Wireless safety at airports, libraries and coffee shops
As an independent developer, everything I need to be productive for my projects and clients fits within my backpack. I am constantly on the move and am rarely at the same physical location throughout the entire day.
Because of that mobility and Edward Snowden’s NSA leaks, I have become increasingly aware of doing work within untrusted network environments such as airports, libraries, coffee shops, etc. Or really anywhere where there is an open wifi connection.
I use a custom .mobileconfig file that configures my mac and iOS devices to use a custom VPN tunnel to a server that I rent specifically for this purpose. Basically it works by setting up an IPSec tunnel whenever the device needs to connect to do anything on the network. That includes calendar, email, iTunes Match, web browsing, etc. This trusted VPN tunnel configuration only works outside of my home network. So when I go to the local coffee shop, the tunnel is setup. When I am at a client’s office for a meeting, tunnel is setup. I don’t have to think about it.
This isn’t for the faint of heart though. My configuration on the server is still evolving ( like how to have multiple iPSec clients from the same ip address such as the iPhone and mac are on the same coffee shop wifi ) but it is better than it was before. In fact, this configuration also works when I am tethering or just browsing on the cellular network.
This is a sample mobile config I use on my devices:
A few notes on this file:
I use a variation of this file on both iOS and OS X and both work fine with the exception that the on demand generates an error on iOS 7. While at WWDC 2014, I sat down with with an Apple security engineer and he reported that iOS 8 beta 2 would have it fixed ( which it did ). Hopefully this will be also fixed in the iOS 7.1.2 update.
Apple's configuration profile documentation: https://developer.apple.com/library/ios/featuredarticles/iphoneconfigurationprofileref/introduction/introduction.html
To Install:
While it was a few steps to setup, I have more confidence about my devices transmitting data securely when going about in my daily activities whether going to the grocery store, shopping or working away from home.
https://hasani.me/Br