Live data from Hacker News

Why You Should Start Using a VPN

lifehacker.com

111–120 of 133 posts

Re: Why You Should Start Using a VPN

#111
post #21

Just me, or is this very misleading: [..] all of your internet communication is encrypted and secured from eavesdropping. The most important thing you need to know about a VPN: It secures your computer's internet connection to guarantee that all of the data you're sending and receiving is encrypted and secured from prying eyes. Eh.. No? It secures the data from you to the VPN provider. After that, it's just as open a…

^ This. VPN is not a magic bullet. It stops your ISP from snooping and adds another hoop to jump through when tracing you. If the sites you visit (nodes you hit) are monitored you are still at risk.

[Edit] not protected/still at risk.

Re: Why You Should Start Using a VPN

#112
post #105

'VPN' is becoming synonymous with 'anonymous online' but it is far from the truth. for eg. if you use the same web browser in non-VPN sessions as with VPN sessions the cookies being sent are the same and each website just linked your real session with your anon session. It really needs to be VPN, plus separate browser, plus separate browser fingerprint, plus proper failover. But that is much harder to sell/explain to…

Best way to do this is a separate virtual machine.

Re: Why You Should Start Using a VPN

#113
post #6

It's all very well saying a VPN services keep your communications secure, encrypted and away from the prying eyes of your ISP - but why would you trust a VPN provider more than an ISP? These consumer-oriented VPN services marketing to bittorrent users seem kind of sketchy to me.

This is my big problem with wanting to use a VPN. The VPN account is directly tied to you by your payment details. Also most VPN services that claim to "not keep any logs whatsoever" are just a 3 page website with not much information. Maybe that's safer since they are low profile, or maybe it isn't? I honestly have no idea and I wish I did. It feels like your just trusting some random person to not mess with you.

Simple, pay with a prepaid credit card, purchased in cash at a Walgreens or something.

Re: Why You Should Start Using a VPN

#114
post #90

Earlier quoted context omitted.

I setup an own VPN on a dedicated server, payed it prepaid and faked the customer data. This should be really hard to trace back to me.

If your hosting company hasn't saved your access logs for the purchase. Otherwise you just added one step to the process.

Well, they probably log, but maybe you find an open or public wifi to join ;)

Re: Why You Should Start Using a VPN

#117

Shameless plug: I've just spent the last few days figuring out how to correctly configure OpenVPN and pptpd on my Ubuntu servers + Android & OS X clients (it's a real pain in the ass). I'd be happy to install and configure those on your own server(s) for 5 BTC per install (I'm kind of short on money right now :(). If you want to give it a try by yourself, I recommend the following articles (doesn't seem that complica…

It should be noted that PPTP does have some serious vulnerabilities ( http://en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protoc... ) and should probably be avoided if security is your primary concern.

In particular, note that MS-CHAPv2 with PPTP only provide 56-bit security.

Re: Why You Should Start Using a VPN

#118
post #74

Earlier quoted context omitted.

I did a bit of searching and it seems a few different mobile carriers are doing this with the 1.2.3.0/24 range, but the important thing is they should not be doing it at all. It would break the Internet if everyone just used whatever address they felt like using.

Well if they are doing a mixed private/public net then it wouldn't be like the addresses are routable outside of their network. I've seen a number of clients which were essentially 'natted' behind the ISPs infrastructure. At its core the ISP gets all packets landing at their router and if they want to advertise an 'inside' route to 1.2.3.4 (or 10.0.0.1) that is something they could do successfully.

Yep, you're right; a net with mixed public/private addresses can certainly work well when done correctly. Unfortunately, it can also seem to work for some period of time when done incorrectly. The trouble is, most people don't grasp the ramifications of doing it wrong. I'm sure you understand the ramifications at least as well as I do, and probably a whole lot better, but for the sake of everyone else in the room...

When a network/ISP misuses unallocated address space by routing the traffic to something internal, this prevents the inside of the network/ISP from reaching those addresses normally. Unallocated address space can be allocated by the RIR's at any time, so misuse of unallocated address space results in parts of the Internet unreachable.

If some huge networks/ISP's (Comcast, Verizon, Sprint, ...) decided to misuse the address block allocated to you for some internal purpose, you'd be rightfully upset since it would prevent all users of those ISP's from reaching your service/servers. Now let's assume you're a new company and just got a new allocation of addresses from the RIR only to find out the users of major ISP's can't reach your service because the ISP's have already misused your address block for something internal on their networks. Yep, you'd be livid, and livid with good reason.

If you put a lot of work into your misuse of unallocated address space, all that effort could turn out to be wasted a few hours later when the block you misused gets allocated. To reach the newly allocated block, you'd need to redo all that work over again, correctly.

Re: Why You Should Start Using a VPN

#119

Earlier quoted context omitted.

What are the commands you use? I personally think 'ssh -D 8081 host1', 'ssh -D 8082 host2', 'ssh -D 8083 host3' and configuring each browser for each port might be simpler, but maybe it's the learning curve of a new command throwing me off.

sudo sshuttle 0/0 --dns -H -r user@server:port

What do the -H and the -l options do? I've read the docs, but I still don't understand what/when they would be used for.

Re: Why You Should Start Using a VPN

#120
post #96
post #64

Earlier quoted context omitted.

Sounds like you have never tried. Buying bitcoins anonymously is very difficult due to money laundering laws. Spending them anonymously is not "simple" either. Your best bet would be to mine them yourself and then pay over a public wifi with a throw-away laptop. But really, cash in an envelope is less error-prone. Just don't leave your DNA-sample on it.

I use it daily. - I mine - you can buy them to your name, and then after a few transfers/transactions it would take the collaboration of an army of disparate users worldwide to determine where did the coins come from - #bitcoin-otc in freenode Although I do agree that's not easy to grasp for outsiders. It takes some time to get familiar with the best options. There's no way in hell they can connect your id with your…

> you can buy them to your name, and then after a few transfers/transactions it would take the collaboration of an army of disparate users worldwide to determine where did the coins come from

Sounds exactly like money laundering to me, even if there isn't malicious intent. I'm genuinely surprised the government hasn't done much to try killing off bitcoin, even with it being (relatively speaking) a tiny fringe movement.

Post reply on HN