Live data from Hacker News

Rejecting data demands, ExpressVPN removes VPN servers in India

expressvpn.com

81–90 of 116 posts

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#82

Earlier quoted context omitted.

Their entire business model is premised on the fact that they don't. If they ever were found to be, their hundred million dollar businesses (expressvpn) would vanish. When express has their servers seized in turkey, there was no usable data on them. I know you are super paranoid, but that still doesn't make my point wrong, or using a VPN wrong. Again, if you trust a vpn more than your ISP, that's pretty legitimate in…

Your trust is based on baseless promises and one isolated, possibly even manufactured, incident. I find this to be super naive.

You clearly have 0 trust in your life. Might want to work on that.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#83

Earlier quoted context omitted.

> at this moment in time yup. So was The Great Suspender. This is why privacy is a one-way circuit breaker kind of system. Once you give your privacy away, you can never assume anything about how your data is used. No matter the entity, you simply cannot trust that they will hold your data secure and use it in your best interests. Even Apple, hell even Signal, has leaky bits and "side channels" that can, and you must…

Sidechannels in Signal is news to me. Can you provide some keywords to search for, or any links?

The contact discovery services leaks the fact that you are using Signal. It is not optional. It's clear why that is, so I won't spell it out.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#84

Earlier quoted context omitted.

I assume all VPN providers as honeypots by default, until they are proven otherwise.

How could one prove otherwise? (Assuming you can't send in a 5 Eyes team to audit them, haven't hacked their management network, etc.)

But what does proof even mean? They can pass any audit you throw at them, and then immediately switch to being bad actors.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#85
post #62

Earlier quoted context omitted.

What makes you think a more expensive ISP will go against their interests and refuse to maximize their profits by selling access to information that they are legally allowed to share? Are there expensive "privacy"-branded ISPs I'm not aware of?

I don't live in the US, but here's a link from eff: https://www.eff.org/deeplinks/2017/03/small-isps-oppose-cong...

That doesn’t mean anything. It’s the same with Apple pretending to care about privacy right now while it is a competitive advantage.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#86

Earlier quoted context omitted.

I don't live in the US, but here's a link from eff: https://www.eff.org/deeplinks/2017/03/small-isps-oppose-cong...

That doesn’t mean anything. It’s the same with Apple pretending to care about privacy right now while it is a competitive advantage.

Yes, you are right and I'm wrong.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#87
Suppose a GoI website is geo-blocked such that only the citizens of India can access it.

Now that a global vpn company has removed its servers out of India, does it mean its customers (while using that vpn service) is blocked from accessing the said website?

Or is there some other implication here?

Curious to know.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#88
post #14

> With virtual locations, the registered IP address matches the country you have chosen to connect to, while the server is physically located in another country. How does this work then? How can you have a Indian IP address, while the server is located in the UK?

ExpressVPN does this a lot for their "European" servers. If you ping them it ends up in the UK (as far as I can tell), even for their countries like Serbia and Montenegro

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#89

Earlier quoted context omitted.

I don't mean to assume it's true to validate their advertising. For the sake of argument, if a server uses only a RAM disk, is that an improvement over having disks? Of course a network can still have sneaky equipment in between but that is still possible without RAM disks, so is it not beneficial to have a RAM disk? Please note that I am not arguing in favor of their advertising or to say that it is successfully avo…

It depends entirely on the threat model. If three-letter agencies are the adversary, moving logging to RAM is unlikely to be a meaningful deterrent - they probably already have a root shell or direct access to the VM hypervisor. So if it doesn't protect against nation states, whom are we defending against? Another law enforcement agency raiding the server room and taking hard drives? But I thought ExpressVPN doesn't…

the question was, is it better (than running off-disk), rather than "is it good enough for X"

the answer is, yes. even an infintesimally smaller attack surface is better than an infinitesimally larger one, all other things being equal

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#90
post #63

Earlier quoted context omitted.

Realistically, these things are mainly used to pirate and break the ToS of various websites ("Netflix from other countries", "buy games at cheaper rates"). With ISPs in some countries selling their customers' browsing data to advertisers, I don't think these shady VPN companies are much worse than not using them for a shockingly large amount of people. Mullvad seems to come out pretty clean whenever these shady VPN p…

I use VPN services because my ISPs routing has a strange habit of going the wrong way around the globe and making mystery detours through the US. Picking a good point in-between helps to get on less congested paths.

I had this problem trying to do online gaming on Frontier. Their routing was both atrocious and mysterious. Using a VPN to get off their network ASAP made games playable.
Post reply on HN