Version 1.7.7 of Viscosity has been released for both Mac and Windows! This release includes two new features, Universal 2nd Factor (U2F) support and obfs4 obfuscation support, along with a security update and some small bug fixes and improvements.
We're especially excited about support for U2F authentication, and we'll be posting further information about using U2F with Viscosity and OpenVPN in the near future. However if you want to check out the technical details immediately we have put together a U2F Two-Factor Authentication server setup guide with example authentication scripts.
We've also added support for the latest obfuscation protocol, obfs4, which was highly requested. If you're interested in using obfs4 but don't already have a server set up, we have updated our Setting up an Obfuscation server with Obfsproxy and Viscosity article.
On the security front, during an internal review we've identified the potential for a privilege escalation attack against processes launched by OpenVPN through the use of malicious environment variables. We've updated Viscosity to detect and protect against any such attacks. To avoid the potential for this to be exploited we recommend users update to 1.7.7 as soon as possible.
Version 1.7.7 Mac Release Notes:
Version 1.7.7 Windows Release Notes: