31–40 of 41 posts
> We currently offer Mozilla VPN in Austria, Belgium, Canada, Finland, France, Germany, Ireland, Italy, Malaysia, the Netherlands, New Zealand, Singapore, Spain, Sweden, Switzerland, the UK, and the US. This list really needs to expand a lot more, and quicker. Mozilla is “literally” leaving money in the table by not serving many other countries. The market size may not be as big, but there is the Mozilla brand name r…
When the topic of VPN comes up, there are often posts which criticize the use of a VPN for the use case of privacy. These posts are often absolutist in nature and fail to address specific threat models. Of course a VPN isn't going to protect your privacy from state level actors - I doubt that it is possible anyway. Why I use a VPN: 1. I don't want many of the sites I browse to know my IP. 2. My US ISP corrupted my go…
Earlier quoted context omitted.
All of this can be achieved through a person VPN rather than a commercial subscription one by ssh -D whateverPort user@ip_address and setting up a SOCKS proxy in Firefox on that same port. >there are often posts which criticize the use of a VPN Often they specifically critique the likes of NordVPN etc. The off the shelf solutions rather than personally setup VPNs. What disgusts me is that they charge fees that are mu…
A basic droplet is $5 this is $7 dollars plus it gives you email relay. If you already have a droplet unused sure but otherwise being able to change ip in different countries adds some additional value for 2 dollars more.
When the topic of VPN comes up, there are often posts which criticize the use of a VPN for the use case of privacy. These posts are often absolutist in nature and fail to address specific threat models. Of course a VPN isn't going to protect your privacy from state level actors - I doubt that it is possible anyway. Why I use a VPN: 1. I don't want many of the sites I browse to know my IP. 2. My US ISP corrupted my go…
When the topic of VPN comes up, there are often posts which criticize the use of a VPN for the use case of privacy. These posts are often absolutist in nature and fail to address specific threat models. Of course a VPN isn't going to protect your privacy from state level actors - I doubt that it is possible anyway. Why I use a VPN: 1. I don't want many of the sites I browse to know my IP. 2. My US ISP corrupted my go…
The one and only thing a VPN does is that it switches your IP to another. It has absolutely nothing to do with privacy or security. An IP-address is just a single metric among hundreds that are used on the web to track users. IPs are also typically not equal to a user. It is common that an IP is a set of users and IPs often change when it comes to consumer ISPs. VPN makes sense in TCP-scenarios like Bittorrent but fo…
If you use any currently standard protocol such as wireguard, openvpn, IPSEC with Suite-B ciphers you are getting 'enhanced-privacy'* from eavesdroppers on your local network, which eliminates alot of low-tier/easy MiTM attacks.
A two-layer/double tunnel is pretty-good for mitigating against most commercial data collection by eavesdroppers. (Though your tunnel-exit/last-VPN-hop, (varying by client-destination protocol), and the destination IPs/sites will still be able to collect data of course).
*Consider privacy a vector. Suite-B ciphers are not perfect, letalone their freely-available implementations.
It'd be interesting if Mozilla offered a iCloud-like solution. Obviously, they wouldn't have the tight integration compared to Apple on mobile or desktop. They'd also need a really compelling use case that Apple can't offer.
If you compete with iCloud and Google you'll always be a niche player. But I think if a brand name like Mozilla would offer a standards based "internet suite" (think: mail and notes over IMAP, file cloud over WebDAV, calendars and todo's over CalDAV, VPN over WireGuard etc. so basically your online stuff without the proprietary device-locked walled garden implementation) it could become at least a sustainable busines…
Earlier quoted context omitted.
> mullvad is an average vpn provider I was under the impression that mullvad was best-in-breed. A lot of bad VPN companies running around these days and Mullvad is a clear HN favorite.
Mullvad UX is pretty sweet - I especially like how they don't force signups, and still let you open ports. I wish there was a premium tier to let you pay for more bandwidth though, the fact that down speeds are capped at 300MBPS and up speeds much less made it not really usable for me
When the topic of VPN comes up, there are often posts which criticize the use of a VPN for the use case of privacy. These posts are often absolutist in nature and fail to address specific threat models. Of course a VPN isn't going to protect your privacy from state level actors - I doubt that it is possible anyway. Why I use a VPN: 1. I don't want many of the sites I browse to know my IP. 2. My US ISP corrupted my go…
I use paid VPN services a lot as well as cloudflare warp. I understand and accept the risks the anti-vpn crowd keeps repeating. In the US, your local ISP and like you pointed out sites that sell and mine info about you are much higher risk of compromising your privacy or posing a security risk.
My traffic enters hostile network territory once it is delivered to my ISP router or the remote end of a VPN tunnel. Take NordVPN for example, I don't use them but it is more difficult but still possible for law enforcement or surveillance/ad companies to coerce or collude with Nord than with site owners and ISPs. TLS metadata including timestamp, SNI and other details along with my IP are known to Nord. To my ISP, they know my current location, usually social security number , birthday and whatever info their router can gather is known to them. Sites I visit without a VPN have my IP user-agent and whatever they collect with JS. A VPN removes the IP collection by sites and traffic sniffing by ISPs that can and do sell to whoever can pay them a fee.
VPN providers pause a significantly reduced risk than ISPs and they reduce risk from sites you visit. If you research a VPN provider and pick ones that have the most to lose by working against your interest, you reduce the risk even further.
Setting up a VPS and maintaining is a hard dealbreaker for me since I don't have the time and even if I did there is a shit-tom of more productive things I would rather do. But even if that is the case, which VPS provider should I trust more than a VPN provider? Digitalocean or cloud providers?
You know, few months ago I needed to setup a VPS fast, I must have tried 5+ including DO amd OVH. They needed to collect my email, some of them were picky about what card I used, others like DO wanted my phone to be valid, it was crazy! Only one weird vps provider let me but they didn't provision it after waiting a while. OVH wanted more info back and forth eventually after a few days supposedly they let me have a VPS but I no longer needed it after wasting money at so many places. Whether for anti-abuse reasons or anti-privacy VPS providers these days are hostile, they need too much info from you so how can you trust them with all your traffic?
Mullvad, PIA and Proton along with many others let you sign up with cash or giftcards and you can use a fake name/address. The only info they have TLS sni/metadata and your IP. They purposely get the least amount of identifying information from you.
I said cargo-culting because the people that oppose VPNs had some setup work for them and they think that and only that is ideal.
I see extremely talented security folk say that and similar cargo-culting on other subjects like how you shouldn't have an AV/EDR or just use only mac and Linux if you want to be secure lol.
When the topic of VPN comes up, there are often posts which criticize the use of a VPN for the use case of privacy. These posts are often absolutist in nature and fail to address specific threat models. Of course a VPN isn't going to protect your privacy from state level actors - I doubt that it is possible anyway. Why I use a VPN: 1. I don't want many of the sites I browse to know my IP. 2. My US ISP corrupted my go…
All of this can be achieved through a person VPN rather than a commercial subscription one by ssh -D whateverPort user@ip_address and setting up a SOCKS proxy in Firefox on that same port. >there are often posts which criticize the use of a VPN Often they specifically critique the likes of NordVPN etc. The off the shelf solutions rather than personally setup VPNs. What disgusts me is that they charge fees that are mu…
You don't have to even use it, but every dollar of revenue that Mozilla can attribute to their privacy products and services means one less dollar is needed from their hostage deal with Google.
For VPN, I'm already paying for Mullvad, not sure this bundling helps me. Curious to see if it takes off.