything is logged
- ALL web traffic, no https - all of it is logged, decrypted and reencrypted
- anything you type in is liable to be keylogged