Live data from Hacker News

UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

comparitech.com

71–80 of 240 posts

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#71
post #57

Earlier quoted context omitted.

I can't tell if this is real or not. Do you actually send cash to Sweden?

That is one of they many ways in which you can add money to a Mullvad account. You should try creating an account; it only takes one click.

I just signed up with Surfshark but I'll definitely check out Mullvad.

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#72
post #57

Earlier quoted context omitted.

I also use Mullvad and I pay by sending an anonymous envelope of cash to Sweden with a random number scribbled on a bit of paper. So far all of the cash I’ve sent has been added to my accounts. There’s obviously no way to know whether they follow through on their no-log claim but my sense is they’re pretty trustworthy. At the very least the person who opens their mail is.

I can't tell if this is real or not. Do you actually send cash to Sweden?

It is possible (and yes, I tried it!), although other payment methods are available, including some more conventional methods.

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#73
post #57

Earlier quoted context omitted.

I also use Mullvad and I pay by sending an anonymous envelope of cash to Sweden with a random number scribbled on a bit of paper. So far all of the cash I’ve sent has been added to my accounts. There’s obviously no way to know whether they follow through on their no-log claim but my sense is they’re pretty trustworthy. At the very least the person who opens their mail is.

I can't tell if this is real or not. Do you actually send cash to Sweden?

I do indeed! I’ve sent USD, GBP, and Euros from all over the world - Europe, North Africa, South America, and the US. (I was a “digital nomad” pre-pandemic.) They even give you a one-time-use token for cash payments so you can maintain the anonymity of your account number if the letter is intercepted.

Other than the letter I sent from Morocco, I never included a return address.

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#74
post #51

VPN providers are something you should have especially high standards for. They are largely unregulated, can see all of your meta data and have an economical incentive to sell it (IIRC some big player has been caught doing that). If a provider shows even the slightest amount of fishiness, instantly discard them (NordVPN immediately comes to mind, with their weird influencer marketing campaign).

How? I mean how do you measure VPN services? I never understood why people working in tech would ever trust a VPN service? A VPN is seeing all your traffic, and you have to take their word that they do not log any of it? I use free tier AWS servers across the globe with wireguard. It might not be perfect, but I still prefer that than using a VPN service.

I trust VPN services for the one thing they're good and useful for: hopping over geo-fences for content.

You should not have any expectation of privacy or security from consumer VPN services (if you want that, obtain Tor Browser or Tails as your needs require). They provide a means to choose roughly where your client traffic comes from, and that's it. The rest is marketing bullshit.

They're probably sufficient for low-key deflection of DMCA notices if you're torrenting shit--rightsholder enforcement companies aren't exactly able to undertake nation-state level investigations for what they do.

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#75
post #32

I've come to the sad realization if you want anything approaching no logs, you're going to have to use something slow like tor, or you're going to have to do the illegal thing and make a botnet. VPNs are only useful for avoiding ISP / local network surveillance like comcast, your workplace, your school, airports, etc and to avoid DCMA scare letters. Making your own with a VPS is worse, since VPSs log on some level an…

What about chaining VPNs? Even at 2 they'd have to cooperate to unmask your traffic, right? Somewhere in the back of my mind is stored that minimaxir does this, but I couldn't confirm it with a quick search. Edit: I was actually thinking of mirimir.

>What about chaining VPNs?

You could even do it multiple times, like... 7. You would then be, basically, "behind 7 proxies". /s

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#76
post #32

I've come to the sad realization if you want anything approaching no logs, you're going to have to use something slow like tor, or you're going to have to do the illegal thing and make a botnet. VPNs are only useful for avoiding ISP / local network surveillance like comcast, your workplace, your school, airports, etc and to avoid DCMA scare letters. Making your own with a VPS is worse, since VPSs log on some level an…

What about chaining VPNs? Even at 2 they'd have to cooperate to unmask your traffic, right? Somewhere in the back of my mind is stored that minimaxir does this, but I couldn't confirm it with a quick search. Edit: I was actually thinking of mirimir.

Provider#1 only knows all traffic goes to provider#2. Provider#2 knows everywhere your traffic goes. They don’t know your IP, but you need to login, so they know who you are anyways.

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#78
post #33

Earlier quoted context omitted.

How does that help? If you're the only one with traffic from that IP, how does that give any privacy? Especially if you pay with something tied to your identity. And why does a VPS have any less likelihood of logging your traffic?

> Especially if you pay with something tied to your identity. Then don't do that. Though VPN are not really a strong solution for hiding your identity period. Tor is a more effective tool, but hiding your identity is extremely difficult to do effectively. > And why does a VPS have any less likelihood of logging your traffic? They may be too but at least you should expect their business to be viable without doing that…

>Then don't do that.

You'll be stuck with the shadiest, slowest, most remote VPS in the world if you're unwilling to either give up your personal identity, or lie about it.

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#79
post #51

VPN providers are something you should have especially high standards for. They are largely unregulated, can see all of your meta data and have an economical incentive to sell it (IIRC some big player has been caught doing that). If a provider shows even the slightest amount of fishiness, instantly discard them (NordVPN immediately comes to mind, with their weird influencer marketing campaign).

How? I mean how do you measure VPN services? I never understood why people working in tech would ever trust a VPN service? A VPN is seeing all your traffic, and you have to take their word that they do not log any of it? I use free tier AWS servers across the globe with wireguard. It might not be perfect, but I still prefer that than using a VPN service.

You can chain several unrelated VPN providers.

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#80

Earlier quoted context omitted.

I second Mullvad also. They don't even have usernames, emails or passwords. All you use to log in is a random number for your account. Can't get much more anonymous than that. And they financially sponsor wireguard, have a bunch of wireguard servers. Can't recommend them enough.

I found Mullvad pitifully slow, even with Wireguard.

Mullvad nodes are all over the place for me; same geo-location can provide ~300kb/s down -- a few hours later multiple mb/s.
Post reply on HN