SparkLabs Blog.

The latest news and releases.


Viscosity For Mac & Windows: Version 1.7.7

Version 1.7.7 of Viscosity has been released for both Mac and Windows! This release includes two new features, Universal 2nd Factor (U2F) support and obfs4 obfuscation support, along with a security update and some small bug fixes and improvements.

We're especially excited about support for U2F authentication, and we'll be posting further information about using U2F with Viscosity and OpenVPN in the near future. However if you want to check out the technical details immediately we have put together a U2F Two-Factor Authentication server setup guide with example authentication scripts.

We've also added support for the latest obfuscation protocol, obfs4, which was highly requested. If you're interested in using obfs4 but don't already have a server set up, we have updated our Setting up an Obfuscation server with Obfsproxy and Viscosity article.

On the security front, during an internal review we've identified the potential for a privilege escalation attack against processes launched by OpenVPN through the use of malicious environment variables. We've updated Viscosity to detect and protect against any such attacks. To avoid the potential for this to be exploited we recommend users update to 1.7.7 as soon as possible.


Version 1.7.7 Mac Release Notes:

added
Universal 2nd Factor (U2F) support
added
Support for the obfs4 obfuscation protocol
improved
No longer displays an alert when a session token is rejected
improved
Detection of unsafe environment variables improved
fixed
Various bug fixes and enhancements


Version 1.7.7 Windows Release Notes:

added
Adds U2F (Universal 2 Factor) support
added
Support for the obfs4 obfuscation protocol
improved
Detection of unsafe environment variables improved
fixed
Various bug fixes and enhancements

The 1.7.7 update can be automatically installed from inside Viscosity, or downloaded and manually installed. For support with this version please visit our support section.