Live data from Hacker News

Warp – Mobile VPN

blog.cloudflare.com

441–450 of 500 posts

Re: Warp – Mobile VPN

#441

Almost thought this was an April fools joke (the app icon also makes it like more. While it's good to have option for non-technical people who needs to protect their network traffic and privacy, I'd stick to my own DIY WireGuard (now that we've got working client for iOS, Android and macOS, etc., also performs exceptionally well over IPsec - performance, simplicity), strongSwan based IPsec VPN as backup whenever netw…

I couldn't even download it from the AppStore from within China mainland...

Re: Warp – Mobile VPN

#442

The claim that ordinary IPSec-based VPN clients (which typically use the OS kernel's IPSec facilities) "drain your battery" more than any other VPN implementation seems specious to me. Does CloudFlare have any data to support this claim?

Have a link to the statement? I'm using native iOS IKEv2 client and it has not a single issue.

Re: Warp – Mobile VPN

#443
From Cloudflare's privacy policy:

“2. We will never sell your browsing data or use it in any way to target you with advertising data;”

Does this mean they have the right to sell browsing data for other purposes than “to target you with advertising data”?

Even without any personal data, the data generated when using their DNS-service, such as statistics on domain names, can be of great value for e.g. Hedge Funds and SEO-companies wanting to know how big a domain name is based on DNS-request statistics.

My question is therefore: Do they have the right to sell non-personal DNS-request statistics to third parties?

Re: Warp – Mobile VPN

#444
The killer vpn app would be one that guarantees that no user data ever could be collected. All software open source of course. But it would be complemented with some possibility for anyone to do an physical revision on your sites any time.

Re: Warp – Mobile VPN

#445

Earlier quoted context omitted.

Nope. We want you to use our VPN because we think it'll make your mobile Internet experience better (faster and more secure). That turns into an upsell opportunity to us and makes our core service (which people pay us for) more valuable.

Why do you refer to this as a VPN? On my phone my web traffic is being sent direct using this, looks like only DNS queries are sent over the VPN tunnel? Is WARP+ the full VPN ?

We haven't launched Warp yet. What you are seeing is the existing 1.1.1.1 handling just DNS.

Re: Warp – Mobile VPN

#446

Earlier quoted context omitted.

DNSSEC is a standard. We literally adopted and promoted a standard. That is not about your original comment about us trying to take over the Internet or something. And we work hard on the standards-based Internet pushing HTTP/2, IPv6, QUIC, TLS 1.3, ...

Exactly what is this supposed to mean? It's a "standard"? So what? Lots of bad things have been standardized. You have to justify the work on the merits; you can't simply appeal to IETF standardization as intrinsically good. TLS Heartbeat was a standard, and it was not intrinsically good.

This thread was about Cloudflare becoming some proprietary network with its own protocols and doing evil stuff. I was pointing out that when OP said we'd implemented and promoted DNSSEC (and named you) that we were not implementing something we'd invented but a standard.

Re: Warp – Mobile VPN

#447

Earlier quoted context omitted.

That's "I'm Under Attack Mode" which is used by sites (mostly smaller ones) to protect against small DDoS attacks or scrapers.

I'd just like to mention that this service saved me once. I have a small low-end box and one of the sites I hosted (that belonged to a YouTube personality) was DDOS'ed for a while, it kept taking the server down. A combination of crafty server configuration and enabling the "Under Attack" mode helped me deal with it.

Great. Glad to hear it!

Re: Warp – Mobile VPN

#448

Earlier quoted context omitted.

We can argue about the terminology but from the perspective of the company other WireGuard clients (including the official ones) are 'third-party' in the sense that we don't control them. That makes supporting users of those clients more expensive for us (e.g. we currently have a mobile app for Warp, someone calls our support asking for help with a Linux client...)

I know this is the last thing you are worried about right now, but could you at some point look into tasker integration. Its really easy to provide a tasker interface. I would love to be able to control when 1.1.1.1 connected.

I'll tell the team. Thanks for the suggestion.

Re: Warp – Mobile VPN

#449

There goes me and my co-founder's plan of disrupting the Mobile VPN market. Or may be, we still have a chance? Anywho, congratulations Cloudflare! I long held an opinion that the VPN market was ripe for disruption when I looked at privacy policy of some of the top players. Having analysed the market, I find that its defragmented with no clear run-away winner. I hope you're able to make a headway with all the interest…

> 4. Provide ability to analyze traffic on a PC.

This would be such a great feature. I hope someone makes such a VPN.

Re: Warp – Mobile VPN

#450

Earlier quoted context omitted.

We thought about the trust aspect of it (we have gone through numerous VPN related threads here on news.yc and r/privacy and this has been one of the top concerns). Here's how we plan to convince folks (in our own naive way) we mean business (do serveral or all among): 1. OpenSource vpn server and client, with ability to Cloud-SSH to the server and view what's running. 2. Hands-off, one-click, spin up VPN servers on…

Sounds a bit like what Google / Alphabet / Jigsaw are already doing with Outline, but I still think there’s major opportunity there for a transparent and decentralized one-click service. Especially when you add in #4. For some reason, Outline is still mega-targeted at journalists and activists when it could be so much more — it’s been an absolute joy to use so far, and being powered by Shadowsocks certainly doesn’t h…

Thanks. Yes, you're right. Not just Jigsaw (who are excellent, and I've been recommending their DNS app, intra, on news.yc for as long as I can remember), there are multiple other companies in this space (SecureMix, TheGuardianApp, KeepSafe, CopperheadOS, Proton mail/VPN, AdGuard), but not everyone is quite doing what I have in mind related to fighting trackers and censorship with a focus on 'one click and you're done' kind of simplicity (?)

I hope to get something ready to show you guys here on news.yc in may be 3 to 6 months from now.

Post reply on HN