Live data from Hacker News

Mozilla VPN

blog.mozilla.org

111–120 of 531 posts

Re: Mozilla VPN

#111
Every time someone mentions a VPN provider in my techie social circles, the "A VPN doesn't protect you" crowd piles in, usually with links to something like: https://gist.github.com/joepie91/5a9909939e6ce7d09e29

I don't understand this argument, but would like to.

I run https://everytwoyears.org, a political non-profit focused on ending the warrantless metadata collection of U.S. citizens' communications. From everything I know about these programs, they are _explicitly_ not collecting content of communications. These programs only collect the metadata about a communication. As citizens, we don't get to have a clear definition of "metadata" (that is classified!) but we can assume anything that isn't the message itself is at risk of being considered metadata, especially if it was shared with a service provider in the normal course of conducting business (i.e. routing a request).

For HTTP requests, I assume the body of the request would require a warrant before it can be persisted on a government server. The HTTP headers, if unencrypted, _might_ be considered metadata but I would be surprised. The IPV4 headers are more than likely metadata. DNS queries are more than likely metadata.

If you are trying to avoid _active_ surveillance, where your government has a warrant, a VPN isn't going to help you. If you are trying to avoid _active_ surveillance where your adversary doesn't need/want a warrant to search you, a VPN isn't going to help you. But if you are trying to avoid having your internet activity ending up, de-anonymized, in a metadata database that your government does bulk analysis on, a VPN does seem like it would help. It seems like it would help a lot.

Re: Mozilla VPN

#112
Please take notes from Mullvad and give some basic transparency about the data centers and whether the servers are rented or owned and etc. Stuff like that goes a long way for people who are genuinely serious about privacy.

Re: Mozilla VPN

#113
post #86

I am surprised at how much money exists in the VPN industry. Whenever I watch even a mildly-popular YouTube video, it always has an advertisement for the latest VPN provider. As far as I can tell, there is only one reason there is this much money in the field -- to subscribe to US-based video streaming services from outside the US. But they never ever say that that's the reason, they always say things like "work from…

They must massively oversubscribe their services, far beyond ISPs. The advertising probably brings in a lot of profitable users who aren't pushing tons of BitTorrent traffic as well. With the insanely high affiliate commission they're offering I can't think of another way.

The conspiratorial side of me says that they have alternate revenue streams as well. Why should only google get that sweet cash from a steady stream of user data?

Re: Mozilla VPN

#114
post #36

Earlier quoted context omitted.

Are DMCA letters still a thing? It seems like Torrenting died out significantly over the last 5 years.

I moved to Germany and apparently they're still very much a thing here. Torrenting popular shows sans VPN is -- at least according to Germans on reddit -- an easy way to get sued, and forced to pay hundreds of euros. Obviously, I have no interest in testing this out myself, so I take their word for it.

I lived in Germany for years, and this is absolutely the case. Don’t mess with torrents in Germany without a VPN.

Except for those Linux ISOs, of course.

Re: Mozilla VPN

#115
I won't be switching to this. I've been paying €4.99 monthly for Blokada VPN on Android. It's pretty reliable and offers ad blocking as well. Also supports up to 5 devices.

Re: Mozilla VPN

#116
post #37

Earlier quoted context omitted.

I use ProtonVPN. Same company as ProtonMail. Highly reputable with a business model around doing privacy and encryption well.

IMHO ProtonVPN (and Mail) are the perfect honeypots

I call that bullshit until you have a single proof for that.

Everything is opensource, the data s are located in Switzerland on there own hardware. They have open communication and a yearly transparency report:

https://protonmail.com/blog/transparency-report/

Re: Mozilla VPN

#117
post #29
post #22

Earlier quoted context omitted.

Ask yourself why you want a VPN. Is it to avoid your ISP collecting browsing data off you and selling it? Perhaps using 8.8.8.8 or 1.1.1.1 as your DNS might be good enough. Is it to watch geo region blocked videos? Then pretty much any service will work for you. Except that video streaming sites have caught on and blocked hosting provider IP blocks. So that might require you to shop around. Do you want the most priva…

>Want to do something illegal? Don't expect a VPN to save you. I'm not condoning piracy, but VPNs are generally a foolproof way to avoid DMCA letters from your ISP. Privacy means something different to every individual, everyone's threat model is different. And many models can benefit from a VPN; journalists, activists, and many others might find benefit from using a VPN.

I used to work at an ISP, and once a month I would stuff envelopes with DMCA letters. I can assure you, that the only thing your ISP is doing with this letters is laughing at whatever porn you downloaded. They're just a scare tactic, and if you get one, you can almost certainly ignore it.

Re: Mozilla VPN

#118
post #91
post #37

Earlier quoted context omitted.

IMHO ProtonVPN (and Mail) are the perfect honeypots

ProtonVPN provides the source code for their desktop and mobile clients in their GitHub organization [1]. Yes open source != safe; however this level of transparency is at least a step in the right direction. They also have regularly been audited by independent organizations that are openly available for the public to see their compliance [2][3][4][5][6]. Do you have any evidence to suggest that they are honeypots? […

And how do you know if what they built is exactly what's in that source?

Re: Mozilla VPN

#119

What good is a VPN if you have to reveal all of your personally identifiable information to the vendor? You're better off using Mullvad directly--it looks like they don't require you to fork over personal information to use their service. Shameless plug: SatoshiVPN ( https://satoshivpn.com ) gives you access to your own private and anonymous VPN server with Outline pre-installed, no questions asked. Payments in Bitco…

Can you comment on the pricing? Am I understanding correctly that 1 year of your VPN service costs $195 USD?

Re: Mozilla VPN

#120
post #22
post #15

Every single time I start researching VPN services I end up more confused and with more questions than before because basically every vouched service has the same amount of negative comments too. Like feels like the whole sector is a honeypot (lol) of shady stuff and also they figthing against each other (or not?). So I just wait until when turns out Mullvad is also one of the bad guys.

Ask yourself why you want a VPN. Is it to avoid your ISP collecting browsing data off you and selling it? Perhaps using 8.8.8.8 or 1.1.1.1 as your DNS might be good enough. Is it to watch geo region blocked videos? Then pretty much any service will work for you. Except that video streaming sites have caught on and blocked hosting provider IP blocks. So that might require you to shop around. Do you want the most priva…

As long as you don’t use encrypted DNS (e.g. DoH) it doesn’t matter which DNS server you use - the ISP sees your requests and the replies, and the sees you accessing the returned IP within 10 seconds.

Also, unless it’s behind Cloudflare. Most nontrivial sites today have a unique IP so even with DoH there’s a good probability any specific site will be identified.

If you want your ISP to stay ignorant of where you surf, you MUsT have a VPN.

Post reply on HN