Hacker News new | ask | show | jobs
by M95D 772 days ago
TLDR explanation:

- User connects to an untrusted network (public wifi).

- That network uses DHCP to assign IP address for the user.

- A malicious DHCP would push static routes via DHCP that are more specific than a common default route, and send traffic via a malicious gateway.

- User connects to his/her VPN thinking his/her traffic is secured over the insecure network.

- The malicious static routes, being more specific, take precedence over the default route added by the VPN.