‍ ‍‍‍ᓭ cryptostorm ᓯ

We added better isolation to the backend endpoints for cryptostorm.is/wireguard and /wireguard_man but a (now fixed) bug was causing keys to not propagate the network correctly for the past 24 hours. If you used either page in that time, please go back and add/del your key again.

We wrote a blog post about our new server-side multihop feature. See cryptostorm.is/blog/ssmultihop

We added a new server-side multihop feature: connect like normal and go to http://10.31.33.7/multihop to use it. Also updated to OpenVPN 2.7.0 on all the servers, and re-enabled DCO on the UDP instances since 2.7.0 is using a newer (less buggy) DCO

wow can't believe this is over ten years old now

@R4CC00N3D @vxunderground @YJB52888982 👀

Giveaway. @YJB52888982 has gifted us 11 Cryptostorm VPN 1 month accounts. It's a schizo VPN thingie. Comment below for a chance to win. Winner will be selected in 24 hours. More information: cryptostorm.is

Xray support is live and our custom Android app is finished, see cryptostorm.is/blog/xray

For those already asking: Yes, we will be doing the Black Friday to Cyber Monday half-off sale this year (Nov 28 - Dec 1), same as we've done every year for the past decade or so. Xray support is live and our custom Android app is finished, but the blog post is still in-progress

We extended the ports you can connect to our VPN entry IPs on (was 1-29999, now 1-65535). That was leftover from when the entry IP was the exit IP, but they're separate now so we can use all ports. Port forwarding is still restricted to ports >30000. cryptostorm.is

We wrote a quick blog post better explaining the post-quantum stuff involving SSH that we tweeted about on July 3. Also added a couple of other things to the post (fixed an ad/tracker blocking issue, and info about the Xray setup we're working on). cryptostorm.is/blog/pq-openssh

the result=$(wait "$real_pid") line was incorrect, since that doesn't get the output, it just gets the return code from the wait command. The corrected code has been pushed to the server and updated on cryptostorm.is/conf/

We added jittered, obfuscated API calls to OpenVPN's auth logic to blunt timing and size-based side-channel attacks—even with TLS 1.3 + PQ KEX in place. See cryptostorm.is/conf/ — the comments in the last four scripts have more details.

@vxunderground Will a Disembodied Tyrant poster work instead?

Step 1. Purchase desktop computer from a sketchy pawn shop. It was $40. The store clerk said he didn't know the password to the computer (it's probably stolen) Step 2. Travel to grocery store. Purchase 6 large containers of mayonnaise Step 3. Purchase a Whitechapel poster

We added support for post-quantum key exchanges to our SSH tunneling/obfuscation. OpenVPN can't do PQ KEX yet, but with this you can add a PQ layer on top of your OpenVPN (TCP) traffic. This requires a recent OpenSSH/OpenSSL version.

We accidentally broke transparent .onion access for WireGuard users in #I-V" target="_blank" rel="nofollow noopener">cryptostorm.is/blog/port-stri… at "Tighter leak prevention in iptables". An exclusion was needed for tor's VirtualAddrNetworkIPv4. The transparent .onion (and .i2p) feature now works again for WireGuard users.

The full changelog along with the source code is on github.com/cryptostorm/cs…

Cryptostorm client v3.65 released • Switched to Wintun (faster than TAP) • Killswitch reverted+rewritten • Japanese lang fixed • Better OpenVPN output parsing • Improved threading + update button logic • Faster connect/disconnect/exit Download from cryptostorm.is/windows

We also replaced our 1 Gbps Finland server with a 10 Gbps server. Those of you with IPs in your configs have about a month to update them.

@notdan @DuckDuckGo We're not blocking DDG on our end. I just checked, all the servers can reach it, though I didn't check every single exit IP. Usually if HTTP(s) sites can't be reached it's because the MTU isn't set correctly. The MTU directive in WireGuard or --mssfix in OpenVPN might be needed.

why cant you access @DuckDuckGo on @cryptostorm_is? such a bizarre thing that is seemingly blocked by either CS or DDG...