Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

comparitech.com

Post reply on HN
Print view View original

81–90 of 240 posts

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#81

Post by olyjohn »

dboat wrote: post #53
llsf wrote: post #51

Earlier quoted context omitted.

How? I mean how do you measure VPN services? I never understood why people working in tech would ever trust a VPN service? A VPN is seeing all your traffic, and you have to take their word that they do not log any of it? I use free tier AWS servers across the globe with wireguard. It might not be perfect, but I still prefer that than using a VPN service.

Won't amazon cancel them when they keep getting copyright letters? Or do vpns have some other use I am not aware of.

I use a VPN to keep Comcast from logging and selling my data to third parties. The client is always on and running on my PC.

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#82

Post by boogies »

chmod775 wrote: post #77

This was necessarily going to happen at some point and I hope it serves as a cautionary tale to not blindly trust "no logs" claims.

This isn't the first time VPNs with those claims have turned out to have them, they've been used as court evidence IIRC.

Edit: https://proprivacy.com/privacy-news/no-logs-ipvanish-hands-l...

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#83

Post by bitxbitxbitcoin »

Causality1 wrote: post #62
llsf wrote: post #51

Earlier quoted context omitted.

How? I mean how do you measure VPN services? I never understood why people working in tech would ever trust a VPN service? A VPN is seeing all your traffic, and you have to take their word that they do not log any of it? I use free tier AWS servers across the globe with wireguard. It might not be perfect, but I still prefer that than using a VPN service.

The only standard you can really trust is when they actually get subpoenaed and don't have anything to give to the court. An example of this is Private Internet Access.

Piggybacking off of this, Private Internet Access (PIA) has actually had their no logging policy "proven in court" via this method multiple times. [1][2]

Full disclosure: I work at PIA.

[1]https://torrentfreak.com/vpn-providers-no-logging-claims-tes...

[2]https://torrentfreak.com/private-internet-access-no-logging-...

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#84

Post by ramraj07 »

fivre wrote: post #74
llsf wrote: post #51

Earlier quoted context omitted.

How? I mean how do you measure VPN services? I never understood why people working in tech would ever trust a VPN service? A VPN is seeing all your traffic, and you have to take their word that they do not log any of it? I use free tier AWS servers across the globe with wireguard. It might not be perfect, but I still prefer that than using a VPN service.

I trust VPN services for the one thing they're good and useful for: hopping over geo-fences for content. You should not have any expectation of privacy or security from consumer VPN services (if you want that, obtain Tor Browser or Tails as your needs require). They provide a means to choose roughly where your client traffic comes from, and that's it. The rest is marketing bullshit. They're probably sufficient for lo…

Why would I assure myself that Tor is safe either? Do we know for a fact that government agencies don't control the majority of the egress points?

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#85

Post by pbhjpbhj »

Causality1 wrote: post #62
llsf wrote: post #51

Earlier quoted context omitted.

How? I mean how do you measure VPN services? I never understood why people working in tech would ever trust a VPN service? A VPN is seeing all your traffic, and you have to take their word that they do not log any of it? I use free tier AWS servers across the globe with wireguard. It might not be perfect, but I still prefer that than using a VPN service.

The only standard you can really trust is when they actually get subpoenaed and don't have anything to give to the court. An example of this is Private Internet Access.

So a VPN provider needs to do something to get a police investigation, prove they're clean (not logging) and you're good to go.

Unless ... could be First for Business Internet VPN services ... ;o)

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#86

Post by banana_giraffe »

p1esk wrote: post #79
llsf wrote: post #51

Earlier quoted context omitted.

How? I mean how do you measure VPN services? I never understood why people working in tech would ever trust a VPN service? A VPN is seeing all your traffic, and you have to take their word that they do not log any of it? I use free tier AWS servers across the globe with wireguard. It might not be perfect, but I still prefer that than using a VPN service.

You can chain several unrelated VPN providers.

Wouldn't that just put all the trust in the last one in the chain?

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#88

Post by pbhjpbhj »

bitxbitxbitcoin wrote: post #83
Causality1 wrote: post #62

Earlier quoted context omitted.

The only standard you can really trust is when they actually get subpoenaed and don't have anything to give to the court. An example of this is Private Internet Access.

Piggybacking off of this, Private Internet Access (PIA) has actually had their no logging policy "proven in court" via this method multiple times. [1][2] Full disclosure: I work at PIA. [1] https://torrentfreak.com/vpn-providers-no-logging-claims-tes... [2] https://torrentfreak.com/private-internet-access-no-logging-...

Is there any way to prove that is not NSA, say, and set up to only catch the biggest fish, or to always present parallel construction for criminals caught this way?

Re: UFO VPN claims zero-logs policy, leaks 20M user logs [resolved]

#89

Post by bdcravens »

pbhjpbhj wrote: post #88
bitxbitxbitcoin wrote: post #83

Earlier quoted context omitted.

Piggybacking off of this, Private Internet Access (PIA) has actually had their no logging policy "proven in court" via this method multiple times. [1][2] Full disclosure: I work at PIA. [1] https://torrentfreak.com/vpn-providers-no-logging-claims-tes... [2] https://torrentfreak.com/private-internet-access-no-logging-...

Is there any way to prove that is not NSA, say, and set up to only catch the biggest fish, or to always present parallel construction for criminals caught this way?

Of course you can't prove that, any more than you can't prove that YCombinator or FastMail aren't similar NSA operatives.
Post reply on HN