Live data from Hacker News

Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

torrentfreak.com

71–80 of 83 posts

Re: Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

#71
post #27

Earlier quoted context omitted.

The Chrome store still is hosting Hola: https://chrome.google.com/webstore/detail/hola-better-intern...

I wonder what caused the surge of all those 5-stars positive reviews within the last 24 hours....

It's almost like they had a giant network they could use for fake reviews.

Re: Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

#72

Earlier quoted context omitted.

I recently bought a year for around $35 with some coupon code or other and honestly...I'm a bit underwhelmed. No matter what settings I use or what node I connect to, my ~100mbps (down) cable connection drops to somewhere between 1-10mbps. I was originally going to set up OpenVPN on my router so everything would go through it but I heard it can tax router hardware and lead to slower speeds so I figured I'd just test…

I have a 50Mbps connection and don't actively notice the speed drop but speed tests (which are not that reliable and I didn't do enough tests to really confirm) show about a 10Mbps difference (slower on VPN). My phone connection is never anywhere near that fast so I really don't notice it there. I'm sure that fast home connections will have more issues (as in being slower) but I'm willing to take the hit (as long as…

Yeah, I expected some latency and lower bandwidth due to the extra hops and their capacity but going from 100 to 5 is a bit much.

I'm still guessing it's either something I need to set up differently or it's Comcast somehow throttling it but I've tried both TCP and UDP set to auto and to each of the other choices they give you. I've tried connecting to the closest server and to others. And if I do the speedtests on their site (testing the speed of their connections) they seem to be as fast as you would expect.

Just not quite sure what to try next. I'm only out $35 and on the rare occasions where I really need to use it (occasional TV show torrenting), I have no complaints about longer waits since I'm not paying for them. At this point it's mostly just bugging me that I haven't found a solution.

Re: Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

#73
post #37

Earlier quoted context omitted.

I recently bought a year for around $35 with some coupon code or other and honestly...I'm a bit underwhelmed. No matter what settings I use or what node I connect to, my ~100mbps (down) cable connection drops to somewhere between 1-10mbps. I was originally going to set up OpenVPN on my router so everything would go through it but I heard it can tax router hardware and lead to slower speeds so I figured I'd just test…

One possibility is that your ISP is throttling encrypted connections. It's something that seems easy enough to test.

Yeah, I've considered that. Outside of choosing different ports or switching from TCPUDP or vice versa, is there really any way to address this?

Re: Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

#75
post #4

Selling user's bandwidth is shady, but consistent with VPN usage (i.e. traffic routing). You can present it as "hey, that's our actual business model, we just forgot to tell you guys" and maybe get away with it. But this: Hola [...] installs its own code-signing certificate on the user’s system. Hola contains a built-in console (“zconsole”) that is not only constantly active but also has powerful functions including…

I suppose the lesson here is don't use "free" services until you fully understand the provider's business model.

Maybe the lesson is when the sign says "Free Pork"(Bandwidth) ask where it came from?

Re: Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

#76

I have zero connection to this company but if you are looking for a reliable, fast, unlimited VPN I would check out Private Internet Access ( https://www.privateinternetaccess.com/ ) I've got a number of friends who use this and I've been using it for a little over a month and have nothing but good things to say. At $40/yr it's well worth it IMHO and provides a native VPN client, PPTP, and Socks5 (They have mobile ap…

I recently bought a year for around $35 with some coupon code or other and honestly...I'm a bit underwhelmed. No matter what settings I use or what node I connect to, my ~100mbps (down) cable connection drops to somewhere between 1-10mbps. I was originally going to set up OpenVPN on my router so everything would go through it but I heard it can tax router hardware and lead to slower speeds so I figured I'd just test…

Same. I have been a customer for almost two years now, but recently the UK servers have been so slow I can't even stream iPlayer in HD anymore. I contacted their customer service about the issue a few months ago and they said they were aware of capacity issues, but it's only gotten worse. It seems users have also realised and quickly moved from London > Southampton server and overwhelmed that one also (which always served me well when London was slow).

Re: Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

#77

Earlier quoted context omitted.

I have a 50Mbps connection and don't actively notice the speed drop but speed tests (which are not that reliable and I didn't do enough tests to really confirm) show about a 10Mbps difference (slower on VPN). My phone connection is never anywhere near that fast so I really don't notice it there. I'm sure that fast home connections will have more issues (as in being slower) but I'm willing to take the hit (as long as…

Yeah, I expected some latency and lower bandwidth due to the extra hops and their capacity but going from 100 to 5 is a bit much. I'm still guessing it's either something I need to set up differently or it's Comcast somehow throttling it but I've tried both TCP and UDP set to auto and to each of the other choices they give you. I've tried connecting to the closest server and to others. And if I do the speedtests on t…

Yeah, 100->5 is terrible. I'm on Time Warner (not sure how much that matters but wanted to throw out a data point at a minimum) and 50->40 is fine for most things. I'd be interested to try downloading from usenet and see what speeds you get (to see if encrypted connections are being throttled) as I regularly can get 5.0-6.5MBps (Notice capital "B").

Re: Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

#78
post #26

So this is interesting to me because lately, I've been looking for a VPN that would work for my little brother who is trying to make it to the point that he can stream full time on Twitch. The problem is that he has been targeted by script kiddies, who found his IP address through Skype. Shame on you skype. That said, I've been looking for a good VPN for him. It seems that ProXpn isn't as solid as I thought it was be…

>The problem is that he has been targeted by script kiddies, who found his IP address through Skype. Shame on you skype.

So if Skype relays through servers, they get flak for spying, but if they use P2P it's their fault for giving his IP out? The Skype options have a choice for exposing it. "Allow direct connections to contacts only". Make sure it's checked, and don't add bad actors to Skype.

Re: Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

#79

I have zero connection to this company but if you are looking for a reliable, fast, unlimited VPN I would check out Private Internet Access ( https://www.privateinternetaccess.com/ ) I've got a number of friends who use this and I've been using it for a little over a month and have nothing but good things to say. At $40/yr it's well worth it IMHO and provides a native VPN client, PPTP, and Socks5 (They have mobile ap…

I recently bought a year for around $35 with some coupon code or other and honestly...I'm a bit underwhelmed. No matter what settings I use or what node I connect to, my ~100mbps (down) cable connection drops to somewhere between 1-10mbps. I was originally going to set up OpenVPN on my router so everything would go through it but I heard it can tax router hardware and lead to slower speeds so I figured I'd just test…

Hmm, depending on the exit, on my 100/25mbps connection I tend to get about 30/10 from PIA. It isn't perfect, but it's an acceptable tradeoff for me, and I don't run all my machines through it all the time

Re: Hola VPN Already Exploited by “Bad Guys”, Security Firm Says

#80
post #54

Earlier quoted context omitted.

> Superfish, I'm willing to believe, was just incompetence/indifference. If Hola really is installing a backdoor with high privileges, then that's deliberate malice. But that's what Superfish was as well. Why are you willing to give Superfish a free pass on doing the same thing?

Yes, that's what Superfish was. However, I'm willing to believe that Lenovo's marketing department was incompetent enough to agree to bundling it without malice.

I assure you that at any large company, especially one the size of Lenovo, the marketing department does not single handedly make any technical decisions.
Post reply on HN