Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Rejecting data demands, ExpressVPN removes VPN servers in India

expressvpn.com

Post reply on HN
Print view View original

111–116 of 116 posts

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#111

Post by 0daystock »

ImPostingOnHN wrote: post #89
0daystock wrote: post #38

Earlier quoted context omitted.

It depends entirely on the threat model. If three-letter agencies are the adversary, moving logging to RAM is unlikely to be a meaningful deterrent - they probably already have a root shell or direct access to the VM hypervisor. So if it doesn't protect against nation states, whom are we defending against? Another law enforcement agency raiding the server room and taking hard drives? But I thought ExpressVPN doesn't…

the question was, is it better (than running off-disk), rather than "is it good enough for X" the answer is, yes. even an infintesimally smaller attack surface is better than an infinitesimally larger one, all other things being equal

It's not at all better - it's worse, exactly because it gives a false sense of security.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#112

Post by 0daystock »

cloutchaser wrote: post #82
0daystock wrote: post #60

Earlier quoted context omitted.

Your trust is based on baseless promises and one isolated, possibly even manufactured, incident. I find this to be super naive.

You clearly have 0 trust in your life. Might want to work on that.

Mostly only for untrustworthy VPN services that try to make a buck on technologically illiterate audiences.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#113

Post by 0daystock »

dotnet00 wrote: post #66
0daystock wrote: post #60

Earlier quoted context omitted.

Your trust is based on baseless promises and one isolated, possibly even manufactured, incident. I find this to be super naive.

You might as well just treat everything as manufactured then. Even this thread must just be manufactured by Big VPN.

Not an unreasonable thesis in the age of misinformation.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#114

Post by manquer »

Anunayj wrote: post #105
manquer wrote: post #39

Earlier quoted context omitted.

That is also true for Netflix and they do care. Indian monthty subscription is much lower priced and starts ~2$ than U.S. that costs like $20[1] Geolocation is largely a feature in products and in licensing because there is big purchasing power difference between rich and poor countries. Netflix has been more tolerant in the past of region bypass than others for the same reason they didn't crackdown on password shari…

Would getting the cheaper subscription not require the user to have a valid mode of payment that can be attributed to India? I do not understand how credit cards work, but I suppose the company probably can atleast obtain the card holder's country?

They could also easily block known VPN IP ranges (they don't). Netflix generally is not (yet) user unfriendly.

There are myriad ways of buying a subscription, including gift cards, third party tie-ups etc, it won't be easy to implement a fool proof solution which works for all of them, especially without degrading user experience.

It is more likely that problem is not big enough for Netflix that it wasn't worth investing that kind of effort.

Similar to how they are handling password sharing now, it is perhaps possible they will look into this in the future as margins tighten and pressure increases as they keep loosing subscribers to competition.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#115

Post by cloutchaser »

0daystock wrote: post #112
cloutchaser wrote: post #82

Earlier quoted context omitted.

You clearly have 0 trust in your life. Might want to work on that.

Mostly only for untrustworthy VPN services that try to make a buck on technologically illiterate audiences.

Well then maybe look into the practices of your ISP as well. I don’t see why you trust them more.

Re: Rejecting data demands, ExpressVPN removes VPN servers in India

#116

Post by ImPostingOnHN »

0daystock wrote: post #111
ImPostingOnHN wrote: post #89

Earlier quoted context omitted.

the question was, is it better (than running off-disk), rather than "is it good enough for X" the answer is, yes. even an infintesimally smaller attack surface is better than an infinitesimally larger one, all other things being equal

It's not at all better - it's worse, exactly because it gives a false sense of security.

you claim to know it gives you a false sense of security -- this knowledge itself of the possibility allays the concern
Post reply on HN