BOBNOBODY
13093
19948
341
keep it secret, keep it safe
Mar 4, 2016 6:06 PM
BOBNOBODY
13093
19948
341
Encyniclopedia
Funny, I've been reading up on this in the past week. Only thing I miss here is the mention of logging
kristianlyng
What I miss is a big red warning saying most of this is fucking bullshit and doesn't add any really security what so ever.
LargeHoops
There are better VPNs that are cheaper and more secure out there if people look. But that's just my 2 cents.
defkkkon
Most VPNs will have the exact same security, but their privacy models are unknowable. It is impossible to prove they do not log, or they do
defkkkon
not spy on users.
Agnwristos
https://www.goldenfrog.com/blog/myths-about-vpn-logging-and-anonymity
defkkkon
goldenfrog is about the worst possible authority on privacy, but generally speaking you will never lose your privacy with ethical VPNs
mordaedil
"Ethical" VPN's will be selling your data as soon as they are forced to.
Reckoning47
Literally all of the suggested VPN's are shit. Go to r/VPN
heizpost
Angry downvote for "data you send or receive is protected from anyone". If you don't know shit then don't post shit.
delpharseven
Yeah this is all BS written by someone marketing VPN providers.
teletubbyshaman
We get it you VPN....
artemizer
Some of those VPN suck ass
wifeaggro
DO NOT TRUST HIDEMYASS
Playaaa
Why?
wifeaggro
Because they snitch
foxfire1112
I dont think this is how it works..
Cere4l
Dunno, i stopped reading when it says it protects you from incoming hackers right at the start.
mynameisrobertpaulson1
+1 for title. HACKERS, YOU SHALL NOT PASS
itsprobablysarcastic
PIA has gone to shit in the past two months
angryimgurian
Just canceled my account last week. Slow...like old people fucking.
itsprobablysarcastic
replacement suggestion. I also found that they recently started throttling many... how do I say this... "social file sharing" sites.
UserSubterraneanHomesickAlien
Came for title. Stayed for useful info, gollum.
silverbean
I will file transfer the Ring to Mordor! ~And you shall have MY Firewall! And MY Encryption Key! And My offsite server!!
JohnnyTitelips
https://s-media-cache-ak0.pinimg.com/736x/2f/47/19/2f471961b5038a9da6f29855bedcd79e.jpg
PrestigeWorldwideFirstWordInEntertainment
HMA will hand over your info in a second if told to and the rest are in five eyes country's so they are worthless (although I use it 1/
PrestigeWorldwideFirstWordInEntertainment
PIA sometimes. Cyber ghost might no be in a 5 eye country but log your data. There's like 3 vpns that are actually safe and they aren't 2/
PrestigeWorldwideFirstWordInEntertainment
Even that great. Plus each vpn has its own setup process and openvpn is different too. This post is worthless. 3/3
KevinMenzel
This infographic is such crap.
AmiEvilYet
The location of your VPN matters, as well. iirc US based VPN's can still be required to divulge information due to patriot act and such.
mahdhatre
PIA does not keep any logs that are useful to anybody. Pretty much all they can prove is that you used the VPN at whatever time
ZaphodForgotHisTowel
At least Comcast doesn't know I'm torrenting
BhawbTheMagnificent
Yeah, the government can see all my sweet, disgusting porn as long as Comcast doesn't try to nail me for torrenting Game of Thrones.
ZaphodForgotHisTowel
...exactly
cloud7isfordouches
Most of listed vpns keep the logs saved..so not THAT anonymous...just sayin
defkkkon
None of these are anonymous. They cannot be by definition of being a public, subscription VPN service. Anonymity is total privacy, these can
defkkkon
provide a certain level of privacy in certain threat models. Against copyright enforcement groups for instance.
imgurhelpsmealot
ok so one tip, do not get a vpn provider become the vpn :PPPP
sonOfRa
VPNs do not provide anonymity. If you want anonymity, use Tor.
delpharseven
This is just misleading techno-gibberish.
Utopist
It's a list of 6 vpn services and a basic explanation of vpn benefits. You call that techno-gibberish? Watch "Hackers" w/ Angelina Jolie.
delpharseven
Very first two paragraphs. Okay, I won't call it techno-gibberish. I'll call it FUD. Marketing. Lies.
PantsShittinglyAwesomeUsername
That seems to happen a lot when you try to simplify a highly technical thing. But yeah OP is trying to sell VPN to us, hence the marketing.
pollomagnifico
As someone who works in IT: Yes. Yes it fucking is.
Utopist
There's no internet in the chicken coup even if you're a magnificent chicken.
RetConMan
classic Security Theater
cyberstormtrooper
I'm probably late to the party, but if you click on a malicious link via VPN, you're just downloading malicious code in an encrypted fashion
cyberstormtrooper
That means you are bypassing all perimeter defenses which could detect and provide eventual mitigation of such threats
cyberstormtrooper
You are preventing spying eyes from gazing upon your credit card info as the data flows through the system, which is still good
cyberstormtrooper
But you've put everything in your personal internal environment at risk. Which you do anyway. So yes I agree.
WJke
Step 1: don't favorite this.
b22091
I use PIA, but also consider that it may very well be a NSA/FBI run honeypot.
fayt7
one does not simply mitm when hacking... also i wouldn't use a vpn service by a five eyes country (no uk, us aus or nz) get a Swiss one
EDI1
canada
Quessan
wait... 5 eyes?
LatchHookRug
It's an international intelligence alliance. https://en.wikipedia.org/wiki/Five_Eyes
hungryjoker
comment for later reading
YamiNoKeshin
I can recommend AirVPN
IOnceOwnedMoonMoonButOnceHeTriedToLickMyBallsAndRanAwayIMissHim
Which is the fifth eye?
TheWayADrillWorks
What about the eleventh eye?
98Problems
Ask your girlfriend / tell you when your older.
fudgepuppyorangecake
Canada
MyCatsAreBetterThanYourCats
FUCK YEAH CANADA
TheGhostofElizabethShue
CANADA! http://imgur.com/0FQkUJG
moodytravesty
it's a lot easier to assume it's all insecure, and act accordingly
[deleted]
[deleted]
NolanEmerson
A tor browser is only as secure as its user. Tor doesn't provide anonymity. It simply makes it a bit easier to become anonymous
Polarbit
Doing it right
RobertCarlson
Everybody will be dancing and be
PhotoExplorer
Doing it right
JohnnyTitelips
“You had to live - did live, from habit that became instinct - in the assumption that every sound you made was overheard, and, except (1/2)
JohnnyTitelips
in darkness, every moment scrutinized.” (2/2)
MyFartsMayKillYou
1984?
JohnnyTitelips
ye
slyfox001
I always act insecure.
wherearemytesticles
Why not both?
ComeOnManYouHadOneJobToDo
This makes the most logical sense. This only protects you from home to site. But that doesn't included the sites you visit. 1/2
ComeOnManYouHadOneJobToDo
So this is truly pointless for normal Internet usage, unless all websites are accessed within the sender network. Hence why we have https. 2
[deleted]
[deleted]
ComeOnManYouHadOneJobToDo
I think you did a good job. The VPN only protects the connection between the user and VPN host. This what most businesses use for 1/2
ComeOnManYouHadOneJobToDo
Remote workers. If you use this, you will only be protected from your PC to the host. MIM can still sniff packets between the host and 2/3
teddyz
Guys, you have to explain this to me. Say I'm on free wifi, I use encrypted tunnel to exit through vpn server. How does this not protect 1/2
teddyz
2/2 me from let's say MIM attack or a packet sniffing bad guy? Assuming I am using services of a legit vpn provider
Jasperman62
*unsecured
moodytravesty
see definition 2: "unsafe." ... "able to be broken into or illicitly accessed."
Gutshank
IDK, my browsing history has low self esteem.
hiig
So...why not just use Tor?
MaybeADoctor
Well if you torrent on tor you're a jerk wad.
delpharseven
WTF? Why? The only time a VPN protects you is if you have two networks (can be single nodes) and you need to connect them over the internet.
barnwolf
I think the theory is the VPN provider is harder to MITM than your local internet provider. Pretty sure neither are trivial.
barnwolf
Not to worried about them ratting me out for upvoting posts with boobs on imgur.
barnwolf
And stuff like pages you enter credit cards into online are already encrypted (or should be), so MITM wouldn't even help there.
azazyel
I make sense for my company to use them for remote access but at home I'd have no use for one.
delpharseven
Yep, in that situation they want a worker's network to connect to the main network. Usually best to restrict that remote network a bit, 1/
delpharseven
because who knows what is on the worker's laptop, home computer, etc. 2/2
axen4food
This is exactly right. All your doing us making a "tunnel" from one computer to another and then going to the public Internet from there
Guitarinsane
True, but if you are on the same public wifi as me, I can intercept your communication incredibly simply. VPN keeps it all encrypted past me
axen4food
With a VPN the Packets are encrypted from the point of the equipment hosting the vpn all the way to the client. Then from the client back.
axen4food
So even if your in a coffee shop the client side VPN encrypts before the packet hits the Client NIC.
delpharseven
If you are using an insecure protocol it is just a question of who is going to intercept it, not if.
dunecat1337
I travel a lot and mostly use one for when I'm on unencrypted Wi-Fi, like most hotels. Also good in countries where they block things.
delpharseven
For the former it doesn't help. The unencrypted wifi is no worse than the rest of the 'net if you are using an insecure protocol. For the 1/
delpharseven
latter, be careful. Such countries sometimes have laws against circumventing those blocks in any way. 2/2
dunecat1337
It helps for people just packet sniffing in a hotel, that's super easy to do. And you only have to worry about circumvention laws if you 1/2
barnwolf
Pretty sure VPN traffic sticks out like a sore thump to on their internet providers network logs though.
dunecat1337
Live in that country. They don't care about visiting foreigners, and they's not too much they could do if they did.
LiamIvatt
Thanks, now every 12 year old who threatens to DoS me I'll send them this.m
SJerusalem
Just tell them you're behind five boxies. That'll scare 'em.
BecauseIDontHaveAWittyUsernameYoureSittingThereReadingThis
*Shivering Intensifies*
Polarbit
MS-DOS?
AvtomatKalashnikova47
Don't know if sarcastic but 'DoS = Denial of Service' attack in this context
Menefee
That's only when a girl does it.
MACARLOS
Clever girl +1
MaddogExplosive
I thoroughly enjoyed this.
zeroismynumber
Department Of Science in this case.
LongtimeLurker148
DDoS* (Dee-Doss) you
caunphety
You bully you! Yer justa big ol bully!
GuckFoogle
It's just DoS if the attack originates from a single machine. DDoS *only refers to multiple attackers with a single target machine
LongtimeLurker148
Ahhh...I did not know the difference =D. So wouldn't DDoS still be the practical use? I assume only the best of hackers DoS...
GuckFoogle
A DoS is nearly the exact same thing as a DDoS but with one computer instead of many. DoSing works for small applications and is easier
LongtimeLurker148
Oh ok..that makes more sense. Thank you! Just curious...are you Google certified?
GuckFoogle
DDoS attacks are usually done with botnets that a person pays for and are more for attacking servers than personal computers
whatsimportantmotheristhatwehaveourhealth
incorrect. DoS and DDoS are both vaild terms... one is Denial of Service and one is Distributed Denial of Service.
LongtimeLurker148
Hmm..interesting. I counter with this: are we talking technical or practical? Because wouldn't any hacker, 12 year old or not, want to DDoS?
Ejam0314
As a Cisco certified network associate, can confirm. And thank you.
LongtimeLurker148
with multiple machines?
whatsimportantmotheristhatwehaveourhealth
yep. to my knowledge, DDoS uses a large network of computers to spam a server until it crashes from the excess of packet requests... (2/2)
Rudabaugh
I think thats the "distributed" part, but not totally sure
whatsimportantmotheristhatwehaveourhealth
And (I could be wrong), the network can be (mostly?) anonymous, meaning some machines can be used without their knowledge (1/2)
kristianlyng
As someone who has been paid to legally sniff net traffic: Most of this is hogwash. Public VPN is good for avoiding blocks, nothing else.
MyFartsMayKillYou
Deep packet inspection? Or something like that? Genuinely curious.
kristianlyng
Plain old IDS (snort). Company had 100s of sensors at customer locations to catch potential threats. Full packet capture.
kristianlyng
DPI is very similar to IDS, except it's not just about intrusion, and tends to refer to ASIC-based equipment. Otherwise similar capabilities
originalWFHhipster
If looking to download with privacy and not get piracy lawsuits- avoid all this, and use Tribler for free! Works like a charm.
defkkkon
Mixnetwork routing is slow though. I have 350Mbps full duplex line, so I will stick to newsgroups. Usenet downloaders never get harassed.
originalWFHhipster
Please reveal your secrets on how to do this!
defkkkon
Find a Usenet provider (Tweaknews, NGroups, Supernews are pretty good - Avoid GigaNews) and sign-up for their binary post service (usually
originalWFHhipster
Thanks!
defkkkon
a monthly subscription rate). Install a client like SabNZBd+ or NZBGet. Use sites like NZBIn">ndex.nl">NZBIndex.nl, Binsearch.info, or newznab sites like
defkkkon
">"zbs.or">zbs.org">nzbs.org, nzb.su, oznzb.com to get NZB files (basically .torrent files, metadata locators for files on your usenet providers' server)
Clockworkdancerobot
Not really Anonymous online. Some places are looking to block VPN nodes, and it won't save you against LEO investigation.
scrotumflee
VPN plus Tor is rather safe. Even if they control enough endnodes to figure out that it is a VPN connection, then they would need the record
scrotumflee
Of the VPN hoster. Depending on country (Romania f.e.)us LEO cant do shit
ManlyTears
Whats a LEO investigation?
janedope
What would have happened if he hadn't finally won the Oscar.
Clockworkdancerobot
Law Enforcement Officer. ie: if the police, FBI, or NSA wants records.
KillingTheJoke1
Yes it will. Especially when combined with Tor and a VPN provider who doesn't keep logs
RickC137
Most hosting providers won't allow you to host a VPN service if you don't keep logs. My abuse team checks all of them.
PandaRomez
*Tor, beta app acting weird, as I was saying: Good luck doing anything on Tor with a VPN turned on
PandaRomez
VPN + Toe.
fayt7
and i2p+tor using a os like tails
KillingTheJoke1
Tails is the least important part of the chain. I'd stress the networking part heavily first.
Clockworkdancerobot
TOR has weaknesses, they go after US based TOR exit nodes and add in their own nodes to narrow down source points.
KillingTheJoke1
Just get a VPN provider that starts your connection overseas. Those two technologies combined are well above the protection I need.
Polarbit
Be careful with overseas connections. The country likely doesn't have obligations to keep your info secure, and the US has very little..
OverlySuaveITGuy
PIA the first on the list has connections to dozens of countries to pick from. I use the Netherlands myself usually.
Polarbit
Regulations regarding the interception and collection of foreign data.
dunecat1337
Yeah, if you're a drug kingpin you need to do some more homework, but for lighter, random law breaking you're probably ok.
Clockworkdancerobot
Providers who don't keep logs tend to go out of business. Just ask Lavabit.
RickC137
You are correct. They are usually resellers from larger providers such as AWS, rack space, OVH etc etc that will cut the server.
RickC137
If they find you hosting a free/anonymous VPN service
KillingTheJoke1
Lavabit was a mail service, not a VPN. Private Internet Access claims to not keep logs and they're doing just fine.
Clockworkdancerobot
Yes, but its naive to think they ignore VPN services. They target TOR so much they had Carnegie Melon university research it to break it.
nineteen85
The US government is major finding source for TOR. They are also the ones trying to break in.
KillingTheJoke1
I've yet to see evidence that logless VPN+TOR is totally compromised. You're just generally handwaving without specifics.
Polarbit
We let government spy on us to keep us safe, then pay services to create methods that prevent us being spied on, that those we're being ..
scopegoat
we let? were you asked in your country?
BoomerKeith
They opted in for us, because it's safer that way...with the terrorist and everyone trying to hurt us. (this is % sarcasm)
cip3
Wait! How much % sarcasm was that?? 0% or 100%? That's a big difference of sarcasm!
BoomerKeith
Hahaha. I swear I typed in "100". Man, I bet a lot of people read that and were like "depending on the percentage, he might be right!"
scopegoat
lol, amen brother
Polarbit
'protected from' can also use, which causes us to pay for governments to better be able to crack our protection from them. Smart.
rocker313
Hey friend, any evidence that our gov's have some kind of back door to US hosted VPN's? Something to consider if so..
ozjuggler
Hey non-friend, https://lmddgtfy.net/?q=Was%20the%20Juniper%20backdoor%20mystery%20all%20NSA's%20fault%3F Wired paragraph "The only problem"
PrestigeWorldwideFirstWordInEntertainment
If based in the US than they are subject to US laws. So they can get served a warrant and not have to tell you.
ozjuggler
That's not a backdoor, technically. A warrant from a magistrate is the front door, using the Judiciary to approve the Executive gov action.
NekoMiko06
"gib records" "need warrant sign by judge" "k, gib records" "Lol k" "dis is blank sheet." "ye. is all record we keep."
coolbeanslooseit
What a terrible VPN provider list :/
artemizer
Yup, too true
DoctorOwly
Tunnelbear ftw
afromanex
GRANDMA AND I WILL BE ABLE TO MAKE IT. THE FIRST ONE TO THE VET :)
theodorebeare
Yes but what does it MEAN
afromanex
I HAVE BEEN WORKING WITH YOU AND YOUR FAMILY AND THE 3RD REICH. IF YOU WANT ME TO DO WITH A FEW YEARS AGO. THE FIRST TIME I AM INTERESTED?
IDownVoteSelfies
I'm surprised people still recommend "Hidemyass" these days...
zachzac
They have the biggest database of individual proxy ip's and the widest range of locations. So yeah thats why.
Playaaa
As a newbie, why?
LetumComplexo
Seriously, the last time hidemyass was good was years ago.
rocker313
Recommendations?
LBdubLU
I work for cradlepoint, grass roots company now potential IPO cantidate. Check us out. https://cradlepoint.com/products/cp-secure-vpn
villlllle
F-Secure Freedome, no hassles, simple to use, and it being a Finnish company you avoid many US based risks regarding your privacy.
UnrustleYerJimmies
.
RetConMan
I've been looking at VikingVPN for various reasons, most notably lack of logs and plenty of obfuscation. I mean... no I haven't.
KelluvaKobra
Tunnel bear
wherearemytesticles
ZenMate. Very easy to use.
themoistcake
Thank you for recommendations
Teoh1
.
Seasonic
I use this one https://www.blackvpn.com/
Ewido
Something that lets you pay in Bitcoin, or use pre-paid credit cards. Any that aren't in the US, UK, AUS, NZ or CAN.
coolbeanslooseit
https://www.reddit.com/r/vpn sidebar.
rocker313
Thanks!
IamSecretlyaRobot
.
CarlosDangerZone
.
Playaaa
Thanks.
pajamaparteh
.
prettygnarly
I use PIA, works fabulously for me. What's so "terrible" about it?
PissOnYourLeg
Used it before, capped at 20mbps (I have a 200mbps connection). It also kept forcing me to use PPTP rather then SSTP/L2TP. No good!
coolbeanslooseit
I said list. I use PIA. Although I am switching after my sub runs out as they've gone down in my opinion.
prettygnarly
What would you recommend in that is in that price range and has the simplicity of PIA?
coolbeanslooseit
I'm going over to AirVPN. Better client. Better options. Better servers. PIA has been poor IMO for a while.
PrestigeWorldwideFirstWordInEntertainment
I use it PIA sometimes but it's US based so it has to obey US laws so it isn't the safest option.
OverlySuaveITGuy
You can connect to any of their many non-US based nodes. PIA has been great for me regardless. Netherlands is my usual.
MassiveClusterFuck
Yes they have to obey US laws but they don't keep logs. So the laws really don't matter
Agnwristos
Everyone keeps logs :) https://www.goldenfrog.com/blog/myths-about-vpn-logging-and-anonymity
hashomerachianochi
That's rich coming from GoldenFrog, who do log what you do and forward DMCA requests. I know they're transparent about it, still. Not ideal.
prettygnarly
Even still, I'm not too worried about the government coming after me for torrenting backyard sluts pt.9, just my ISP.
OMyUsernameWhereArtThou
It doesn't matter, if a government wants to know about you, they will found out. I use VPN to hide from copyright trolls when I torrent.