Live data from Hacker News

Ask HN: What VPN service are you currently using?

news.ycombinator.com

111–120 of 344 posts

Re: Ask HN: What VPN service are you currently using?

#111
If you use something like sshuttle, you can use any arbitrary VPS. If you insist on openVPN, however, you can always:

$ sudo apt install openVPN

and run your own VPN instance.

But then again, openVPN requires an excessive amount of configuration, in order to achieve something as menial as a key exchange. The silly thing is that it does not achieve more than what "ssh-copy-id" does, without all the silly ceremonies.

By the way, commercial VPN services also tend to be more expensive than renting your own VPS, which you can nowadays even rent by the hour, if you want to.

In other words, OpenVPN is a service for people who do not know what they are doing. The problem with that is, that their security strategy will ultimately not work either. Paying money to an OpenVPN provider will not make any difference to the problem.

Re: Ask HN: What VPN service are you currently using?

#116
post #37

Earlier quoted context omitted.

On macOS/iOS you can configure the built-in VPN clients to use "on-demand" mode, which wont allow traffic before the VPN connection is established. The only way to configure this however is using the Apple Configurator tool and create a custom profile. I run this for my OpenBSD IKEv2 servers which gives me automatic on-demand VPN on cellular and all non-known Wi-Fi networks (== not home).

Algo (another commenter mentioned it[1]) allows you to set this up to be the default for the VPN, very nice feature. I use it on my phone since I often connect to random wifi APs. More and more of the web is moving to HTTPS but a disturbing amount of unencrypted traffic abounds. [1] https://news.ycombinator.com/item?id=19242119

Yep, Algo uses the same approach. It's generating device configuration profiles with the necessary settings. I'm generating mine in the same way but slightly different to allow toggling Ethernet and to support the OpenIKED ciphers etc.

Re: Ask HN: What VPN service are you currently using?

#118
post #76

Earlier quoted context omitted.

So to me this filters down to: You care about your privacy and not have your (meta) data gathered up, but you don't care enough about it ensure that you're really protected, you just hope you are by piping your data off somewhere else, even though the place you're piping it to might also be doing the dirty you. I do understand your point, which is (correct me if i'm wrong) that you trust FSecure/Freedome to be taking…

I'd say you are grumpy ;) There is no comparison for ISP with TOS saying they can and will sell your data and VPN company which explicitly advertises privacy. First it is false advertising and second with GDPR such company would be wiped out after somebody figures it out.

GDPR seems to have comprehensively failed to "wipe out" Facebook and Google - who're quite obviously similarly in breach...

Re: Ask HN: What VPN service are you currently using?

#120
post #41

The first question you should ask is why you want a VPN. Because I believe many people newer ask this question and have some vague idea about "it somehow improves security and/or privacy". In most situations this likely isn't true. You add an additional attack vector and you centralize your communication to a single point.

100% this. VPN marketing appears to have really gotten to people, everyone's always asking about it. Real reasons I can see to use a VPN service 1) You want your traffic to reliably egress in that country. i.e. I live in New Zealand but to access some Australian TV on demand, I need to "appear" in Australia. 2) Errr, I can't think of any others. If you are really trying to hide your traffic from your ISP: 1) Change I…

Travel is the other use case; if I know I'll be at a backpackers with free (but open) wifi, then having a VPN is very handy.
Post reply on HN