Live data from Hacker News

Don't Use VPN Services (2016)

gist.github.com

11–20 of 61 posts

Re: Don't Use VPN Services (2016)

#11
post #7

Only reason for VPN I see is circumventing geo-fencing. And even then you need to remember that it can put your account at risk. For subscription services this might be insignificant, but for likes of gamestores it might prevent you from making future purchases at some point.

Yeah this is the only reason I have one. Weird licensing restrictions mean basically nothing I want to watch is available in my country and so I need to constantly jump through hoops to _pay_ for content...

Re: Don't Use VPN Services (2016)

#12
Using a VPN also raises the actual cost of the adversary. For a simple example, considering something like a movie download - doing it from the home IP means a form letter information request from a lawyer to the ISP. Doing it through a VPN means an international request for legal support is required to get the name behind the IP. Costly and time-consuming and perhaps even impossible depending on jurisdiction. (USA won't honor an information request from Iran,etc)

Re: Don't Use VPN Services (2016)

#13
post #10

My main reason for using a proxy is to prevent my government from tracking and logging all my internet activity (when you look at the huge list of agencies the UK government has allowed access to that information you can see why). I skimmed through this article but I don't think it addressed this use case. Sure, my VPN could be tracking me, but I have much more trust in Mozilla than I do any other internety company.…

I'm interested. I thought the proposed tracking and logging requirements on ISPs never made it through parliament. Do you have any details of the requirements and agencies with access?

Re: Don't Use VPN Services (2016)

#14
post #2

This is a pretty printing article that completely misses one of the main reasons to use VPN: browsing resources blocked in your country. I use VPN to open LinkedIn and watch West wing on Netflix, and I couldn't care less about who gets to know about it.

Also bypassing throttling like cell carriers limiting video bandwidth to a small fraction of normal speeds. The article also ignores the multiple VPN providers who have been subpoenaed in court and replied that they have no logs. So either they don't log or they're willing to lie to a judge on their customer's behalf. I feel like every few months one of these holier-than-thou anti-VPN articles hits HN where the autho…

Yup, this is my use case. I live way out in the middle of nowhere, and our internet is LTE - and the provider traffic shapes like crazy, depending on content and time of day.

The VPN sidesteps all of that, and allows me to use the full speed of the connection - otherwise we’re throttled to about 40%.

Yes, I could and probably will set up my own endpoint, but for less than a dollar a month this is just an easy and cheap solution, for now.

Re: Don't Use VPN Services (2016)

#15
post #10

My main reason for using a proxy is to prevent my government from tracking and logging all my internet activity (when you look at the huge list of agencies the UK government has allowed access to that information you can see why). I skimmed through this article but I don't think it addressed this use case. Sure, my VPN could be tracking me, but I have much more trust in Mozilla than I do any other internety company.…

I'm interested. I thought the proposed tracking and logging requirements on ISPs never made it through parliament. Do you have any details of the requirements and agencies with access?

Your comment made me look into this in further detail and you may be right; it seems the situation isn't as bad as it once was.

> in April 2018, when the high court found the government’s power to order private companies to store communications data, including internet history, to be in breach of citizens' right to privacy.

It seems the original proposal has been watered down and then challenged in court. I'm wondering if someone more knowledgable can chime in.

Still, I don't want some government agency to be able to pull my entire browsing history, now or in the future.

Re: Don't Use VPN Services (2016)

#16

> Because a VPN in this sense is just a glorified proxy. The VPN provider can see all your traffic, and do with it what they want - including logging. Wow, I didn't know VPN providers have broken SSL and can read all that traffic. This was on the frontpage before. Are people just upvoting it for the clickbait headline without reading the points that are being made?

Or maybe they employed the principle of charity. The provider can see all your [encrypted] traffic [including from/to pairs].

Re: Don't Use VPN Services (2016)

#17

> Because a VPN in this sense is just a glorified proxy. The VPN provider can see all your traffic, and do with it what they want - including logging. Wow, I didn't know VPN providers have broken SSL and can read all that traffic. This was on the frontpage before. Are people just upvoting it for the clickbait headline without reading the points that are being made?

The article isn't making that claim. Logging the traffic can for example mean storing CDRs for the connections. The kind of thing your ISP could also do, and in many jurisdictions is legally obligated to.

They could do per-flow logging of TCP flows (subscriber 89 made a TCP connection to 1.2.3.4:567 starting at 12:00:05, ending at 12:02:04, transferring 10kB up and 1MB down). In the worst case this would also include the TLS SNI, which is transmitted in plaintext.

Or it they could do logging based on the endpoint (subscriber 89 transmitted 1MB from IP 1.2.3.4 in the 15 minute interval 12:00-12:15).

Re: Don't Use VPN Services (2016)

#18
post #2

This is a pretty printing article that completely misses one of the main reasons to use VPN: browsing resources blocked in your country. I use VPN to open LinkedIn and watch West wing on Netflix, and I couldn't care less about who gets to know about it.

[deleted]

Re: Don't Use VPN Services (2016)

#19

> Because a VPN in this sense is just a glorified proxy. The VPN provider can see all your traffic, and do with it what they want - including logging. Wow, I didn't know VPN providers have broken SSL and can read all that traffic. This was on the frontpage before. Are people just upvoting it for the clickbait headline without reading the points that are being made?

They don't need to look in the content, they only need to check your DNS queries

Re: Don't Use VPN Services (2016)

#20

> Because a VPN in this sense is just a glorified proxy. The VPN provider can see all your traffic, and do with it what they want - including logging. Wow, I didn't know VPN providers have broken SSL and can read all that traffic. This was on the frontpage before. Are people just upvoting it for the clickbait headline without reading the points that are being made?

I'm not sure I get your point.

If you think TLS is adequate to stop a VPN provider figuring out what you're doing, why isn't it good enough to stop the ISP/Government/evil coffee chain IT team?

Post reply on HN