Updated Mac & Windows Client v.55 Released

Support

Hey all!

We've just released updated versions of our Mac and Windows VPN applications, which you can find here:

Mac: https://www.privateinternetaccess.com/installer/download_installer_osx

Windows: https://www.privateinternetaccess.com/installer/download_installer_win

SHA-256 Checksum:

installer_win.exe: e8e25712130e52eb81bfb9ab699b3682226b8f5796da6028a59a82e66f75e823

installer_osx.dmg: eb0571918ec672ff464c1df6d255b0a948285d62fbf030eb3e6a26dae8bb4674

Changes since v.54:

• We've added an additional layer of protection into our VPN client. Now, whenever the VPN is connected, an additional PIA firewall blocks incoming traffic from unprotected network interfaces. Thus, if you are directly connected to the Internet, people who are actively searching for your real IP address will not be able to find you and match you based on your VPN IP address. This additional functionality protects against a potential attack which was disclosed to us by ValdikSS, where an attacker could potentially find you if you did not already have firewall protection. We would like to thank ValdikSS for suggesting this new privacy feature!

We highly recommend all users to upgrade to this version.

Pepe

I think ValdikSS is well versed. Hire him

https://medium.com/@ValdikSS/another-critical-vpn-vulnerability-and-why-port-fail-is-bullshit-352b2ebd22e2#.42eh7zv0x

buckbundy

Any reason why the client is still using TAP driver 9.0.0.21 instead of 9.0.0.9, given that 9.0.0.21 has been causing all the issues with PIA clients post version 46?

p0000000000001

What about those of us running OpenVpn in our routers, as opposed to the windows clients?

Do we get the benifit of your new security update by default:

'We've added an additional layer of protection into our VPN client. Now, whenever the VPN is connected, an additional PIA firewall blocks incoming traffic from unprotected network interfaces"

Or do we need to grab the new openvpn files & reupload them to our routers..or are we still vulnerable? Would we be better off running the windows client than setting up the vpn on a router level so we can get these security features as well?

secure4me

Anyone else running OS X 10.11.2 noticed that the Mac firewall is disabled after connecting with this version of the client?

My firewall keeps disabling, can turn it back on, but if disconnect then connect back to PIA, the firewall is disabled again.

Coach

is the same with me, OS X 10.11.2

secure4me

is the same with me, OS X 10.11.2

Just noticed, and not sure if this is how supposed to work, but cannot access local lan now with new client running, this includes trying to use network printer.

ezbox

I am having the same issue as Secure4me, using the new mac client, I cant access my local network while the VPN is active. This makes it less desirable to use since I do not want to activate the VPN browse a webpage and then deactivate the VPN to be able to print its contents on my network printer. 

Thanks in advance for any input regarding this issue.

KingDroidArmy

secure4me said:

is the same with me, OS X 10.11.2

Just noticed, and not sure if this is how supposed to work, but cannot access local lan now with new client running, this includes trying to use network printer.

ezbox said:

I am having the same issue as Secure4me, using the new mac client, I cant access my local network while the VPN is active. This makes it less desirable to use since I do not want to activate the VPN browse a webpage and then deactivate the VPN to be able to print its contents on my network printer. 

Thanks in advance for any input regarding this issue.

Thanks for the heads up.  I'll look into this myself when I get the chance. My guess is that this new "feature" is blocking LAN devices because they're deemed a security hazard. I know of some Juniper VPN software that does the same thing. It's stupid, really.

tomeworm

ezbox said:

I am having the same issue as Secure4me, using the new mac client, I cant access my local network while the VPN is active. This makes it less desirable to use since I do not want to activate the VPN browse a webpage and then deactivate the VPN to be able to print its contents on my network printer. 

Thanks in advance for any input regarding this issue.

Just wonderful. Typical of PIA. Fix one thing but break something else. I'll have to hold off on upgrading.

Maybe by v. 60 this will all be finally resolved?

DeathStalker

It would be "smart" of the devs to name the installation file with the VERSION.  Doesn't take much - but even that little is too much to ask from PIA.

idontknow

ezbox said:

I am having the same issue as Secure4me, using the new mac client, I cant access my local network while the VPN is active. This makes it less desirable to use since I do not want to activate the VPN browse a webpage and then deactivate the VPN to be able to print its contents on my network printer. 

Thanks in advance for any input regarding this issue.

I agree, they should have an option to enable/disable this new firewall or tweak the firewall to allow things like network printing.

Osborne_Cox

Thanks for the update.

asdfasdf456

quite a few issues with the .55 update

dnscrypt seems to be crippled. no web pages will load. only fixed by running the .55 installer once again. as soon as i reboot, back to square one. i run trouble shooting on the network connection, it tells me that protocols are missing and it is unable to fix it. this is only fixed by reinstalling. 

frustrating to say the least, and i'm not sure if i'm comfortable running .54 with the known vulnerability.  anyone else ran in to this?

nightshr1ll

.55 update is 100% unusable. Not to mention the fact that on 10.11.2 it automatically disables the firewall without admin permission - it also entirely isolates my client from the server when they're both on the same local network.

Oh, and I downgraded back to .49 - issue(s) resolved.

crypto975

asdfasdf456 said:

"quite a few issues with the .55 update

dnscrypt seems to be crippled..."

Yes, same here with dnscrypt. I've had to go back to version 54.

crypto975

And, while I am commenting, it would be great, please, if PIA could re-enable the driver update notification mechanism that used to exist some time back, in future updates!

Osborne_Cox

v55 is terrible on OSX Lion! It only connects after a restart of computer. PIA refuses to connect after sleep even if you disconnect client before sleep. It also refuses to reconnect if you disconnect, which is a pretty basic requirement!

Not sure what has changed as I didn't test v54. I suspect some rogue routes/firewall rules. Not even full reinstall works. I reverted to v53.

DeathStalker

Once again, a ridiculous lack of project/change management/SDLC 101 ......  

Though I'd wager that no one on the tech team has even heard of SDLC ....

VPNTester

Support said:

Hey all!

We've just released updated versions of our Mac and Windows VPN applications, which you can find here:

We highly recommend all users to upgrade to this version.

Seriously??? It completely does not work in Win XP!!! It is first time it happens in about 30+ versions that you have released since I am a client!

Could you (PIA) please actually test your product/software before releasing it? (instead of rushing it  through the door and posting on the internet: "we fixed the bug")

I had to roll back to v. 54 which seems OK.

Toriko

Open-source it

joanie

secure4me said:

is the same with me, OS X 10.11.2

Just noticed, and not sure if this is how supposed to work, but cannot access local lan now with new client running, this includes trying to use network printer.

Add me to the list. I rely upon Synergy for shared keyboard and mouse. My OS X Synergy client can no longer connect to the Synergy server if PIA is running on the client machine. Downgrading to v.49 (first old installer I found on the machine) solved the problem.

OmniNegro

heybert said:

Toriko said:

Open-source it

Are you saying you can find copies out online somewhere of the past PIA software?

No. Toriko is suggesting that PIA should open source their client.

KingDroidArmy

Sorry for not getting back to everyone in a timely manner.  I've been busier than I expected.  It seems that these issues have been confirmed by many users on v.55.  My recommendation is to roll back to v.49 and stay on that version indefinitely for Mac users.  Windows users should use the v.53 version of the client.

Mac users:

1. Exit the client (if needed) and go into your Applications folder.  Drag Private Internet Access.app to the Trashbin. Empty the Trashbin after doing this.

2. Open Terminal 

3. **NOTE** Please make sure this step is completed very carefully. All symbols and spacing are VERY important. Incorrect usage of this command can lead to Data loss. (It is best to simply copy and paste the command below)

Type: rm -rf ~/.pia_manager/

4. Press enter. If the command is successful, there will be no confirmation; it will simply go to a new line in the Terminal window.

Please make sure to complete step 3 very carefully. 

Next, please try repairing your disk permissions:

1. Go to Applications/Utilities

2. Open Disk Utility

3. Click Macintosh HD

4. Click on Verify Disk Permissions (for OSX 10.11, Click on First Aid at the top)

5. Click Repair Disk Permissions (for OSX 10.11, Click Run)

6. When the check completes, reboot your computer

7. Install version v.49 from this link: https://onedrive.live.com/redir?resid=829424442E8F196D!3113&authkey=!AN9wxhSIOzS_e1Q&ithint=file,dmg

Windows users :

I haven't used Windows in a while, but the process is fairly simple.

1. Close PIA

2. Go to Control Panel and select uninstall a program

3. Find Private Internet Access/PIA Manager

4. Uninstall the application

5. Reboot your computer

6. Install v.53 from this link: https://onedrive.live.com/redir?resid=829424442E8F196D!3114&authkey=!ADeQygJnHVNu0Ho&ithint=file,exe

If you have any issues, please let me know.

bunklung

What about OpenVPN via router setup? I manually disabled UPnP, and set rp_filter 1 on all interfaces on the router which runs OpenVPN. The downstream router also has UPnP disabled.

Perhaps PIA should include these suggestions in the DD-WRT setup guide:

https://www.privateinternetaccess.com/pages/client-support/dd-wrt-openvpn

alex1911

v.55 has issues with Punkbuster - an online anti-cheat software for Battlefield 4. PIA firewall is blocking LAN connection between "PNKBSTR" services, so I need to turn VPN off to enter to online mode, after game, I need to turn VPN on again.

To staff:

Please improve / remove LAN blocking rules.

WhiteZero

This new feature screws up my SCP Monitor application that I used to connect my DualShock 3 controllers via bluetooth. I'm assuming the new PIA "firewall" is disabling the bluetooth communication or something? Please give us a way to turn this new feature off or limit it to specific interfaces!

idontknow

I also think in addition to offering an option to disable this protection, they should have a tool that checks if your vulnerable to this or at least have a post telling you what makes you vulnerable and what makes you safe.

tomeworm

None of these issues are ever going to be permanently fixed until PIA focuses on the source of the problem -- the servers. Perfect Privacy's description of the problem, as well as it's remediation, makes it abundantly clear that PIA isn't really fixing the root cause problem. All they're doing is patching the PIA app. This isn't a cure. It's like putting a bandaid on cancer.

johnny67

I agree; this v.55 for Mac is absolutely terrible. It disables all local LAN connectivity. Who in their right mind is going to want to toggle between surfing and using LAN services. This is something that can be easily fixed. Common PIA, I know you can do better than this. Mac OS X Server connectivity is totally bust with v.55.

Rolling back to v.53 for Mac fixes everything.

captain21

where can i download v.53 for mac?