Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

Post by chez17 » Tue, Jun 02, 2015, 2:15 PM UTC

bargl wrote: post #26

So this is interesting to me because lately, I've been looking for a VPN that would work for my little brother who is trying to make it to the point that he can stream full time on Twitch. The problem is that he has been targeted by script kiddies, who found his IP address through Skype. Shame on you skype. That said, I've been looking for a good VPN for him. It seems that ProXpn isn't as solid as I thought it was be…

Post by psykovsky » Tue, Jun 02, 2015, 2:22 PM UTC

ChrisArgyle wrote: post #22

BoppreH wrote: post #4

Selling user's bandwidth is shady, but consistent with VPN usage (i.e. traffic routing). You can present it as "hey, that's our actual business model, we just forgot to tell you guys" and maybe get away with it. But this: Hola [...] installs its own code-signing certificate on the user’s system. Hola contains a built-in console (“zconsole”) that is not only constantly active but also has powerful functions including…

I suppose the lesson here is don't use "free" services until you fully understand the provider's business model.

Post by rev_bird » Tue, Jun 02, 2015, 2:28 PM UTC

chimeracoder wrote: post #32

madeofpalk wrote: post #28

Earlier quoted context omitted.

> This is Lenovo/Superfish all over again. Completely different. Superfish, I'm willing to believe, was just incompetence/indifference. If Hola really is installing a backdoor with high privileges, then that's deliberate malice.

> Superfish, I'm willing to believe, was just incompetence/indifference. If Hola really is installing a backdoor with high privileges, then that's deliberate malice. But that's what Superfish was as well. Why are you willing to give Superfish a free pass on doing the same thing?

Post by pyre » Tue, Jun 02, 2015, 2:32 PM UTC

soylentcola wrote: post #18

joshstrange wrote: post #13

I have zero connection to this company but if you are looking for a reliable, fast, unlimited VPN I would check out Private Internet Access ( https://www.privateinternetaccess.com/ ) I've got a number of friends who use this and I've been using it for a little over a month and have nothing but good things to say. At $40/yr it's well worth it IMHO and provides a native VPN client, PPTP, and Socks5 (They have mobile ap…

I recently bought a year for around $35 with some coupon code or other and honestly...I'm a bit underwhelmed. No matter what settings I use or what node I connect to, my ~100mbps (down) cable connection drops to somewhere between 1-10mbps. I was originally going to set up OpenVPN on my router so everything would go through it but I heard it can tax router hardware and lead to slower speeds so I figured I'd just test…

Post by pyre » Tue, Jun 02, 2015, 2:35 PM UTC

anonycount wrote: post #23

revelation wrote: post #7

Earlier quoted context omitted.

Downloading copyrighted content is the least of worries here, that is mostly a private matter. But there is a very real risk that if someone accesses child pornography and other content using Hola and your internet connection that you will wake up to police searching your home.

This is a far more real risk than you might think, I'm currently on the tail end of a police investigation triggered by a device on my home network accessing child porn via Tor. My current theory is that something got added to a botnet and used as a proxy, but I'm not eager to leave things running to find out. While the police have been incredibly professional about this, its been a truly horrible process. Anything i…