Earlier quoted context omitted.
Because it's easy to change a VPN provider if you don't like their actions, but most of us are stuck with an ISP and have no control over what they do with our data?
What exactly can they be doing with your data other than selling a list of which DNS queries you make and which IP addresses you connect to? (Which the VPN provider can also do.)
NordVPN confirms it was hacked
81–90 of 666 posts
Re: NordVPN confirms it was hacked
#82It's odd that NordVPN, VikingVPN and Torguard all got their private keys leaked here. - Did the hackers use an SSH or a VPN service vulnerability? - Or maybe even a previously unknown vulnerability? - Was SSH access firewalled? If not, why? - Do they still have root access?
Good reminder to set up FDE and not give your host logins for your servers. Unexpected reboots are rare enough that they're worth switching hosts over.
Re: NordVPN confirms it was hacked
#83Earlier quoted context omitted.
It seems a bit strange to me that you'd want to hide your movie pirating from your ISP but are happy for your VPN provider to know about it.
Any (large?) ISP will report your torrenting and/or terminate your internet usage if you torrent anything they deem copyrightable. Both Comcast and Spectrum do this, at least. Edit, to add: No VPNs do this.
counter-example: https://forum.goldenfrog.com/t/no-longer-feeling-private-aft...
Re: NordVPN confirms it was hacked
#84Earlier quoted context omitted.
I'm currently sitting on a plane. gogo wifi can read all my email if they so chose (and pass to a government). I'll use a VPN.
Any major email provider at this point should have SSL enabled when you check your email.
Re: NordVPN confirms it was hacked
#85Someone is probably going to ask what other HN users recommend as an alternative. Personally, I use Private Internet Access because they're the only provider I've found with a track record of demonstrably not being able to turn your records over to someone asking for them [1]. [1] https://torrentfreak.com/private-internet-access-no-logging-...
Re: NordVPN confirms it was hacked
#86NordVPN just posted this a few minutes ago: https://nordvpn.com/blog/official-response-datacenter-breach...
Re: NordVPN confirms it was hacked
#87Earlier quoted context omitted.
It seems a bit strange to me that you'd want to hide your movie pirating from your ISP but are happy for your VPN provider to know about it.
Any (large?) ISP will report your torrenting and/or terminate your internet usage if you torrent anything they deem copyrightable. Both Comcast and Spectrum do this, at least. Edit, to add: No VPNs do this.
https://arstechnica.com/tech-policy/2011/07/major-isps-agree...
Re: NordVPN confirms it was hacked
#88Earlier quoted context omitted.
I can use a VPN provider outside the jurisdiction of my own country.
If you're doing something illegal in your own country, that seems like a good idea. If you're not, that would seem to achieve nothing other than making it much more difficult to enforce any action against the VPN provider for selling your private data.
I don't even live in a country were I have to fear much at all from malicious authorities, but they wouldn't even blink before trading privacy for perceived security.
I might change my opinion if there were actual consequences for sharing user data. I believe it when I see it.
Otherwise I just like privacy, information is power and I don't like to share with the state.
Re: NordVPN confirms it was hacked
#89Earlier quoted context omitted.
I am surprised why isn’t anyone suggesting Cloudflare’s Warp VPN? Genuinely curious what is the difference. I guess Clodflare one is only for mobile?
Cloudflare's Warp is not an anonymising VPN as far as I know. It is just a way to speed up Internet speeds, especially in poorly connected areas. They make no effort to hide the origin IP. So it is not in the same class as other VPN providers.
Re: NordVPN confirms it was hacked
#90If you care less about the pseudo-anonymous-but-not-really shared-IP aspect of using a VPN, and care more about the this-lan-is-sketchy use case, I have had good experiences with Algo [0]. You can just paste in an API key and spin up your own VPN on something like DigitalOcean. And it uses WireGuard! [0] https://github.com/trailofbits/algo
This. I can set up and connect to a new OpenVPN instance under my own control in less than seven minutes (5:59 last I clocked) from my phone. Anyone can do this, it’s not nearly as complicated to launch and secure as some would have us believe. ( https://github.com/jenh/sevenminutevpn ) You do lose anonymity with personal VPN, but it all depends on your use case.