Live data from Hacker News

Rejecting data demands, ExpressVPN removes VPN servers in India

expressvpn.com

11–20 of 116 posts

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#11

> Rest assured, our users will still be able to connect to VPN servers that will give them Indian IP addresses and allow them to access the internet as if they were located in India. These “virtual” India servers will instead be physically located in Singapore and the UK. Wondering why anyone is still using ip-based geolocation. The most popular use for VPN's is mocking your location to Steam and Netflix. Could be th…

Cat and mouse game seem to be nowhere near its end. And totally agree, businesses will happily play it forever.

Why geo ip? Naivety/ignorance coupled with the outdated business logic that segmenting audiences to skim customers to the max will continue to be the winning strategy. It rarely come from within IT brainstorming, those in denial or sticking to short sighted green are the business strategists also being vaguely sold that controlling can be done (and to some degree yes it can be so long as consumers bases don't in their majority adopt privacy measures and moan when being unlegitimately denied access) On the more forgiving side, it does help easily monitor kiddy attacks altogether, if there is no market in Takjistan, why bother looking at false vs true positives coming from there, dumb scripts are dumb but can still be costly for the network management team.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#12

What if you spin up a VPS based in India and install OpenVPN/Wireguard on it? Surely they can’t demand logs of a box you operate yourself?

Do you really think you operate the VPS host box in a foreign country? And you really think a foreign government doesn't have sovereignty over their own soil?

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#13

What if you spin up a VPS based in India and install OpenVPN/Wireguard on it? Surely they can’t demand logs of a box you operate yourself?

Do you really think you operate the VPS host box in a foreign country? And you really think a foreign government doesn't have sovereignty over their own soil?

[deleted]

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#14
> With virtual locations, the registered IP address matches the country you have chosen to connect to, while the server is physically located in another country.

How does this work then? How can you have a Indian IP address, while the server is located in the UK?

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#15
post #6

What if you spin up a VPS based in India and install OpenVPN/Wireguard on it? Surely they can’t demand logs of a box you operate yourself?

What makes you think you can operate in a country without obeying its laws, however detrimental to privacy they are ?

> With a recent data law introduced in India requiring all VPN providers to store user information for at least five years

By not being a VPN provider? A private VPN isn't hard to make.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#16

> Rest assured, our users will still be able to connect to VPN servers that will give them Indian IP addresses and allow them to access the internet as if they were located in India. These “virtual” India servers will instead be physically located in Singapore and the UK. Wondering why anyone is still using ip-based geolocation. The most popular use for VPN's is mocking your location to Steam and Netflix. Could be th…

It seems pretty clear to me at least for the Netflix case.

- Content providers care because they want to sell exclusive per-region licenses.

- Netflix doesn't really care, in fact the may benefit from more content available to their users.

The end result is that Netflix will do the bare minimum to keep the content providers satisfied.

Steam is more of a concern because they have different prices per region. But IIRC they use your billing address, not your IP location which is harder to spoof.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#17
post #14

> With virtual locations, the registered IP address matches the country you have chosen to connect to, while the server is physically located in another country. How does this work then? How can you have a Indian IP address, while the server is located in the UK?

Fake WHOIS records, you can typically populate anything there. Some geolocation providers blindly trust the values that you put in there (for example, Maxmind); others do triangulation based on trace routes and ping times to deduce if the advertised location is actually correct (ipinfo, DB-IP).

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#18
post #14

> With virtual locations, the registered IP address matches the country you have chosen to connect to, while the server is physically located in another country. How does this work then? How can you have a Indian IP address, while the server is located in the UK?

How does Geo-location from IP work anyway? From my knowledge it's just figuring out the ISP the IP-block is assigned to, and finding out the address of the ISP. But technically a computer anywhere in the world can have any IP? Or since I don't know anything about routing: are there routing rules that would think "This is an Indian IP, I'm going to forward this data towards India"?

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#19

What if you spin up a VPS based in India and install OpenVPN/Wireguard on it? Surely they can’t demand logs of a box you operate yourself?

The law that they’re talking about also mandates cloud and server providers to maintain IP allocation histories and validate customer identities by way of KYCs.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#20
post #14

> With virtual locations, the registered IP address matches the country you have chosen to connect to, while the server is physically located in another country. How does this work then? How can you have a Indian IP address, while the server is located in the UK?

How does Geo-location from IP work anyway? From my knowledge it's just figuring out the ISP the IP-block is assigned to, and finding out the address of the ISP. But technically a computer anywhere in the world can have any IP? Or since I don't know anything about routing: are there routing rules that would think "This is an Indian IP, I'm going to forward this data towards India"?

Any computer can't have any IP, but the routing rules have nothing to do with physical location. Routers advertise to their neighbors the IP block(s) that they serve.

As a super high level example, your ISP's core router would advertise to other ISP's routers that it serves 10.123.x.x IPs, so any IP address in that block gets sent to that router. Then within your ISP, the router in your area would advertise that it serves 10.123.45.x, so it receives packets for IPs in that more specific block from the core router. So your IP would have to be within the 10.123.45.x block, because that's what the router serving you is assigned.

Post reply on HN