Live data from Hacker News

NordVPN confirms it was hacked

techcrunch.com

421–430 of 666 posts

Re: NordVPN confirms it was hacked

#421

>NordVPN said it found out about the breach a “few months ago,” but the spokesperson said the breach was not disclosed until today because the company wanted to be “100% sure that each component within our infrastructure is secure.” So instead of allowing their customers to do their own damage limitation, they left their customers in the dark and continued to expose them to a breach they weren't sure they had fully c…

i find it surprising that none of the threads in this topic mention the very serious threat this breach might have for users in countries like china. the fact that nordvpn neglected to tell its users for months after the breach quite possibly endangered people's lives. unforgivable.

Re: NordVPN confirms it was hacked

#422
post #28

Earlier quoted context omitted.

This. I can set up and connect to a new OpenVPN instance under my own control in less than seven minutes (5:59 last I clocked) from my phone. Anyone can do this, it’s not nearly as complicated to launch and secure as some would have us believe. ( https://github.com/jenh/sevenminutevpn ) You do lose anonymity with personal VPN, but it all depends on your use case.

But the problem remain the same. Whoever manages the network that hosts your instance will see your traffic...

There are places that rent boxes for XMR if you want a hosting provider who doesn't have your information.

Re: NordVPN confirms it was hacked

#424
post #363
post #348

Earlier quoted context omitted.

I normally don’t mind YouTube ads all that much, and I don’t see them on desktop browsers anyway. However, I was bombarded with ads for NordVPN and their crap made me so angry it pretty much sold me a paid YouTube membership. Hard to relax with some totally not weird ASMR when my blood pressure is through the roof because some chirpy ad agency dude wants to show me how much a VPN is like an umbrella or whatever.

> However, I was bombarded with ads for NordVPN and their crap made me so angry it pretty much sold me a paid YouTube membership. For me it was those incessant Grammarly ads. A service, by the way, that has its own serious security and privacy concerns[0]. (I feel like YouTube Premium ($18/mo for up to 6 people) is a better deal than Spotify Premium ($15/mo for up to 6 people) for a household like mine where we liste…

I'm torn for this reason: I want to avoid ads, but I don't want to give Google any more money. It's unfortunate that YouTube is really the only one of it's kind.

For the moment, I get around this conundrum using a combination of uBlock Origin[0] (Firefox) and NewPipe[1] on Android. Not 100% sure what I'll do about the latter when I switch to iOS.

[0] https://github.com/gorhill/uBlock [1] https://newpipe.schabi.org/

Re: NordVPN confirms it was hacked

#425
post #314

Earlier quoted context omitted.

Within 72 hours According to GDPR I thought? “ The GDPR introduces a duty on all organisations to report certain types of personal data breach to the relevant supervisory authority. You must do this within 72 hours of becoming aware of the breach, where feasible.” https://ico.org.uk/for-organisations/guide-to-data-protectio...

Maybe NordVPN would argue personal data wasn't breached? It's a bad look in any case.

Theis Keys were stolen. All data is exposed now.

Re: NordVPN confirms it was hacked

#426
post #29

Nord (and perhaps others) seem to have been compromised for months/years - lifetime accounts have been available on the DN for significantly cheaper than other VPNs: https://news.ycombinator.com/item?id=20094946 Doesn't seem like a smear - glad this is coming to light.

It's more that their users got hacked.

Re: NordVPN confirms it was hacked

#427

Earlier quoted context omitted.

They don't. What you're describing would take them out of common carrier status and make their business unworkable. What they do is respond to notices from copyright holders. https://arstechnica.com/tech-policy/2011/07/major-isps-agree...

My friend's VPN emailed him saying Comcast asked them for his info because he torrented something and the copyright holder contacted Comcast. The VPN provider didn't give Comcast any info.

Your friend may need a new VPN company. If they were able to identify him then they are probably logging too much information.

Re: NordVPN confirms it was hacked

#428
post #413

Earlier quoted context omitted.

Is VPN advertising increasing due to content restrictions from online streaming services? If you travel overseas, you can't access Netflix, AmazonPrime Video, etc. so a VPN service allows you to still use your service while you're away from home. And then sports streaming. You can sign up for a yearly subscription to watch sports, but not the teams closest to your physical location due to local blackouts. Utah is in…

I've found that using a VPN reduces my streaming ability. Using Private Internet Access in the past I was forbidden from watching anything on Netflix. Also I was forbidden from editing Wikipedia even on an old account with positive editing history.

Netflix (et al) are blacklisting some common VPN's IP ranges. If that fails, they use some DNS tricks to route the requests to your nearest geographical API and if there is a discrepancy between your IP's location and endpoint's location, they block the requests too. It is possible to overcome, but with some work.

Re: NordVPN confirms it was hacked

#429

Earlier quoted context omitted.

That guy was a troll. Many of us have been using youtube-dl extensively every day for years without any trouble.

Why would you think he was a troll? I've had my google account suspended without explanation.

Read the comments. The claimed suspension message was extremely unlikely to be real.

Re: NordVPN confirms it was hacked

#430
post #363

Earlier quoted context omitted.

> However, I was bombarded with ads for NordVPN and their crap made me so angry it pretty much sold me a paid YouTube membership. For me it was those incessant Grammarly ads. A service, by the way, that has its own serious security and privacy concerns[0]. (I feel like YouTube Premium ($18/mo for up to 6 people) is a better deal than Spotify Premium ($15/mo for up to 6 people) for a household like mine where we liste…

I'm torn for this reason: I want to avoid ads, but I don't want to give Google any more money. It's unfortunate that YouTube is really the only one of it's kind. For the moment, I get around this conundrum using a combination of uBlock Origin[0] (Firefox) and NewPipe[1] on Android. Not 100% sure what I'll do about the latter when I switch to iOS. [0] https://github.com/gorhill/uBlock [1] https://newpipe.schabi.org/

I’m on iOS and I just deal with the ads. There’s a lot and I guess it would be more annoying if you were used to no ads, but it’s manageable. I’d pay for a video service if the company didn’t track me, but I’m resistant to paying for services and also being tracked.
Post reply on HN