191–200 of 260 posts
Earlier quoted context omitted.
Thank you for saving me the typing. No it's not gonna make you an invisible unhackable ghost, but at least I don't have to worry about my ISP screwing me over.
Why are you worried about your ISP tracking you but not the VPN company? In effect you've simply added another ISP on top.
Earlier quoted context omitted.
VPNs were always meant to carry internal traffic to a private network, not the public internet (hence the name Virtual Private Network). The fact that a VPN server can send you a route for 0.0.0.0/0 always was and always will be a happy accident.
> VPNs were always meant to carry internal traffic to a private network, not the public internet This. And the idea that these so called ‘VPN’ services somehow improve your security and privacy on the internet is laughable. All they do is let you get onto the public, untrusted, internet through a different on-ramp. There is no point to them. The internet is just as untrustworthy through a VPN service as it is through…
A VPN solves this, and does protect your privacy, so your comment is just needless hyperbole.
Earlier quoted context omitted.
VPNs were always meant to carry internal traffic to a private network, not the public internet (hence the name Virtual Private Network). The fact that a VPN server can send you a route for 0.0.0.0/0 always was and always will be a happy accident.
> VPNs were always meant to carry internal traffic to a private network, not the public internet This. And the idea that these so called ‘VPN’ services somehow improve your security and privacy on the internet is laughable. All they do is let you get onto the public, untrusted, internet through a different on-ramp. There is no point to them. The internet is just as untrustworthy through a VPN service as it is through…
I was developing VPN client for one of the popular VPN provider in the past for iOS and the solution was quite simple - enable on-demand VPN for 0.0.0.0/0 In this case, iOS will always wait until connection to VPN is established before sending any packets out. Without on-demand, VPN may leak. If I remember correctly, leaks occurred mostly after waking from sleep but before the tunnel had chance to be set up. Or in si…
Earlier quoted context omitted.
Huh So HTTPS doesn't really stop tracking, it only prevents people from snooping on what data you are sending to and receiving from the website
I use CloudFlare's 1.1.1.1 DNS to mitigate my ISP tracking the domains I visit. They have an iPhone app too. I don't know enough about the space to say whether it's 100% effective.
But then in practice for ESNI to be effective one needs for the site to use CDN or similar solutions to ensure that there are a lot of sites for the given IP.
I think the analysis has some good points, but the author is lacking a bit of networking skills, so I’m not sure how trustworthy this can be. Two yellow flags: * vpn gateway address can be different from public vpn exit address. What is the surprising part? * I don’t know what pings your “uncloaked” public ip address, but still, when using a vpn, you’re using your own ip address to connect to the gateway. So, there’s…
I think Apple is transparent about Always on VPN (blocking traffic except over the tunnel) requiring provisioning using MDM tools. Apple Configurator is free and allows anyone to set this up. Any other VPN is just best effort. https://support.apple.com/guide/deployment/vpn-overview-depa...
That Apple documents that 'normal' VPNs are broken on iOS doesn't change the fact that they're broken.
I think the analysis has some good points, but the author is lacking a bit of networking skills, so I’m not sure how trustworthy this can be. Two yellow flags: * vpn gateway address can be different from public vpn exit address. What is the surprising part? * I don’t know what pings your “uncloaked” public ip address, but still, when using a vpn, you’re using your own ip address to connect to the gateway. So, there’s…
> If you trust such a device for total anonymity, you’re doing it wrong from the start. I think it greatly depends on your threat level and who you're hiding from.
Earlier quoted context omitted.
> You just replaced ISP tracking with VPN tracking. Yeah, that's the point. People have infinitely more choices for VPN providers than for ISPs. The VPN provider could be in another country. You can even run your own VPN on hosted infra.
> You can even run your own VPN on hosted infra. This comes with its own risks and you lose some advantages of a commercial service, such as being "lost among the crowd" of other VPN users.
Earlier quoted context omitted.
> You can even run your own VPN on hosted infra True. But we know very few people do that
So now you trust the infra hoster AND their own ISP.