Live data from Hacker News

Rejecting data demands, ExpressVPN removes VPN servers in India

expressvpn.com

41–50 of 116 posts

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#41
post #30

ExpressVPN now belongs to Kape Technologies, which has a colorful history: https://www.cnet.com/tech/services-and-software/what-is-kape... https://www.reuters.com/technology/kape-technologies-buys-ex...

If you want a decent sized paid VPN service, you are basically choosing between Nord and Kape now. Pepsi and Coca cola.

Mullvad?

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#42
post #34
post #29

Earlier quoted context omitted.

They must control ranges of "indian" IP addresses but announce BGP routes for them in Singapore and the UK. GeoIP says India, BGP takes you somewhere else. Easy peasy

not true -- your prefix location is a BGP tag which is appended based on where you're physically connected (which T1 carriers will do). Obviously you can get around it with an overlay network but you'll need some trivial PoP in India.

Nah this is all just fake whois entries announced elsewhere. Has no connection to IN outside of that.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#43

Earlier quoted context omitted.

I agree a VPN won't help against a three letter agency. But it will help against an ISP, who has a legal right to sell your browsing data in the US. This is one of the use cases for why you might want a VPN, if you trust a VPN company more than your ISP. A VPN is just paying for putting your trust in a VPN brand rather than an ISP brand. I don't see why that's such an offensive business to so many HN users.

> I don't see why that's such an offensive business to so many HN users. Because the assertion VPNs - apparently unlike every other ISP - do not log or monetize your data is simply laughable, especially as so many are based in third-world countries, set up by shell entities and have almost no accountability for any of their claims.

Their entire business model is premised on the fact that they don't. If they ever were found to be, their hundred million dollar businesses (expressvpn) would vanish.

When express has their servers seized in turkey, there was no usable data on them.

I know you are super paranoid, but that still doesn't make my point wrong, or using a VPN wrong. Again, if you trust a vpn more than your ISP, that's pretty legitimate in many countries.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#44

Earlier quoted context omitted.

If you want a decent sized paid VPN service, you are basically choosing between Nord and Kape now. Pepsi and Coca cola.

Mullvad?

"decent sized"

Lots of small coke companies exist too, to use my analogy again.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#46
post #3

Wonder whether the government of India makes any demarcation between corporate VPN or personal VPNs? Or is it just consumer VPN services that need to comply. Everything from cloud vendors, ZScaler, Cisco AnyConnect are technically offering access to private networks with a mix of public internet &/or intranet

Usually such laws target consumer VPNs but I don't have more insights on this specific case

Here's the specific order: https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04....

Bottom of page 3 says:

> Data Centres, Virtual Private Server (VPS) providers, Cloud Service providers and Virtual Private Network Service (VPN Service) providers, shall be required to register the following accurate information which must be maintained by them for a period of 5 years or longer duration as mandated by the law after any cancellation or withdrawal of the registration as the case may be:

> a. Validated names of subscribers/customers hiring the services

> b. Period of hire including dates

> c. IPs allotted to / being used by the members

> d. Email address and IP address and time stamp used at the time of registration / on-boarding

> e. Purpose for hiring services

> f. Validated address and contact numbers

> g. Ownership pattern of the subscribers / customers hiring services

Seems to me like it would target all of them. But I just searched for "VPN", didn't read the full document yet.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#47
post #14

> With virtual locations, the registered IP address matches the country you have chosen to connect to, while the server is physically located in another country. How does this work then? How can you have a Indian IP address, while the server is located in the UK?

How does Geo-location from IP work anyway? From my knowledge it's just figuring out the ISP the IP-block is assigned to, and finding out the address of the ISP. But technically a computer anywhere in the world can have any IP? Or since I don't know anything about routing: are there routing rules that would think "This is an Indian IP, I'm going to forward this data towards India"?

Cross reference with billing address? Your ISP knows where you live, and what IP you have. Do you trust them not to sell that data?

Any delivery of anything on your phone at least goes to a nearby cell tower but probably exits on your IP from your wifi, and has your address as a requirement. Seems very easy.

Uber Eats, Doordash, etc all know the address of your ip as a requirement to perform their services.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#48
post #42
post #34

Earlier quoted context omitted.

not true -- your prefix location is a BGP tag which is appended based on where you're physically connected (which T1 carriers will do). Obviously you can get around it with an overlay network but you'll need some trivial PoP in India.

Nah this is all just fake whois entries announced elsewhere. Has no connection to IN outside of that.

interesting that they're having so much success with false RIPE/ARIN entries. Proper geolocation (as in with visiblity of most T1s) would trivially identify the origin of traffic.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#49
post #30

ExpressVPN now belongs to Kape Technologies, which has a colorful history: https://www.cnet.com/tech/services-and-software/what-is-kape... https://www.reuters.com/technology/kape-technologies-buys-ex...

I assume all VPN providers as honeypots by default, until they are proven otherwise.
Post reply on HN