Live data from Hacker News

Rejecting data demands, ExpressVPN removes VPN servers in India

expressvpn.com

71–80 of 116 posts

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#71

Wonder whether the government of India makes any demarcation between corporate VPN or personal VPNs? Or is it just consumer VPN services that need to comply. Everything from cloud vendors, ZScaler, Cisco AnyConnect are technically offering access to private networks with a mix of public internet &/or intranet

After much hullabaloo from the industry, government has clarified that this order does not apply to corporate VPNs.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#72
post #70

Earlier quoted context omitted.

If you want a decent sized paid VPN service, you are basically choosing between Nord and Kape now. Pepsi and Coca cola.

What are the thoughts on PIA? I've used them for years without issue, but I'm sure they're harvesting my data. lol

They're owned by Kape. I switched to Proton once my 3-year plan ended.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#73

What if you spin up a VPS based in India and install OpenVPN/Wireguard on it? Surely they can’t demand logs of a box you operate yourself?

The law includes data request for owner and IP of VPSes too. So maybe no logs but the IP address and the VPS will be tied to your real identity anyway so no improvement

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#74
I use a VPN service specifically to get around region locking. ExpressVPN has been pretty good in this regard though lately Netflix has stopped working.

When I'm in a hotel or otherwise need to use a local wifi I use the VPN client to connect back to one of my own machines, not that I care a lot if Kape can see my traffic.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#75

> Rest assured, our users will still be able to connect to VPN servers that will give them Indian IP addresses and allow them to access the internet as if they were located in India. These “virtual” India servers will instead be physically located in Singapore and the UK. Wondering why anyone is still using ip-based geolocation. The most popular use for VPN's is mocking your location to Steam and Netflix. Could be th…

> Wondering why anyone is still using ip-based geolocation

I don't think there's a reasonable alternative. If you ask users for their location they can just lie, if you use the JS geolocation API they can trivially deny or spoof it. If you base it on billing address you're locking out people who are traveling, which seems unwanted (especially for long-term travel).

So instead they end up playing a cat and mouse game to try to block VPNs.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#76
post #70

Earlier quoted context omitted.

If you want a decent sized paid VPN service, you are basically choosing between Nord and Kape now. Pepsi and Coca cola.

What are the thoughts on PIA? I've used them for years without issue, but I'm sure they're harvesting my data. lol

PIA has proven in court multiple times that they don't log. Everyone in this post worrying about Kape is probably not using their vpns for anything illegal in their jurisdiction, and are just obsessed with "privacy"

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#77

Earlier quoted context omitted.

I assume all VPN providers as honeypots by default, until they are proven otherwise.

Realistically, these things are mainly used to pirate and break the ToS of various websites ("Netflix from other countries", "buy games at cheaper rates"). With ISPs in some countries selling their customers' browsing data to advertisers, I don't think these shady VPN companies are much worse than not using them for a shockingly large amount of people. Mullvad seems to come out pretty clean whenever these shady VPN p…

I see these posts, and my gut feeling is that Mullvad is probably fairly trustworthy at this moment in time, but the more word of their service spreads the more likely I would assume it is that they get approached by the type of government representatives you don’t say no to.

(I.e. I assume success to be a death knell for a service like this.)

I’m not a customer, but I’ve considered it from a privacy perspective (in that I could just route general browsing through it to block a layer of data harvesting). The problem is that I don’t know what authority they have to push back if pushed by the right actor (who inevitably will knock on the door at some point).

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#78
post #48
post #42

Earlier quoted context omitted.

Nah this is all just fake whois entries announced elsewhere. Has no connection to IN outside of that.

interesting that they're having so much success with false RIPE/ARIN entries. Proper geolocation (as in with visiblity of most T1s) would trivially identify the origin of traffic.

There is less success than you would expect, but it's mostly just there to tick a box, not really used much.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#79

Earlier quoted context omitted.

Realistically, these things are mainly used to pirate and break the ToS of various websites ("Netflix from other countries", "buy games at cheaper rates"). With ISPs in some countries selling their customers' browsing data to advertisers, I don't think these shady VPN companies are much worse than not using them for a shockingly large amount of people. Mullvad seems to come out pretty clean whenever these shady VPN p…

I see these posts, and my gut feeling is that Mullvad is probably fairly trustworthy at this moment in time, but the more word of their service spreads the more likely I would assume it is that they get approached by the type of government representatives you don’t say no to. (I.e. I assume success to be a death knell for a service like this.) I’m not a customer, but I’ve considered it from a privacy perspective (in…

> at this moment in time

yup. So was The Great Suspender.

This is why privacy is a one-way circuit breaker kind of system. Once you give your privacy away, you can never assume anything about how your data is used. No matter the entity, you simply cannot trust that they will hold your data secure and use it in your best interests. Even Apple, hell even Signal, has leaky bits and "side channels" that can, and you must assume will, be subverted.

VPN services are well off the mark in terms of privacy protection. That the ~~marketing~~ propaganda is so focused on the opposite is an abomination.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#80

Earlier quoted context omitted.

I see these posts, and my gut feeling is that Mullvad is probably fairly trustworthy at this moment in time, but the more word of their service spreads the more likely I would assume it is that they get approached by the type of government representatives you don’t say no to. (I.e. I assume success to be a death knell for a service like this.) I’m not a customer, but I’ve considered it from a privacy perspective (in…

> at this moment in time yup. So was The Great Suspender. This is why privacy is a one-way circuit breaker kind of system. Once you give your privacy away, you can never assume anything about how your data is used. No matter the entity, you simply cannot trust that they will hold your data secure and use it in your best interests. Even Apple, hell even Signal, has leaky bits and "side channels" that can, and you must…

Sidechannels in Signal is news to me. Can you provide some keywords to search for, or any links?
Post reply on HN