Live data from Hacker News

Privacy and Security Risks of Android VPN Permission-enabled Apps

blog.csiro.au

1–10 of 64 posts

Re: Privacy and Security Risks of Android VPN Permission-enabled Apps

#4
People should NOT trust free VPN services at all, as you don't pay level of service is not guaranteed. What's worse, who knows what the service provide is doing with the data flowing through the tunnels (to)? cover the operational cost (and goal for profits)

Install and configure your own VPN services (IPsec or OpenVPN), use strongSwan (Android native client which works great with RSA authentication with x509 certs, now supports importing VPN profiles in json format, cool) and OpenVPN.

Several past discussions on hacker news to start with:

- https://news.ycombinator.com/item?id=13351211

- https://news.ycombinator.com/item?id=13425728

Re: Privacy and Security Risks of Android VPN Permission-enabled Apps

#5

People should NOT trust free VPN services at all, as you don't pay level of service is not guaranteed. What's worse, who knows what the service provide is doing with the data flowing through the tunnels (to)? cover the operational cost (and goal for profits) Install and configure your own VPN services (IPsec or OpenVPN), use strongSwan (Android native client which works great with RSA authentication with x509 certs,…

What about the new VPN feature built into Opera Browser?

Re: Privacy and Security Risks of Android VPN Permission-enabled Apps

#6
post #5

People should NOT trust free VPN services at all, as you don't pay level of service is not guaranteed. What's worse, who knows what the service provide is doing with the data flowing through the tunnels (to)? cover the operational cost (and goal for profits) Install and configure your own VPN services (IPsec or OpenVPN), use strongSwan (Android native client which works great with RSA authentication with x509 certs,…

What about the new VPN feature built into Opera Browser?

It's not a VPN, it's a proxy. [0]

[0] https://gist.github.com/spaze/558b7c4cd81afa7c857381254ae7bd...

Re: Privacy and Security Risks of Android VPN Permission-enabled Apps

#7

People should NOT trust free VPN services at all, as you don't pay level of service is not guaranteed. What's worse, who knows what the service provide is doing with the data flowing through the tunnels (to)? cover the operational cost (and goal for profits) Install and configure your own VPN services (IPsec or OpenVPN), use strongSwan (Android native client which works great with RSA authentication with x509 certs,…

One side effect of schools blocking websites is students downloading and using free VPN software. They have no money, and it works well enough for "unblocking" websites as far as they're concerned. Rip privacy.

Re: Privacy and Security Risks of Android VPN Permission-enabled Apps

#8

It is no surprise that 'free' VPNs don't work or compromise security. Would be good to see the actual list of VPNs that comply with basic security requirements.

TorrentFreak maintains a list of providers that responded to a questionnaire about anonymity, including one about encryption used: https://torrentfreak.com/vpn-anonymous-review-160220/

Personally, I prefer the "roll your own" approach mentioned above. A VPS from DigitalOcean or something beats most providers' pricing.

Re: Privacy and Security Risks of Android VPN Permission-enabled Apps

#9

People should NOT trust free VPN services at all, as you don't pay level of service is not guaranteed. What's worse, who knows what the service provide is doing with the data flowing through the tunnels (to)? cover the operational cost (and goal for profits) Install and configure your own VPN services (IPsec or OpenVPN), use strongSwan (Android native client which works great with RSA authentication with x509 certs,…

> People should NOT trust free VPN services at all, as you don't pay level of service is not guaranteed.

The corollary is that ones you pay for should not be trusted either: a service can both take your money and insert ads.

huh.... reminds me of pay/cable tv....

Re: Privacy and Security Risks of Android VPN Permission-enabled Apps

#10

It is no surprise that 'free' VPNs don't work or compromise security. Would be good to see the actual list of VPNs that comply with basic security requirements.

There's also " rel="nofollow">https://thatoneprivacysite.net/vpn-comparison-chart/>. And my testing of ~30 VPN services " rel="nofollow">https://vpntesting.info/>.
Post reply on HN