Show HN: Easily connect to a VPN in a country of your choice • Hacker News Board

Re: Show HN: Easily connect to a VPN in a country of your choice

#61

Post by dguido » Fri, Jan 27, 2017, 8:11 PM UTC

mschuster91 wrote: post #36

dguido wrote: post #35

Earlier quoted context omitted.

I already did. Here is how to createa a self-hosted VPN server at a cloud provider of your choice. Don't trust your network traffic to anyone but yourself: https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-th... https://github.com/trailofbits/algo

> Don't trust your network traffic to anyone but yourself You still trust the cloud providers' upstream. In case of UK providers, the GCHQ sniffs upstream and ingress, so they can correlate traffic. Same for DE (BND, MAD) and basically all countries.

Yes, and you also have to trust your home ISPs upstream, and the routers upstream from that, and so on and so forth. Are you trying to say that using a VPN is useless?

Re: Show HN: Easily connect to a VPN in a country of your choice

#62

Post by dgfgfdagasdfgfa » Fri, Jan 27, 2017, 8:33 PM UTC

mrmondo wrote: post #46

dgfgfdagasdfgfa wrote: post #29

Earlier quoted context omitted.

It's only bad if you think it's secure. It's not like a secured wifi is likely to be secure, either.

Most people don't understand whys secure and what's not, remember we live in a society where people generally don't know that connecting to a 'free' wireless network without a password means that all your traffic is completely unencrypted.

Perhaps we should simply encourage people to view their internet as public unless they see that green lock in the URL.

Re: Show HN: Easily connect to a VPN in a country of your choice

#63

Post by mschuster91 » Fri, Jan 27, 2017, 8:49 PM UTC

dguido wrote: post #61

mschuster91 wrote: post #36

Earlier quoted context omitted.

> Don't trust your network traffic to anyone but yourself You still trust the cloud providers' upstream. In case of UK providers, the GCHQ sniffs upstream and ingress, so they can correlate traffic. Same for DE (BND, MAD) and basically all countries.

Yes, and you also have to trust your home ISPs upstream, and the routers upstream from that, and so on and so forth. Are you trying to say that using a VPN is useless?

> Are you trying to say that using a VPN is useless?

No, but you're making your traffic stick out and yourself a target for dragnet surveillance. The constant flow "packet in, other packet out" is easy to pick up for snoops, compared to "just packets out" from your home ISP.