21–30 of 65 posts
Earlier quoted context omitted.
This phrase refers to stuff free as in free beer.
And Whisper Systems, TOR, tox are free as in free beer. What's your point?
received email with password in plaintext after registration
So if you change it immediately to something more secure, and it might not be a security risk after all.
Earlier quoted context omitted.
This phrase refers to stuff free as in free beer.
And Whisper Systems, TOR, tox are free as in free beer. What's your point?
Tor is a service but by reading the source code, you can see (if you understand the code) that nothing monetizable leaves your computer.
I don't have as much confidence in Tox just because it hasn't been around as long (and I haven't read the source).
Free product, free support, no logs. They're either lying or trying to turn this into a freemium product at some point in the future. Everything else just seems unlikely. Furthermore, their domain is protected by WhoisGuard (Panama). If they (the people involved, not the servers) were sitting in Sweden this would be unnecessary (compare IPredator). The IP address behind the website points to the same Swedish datacent…
Free is a con.
If you want a cheap VPN that you control (and that's faster than Tor), set up an endpoint on something that takes Bitcoin payment and pay with Bitcoins obtained via an anonymous route. This list might be helpful.
received email with password in plaintext after registration
Not sure if it's relevant here, but I want to point out that just because you received it in plaintext doesn't mean they store it in plaintext. So if you change it immediately to something more secure, and it might not be a security risk after all.
And on top of all that, sending it plaintext via email, itself a largely open format, means they've broadcast it to all kinds of other potentially bad actors.
Plus it indicates (to me) a questionable grasp of security, not a great sign for a VPN provider.
Its just wrong.
Shouldn't that be "back to you"? Not back too you.
Earlier quoted context omitted.
Not sure if it's relevant here, but I want to point out that just because you received it in plaintext doesn't mean they store it in plaintext. So if you change it immediately to something more secure, and it might not be a security risk after all.
That isn't the point, if they can send it in plaintext then they have it in a recoverable form. They shouldn't be storing your password at all . They should be storing a hash of your password. And on top of all that, sending it plaintext via email, itself a largely open format, means they've broadcast it to all kinds of other potentially bad actors. Plus it indicates (to me) a questionable grasp of security, not a gr…
Free product, free support, no logs. They're either lying or trying to turn this into a freemium product at some point in the future. Everything else just seems unlikely. Furthermore, their domain is protected by WhoisGuard (Panama). If they (the people involved, not the servers) were sitting in Sweden this would be unnecessary (compare IPredator). The IP address behind the website points to the same Swedish datacent…
I can't tell you how happy I am to see this as the top comment. Free is a con. If you want a cheap VPN that you control (and that's faster than Tor), set up an endpoint on something that takes Bitcoin payment and pay with Bitcoins obtained via an anonymous route. This list might be helpful. https://www.exoticvps.com
I wrote a script to spin up a new instance when I need it, and to terminate it when I don't. It should cost less than $10/mo, and I only pay for what I use.
received email with password in plaintext after registration
Not sure if it's relevant here, but I want to point out that just because you received it in plaintext doesn't mean they store it in plaintext. So if you change it immediately to something more secure, and it might not be a security risk after all.
It'd be acceptable if it was a random password generated for email-auth reasons. Not acceptable if you're setting the password.