Live data from Hacker News

Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

windscribe.com

111–120 of 456 posts

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#111
post #51

Is there any other real world usecases for VPN nowadays other than: 1. Getting access to geolocked data 2. Torrenting "Linux ISOs" ?

Accessing services from the UK without handing over your personal ID to a service that will inevitably get hacked. This happened to discord literally a few days ago.

"Hacked" will be "left the data on a public S3 bucket until someone noticed" or similar.

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#112

Is there any other real world usecases for VPN nowadays other than: 1. Getting access to geolocked data 2. Torrenting "Linux ISOs" ?

3. Creating multiple accounts with platforms to break their ToS without getting chainbanned.

4. Perform DDoS

5. brute force passwords

6. try out leaked passwords

7. exploit vulns.

8. CSAM

9. Phish

10. Spam

11. Evade taxes with crypto

12. Sell drugs

13. Terrorism

Lots of malicious uses for VPNs, or was your question about legitimate usecases? In which case:

14. Sending emails about cryptography

15. Pornography

16. activism

17. Journalism/Whistleblowing

18. Military

Although some of the legitimate/ilegitimate categories might be subjective, which is precisely why it's a grey legal area at all.

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#113
post #19

Are we allowed to discuss (edit: if it's not too political?) if Kape Technologies has any connections to Israeli security services, given the nature of VPNs and given the amount of data that can be trivially collected, and: "Being from Israel, Teddy Sagi had connections with the Israeli military intelligence sphere and was able to procure himself a real-life cyber spy [his co-founder] from the famed Unit 8200 (kinda…

Unit 8200 is the premier software development track in the Israeli military.

Every Israeli tech company likely has multiple developers from Unit 8200 in it. Whether it's building e-commerce shops or making video games.

While 8200 definitely falls under the military intelligence wing, I don't think describing people in it as Cyber Spies is anywhere near accurate. And unless that guy was very high ranking it is a stretch to imply that's an indication that IL military intelligence is involved in the company.

That is not to say that the military isn't involved with the company - that might very well be true, just that someone being from Unit 8200 isn't an indication of it.

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#114
post #88
post #27

Earlier quoted context omitted.

TLS doesn't hide which websites (hostnames) you visit

Which is more likely, your barista collecting this data for nefarious purposes, or your ISP?

Or that dude in the black hoodie in the corner who always seems to be camped at whatever cafe you and your cow orkers are using as your startup "office"?

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#115

Is there any other real world usecases for VPN nowadays other than: 1. Getting access to geolocked data 2. Torrenting "Linux ISOs" ?

The original use for a VPN - getting access to private resources - is still very much in play. I don't just mean being able to access some private web interface you have on a private server in your at home, I mean connecting a satellite office to the main corporate office. But for all of these consumer marketed VPNs, I think your list has 90%+ covered...

Interesting that we use the same word to describe both technologies, but semantically and technically they are very different.

Perhaps we use the same word to describe them because initially they did use the same technologies, but they have branched out ever since? Maybe IPSec would be a common tech used. But the algorithms are not the same anymore since they serve different purposes (Personal privacy vs corporate/sysadmin security)

In the corporate world VPNs were usually a lower level abstraction security mechanism or a redundant security mechanism to either complement application layer_security, or to hot-patch modern security unto legacy LAN systems. VPN encryption is usually provided by the local router. Common algorithms are IPSec/IKev2.

In the personal privacy world, we are talking about a proxy that hides identification such as IP addresses, and pools connections to provide privacy. The actual encryption is not the main security mechanism even, as it only covers the transit between consumer to proxy, leaving (a potentially longer transit) between the proxy to the actual destination.

In terms of purpose and architecture it's closer to bitcoin tumblers, or Tor or Freenet, or money laundering placement. The fact that they call it VPNs seems to me more of a marketing scheme or political play to avoid association with all of the above, than an actual technical or academical description. If someone were to analyse these technologies, I'm sure a neutral or critical approach would avoid uncritically calling them VPNs in the same way that research is published not about Viagra, but on Sildenafil.

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#117
post #50

Is there any other real world usecases for VPN nowadays other than: 1. Getting access to geolocked data 2. Torrenting "Linux ISOs" ?

A ton of ISPs use deep packet inspection for various kinds of filtering (and other shenanigans). When they get it wrong it manifests to the user as certain websites or access patterns being inaccessible and the ISPs customer support agreeing that you should have access and being able to do fuck all to fix it. A VPN in the middle usually solves the issue.

Wait, I think an ISP cannot inspect the content of packets that are encrypted, say, with HTTPs. In order to inspect TLS encrypted packets you need access to the end-device, controlling the end-router is not sufficient since you would not have access to the device certificates.

If you can prove that an ISP can inspect packets, it would be major news.

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#118

Note that all of these companies are also under the umbrella of Tesonet, a Lithuanian VC firm also headed by Tomas Okmanas (Tom Okman in TFA). Their flagship investments are Nord Security, Hostinger, Oxylabs, Surfshark, Decodo, Mediatech, and nexos.ai - all closely related business models around proxying. They don't seem to have Russian ties: "In 2022, CyberCare opened an office in Lviv, Ukraine. Although planning fo…

Don't forget ProtonVPN links to Tesonet, which they're trying hard to "debunk" (though no clue why, I have nothing against Tesonet). They only shared employees and accidentally signed apps with the same certificates, but are "totally unrelated". Their PR people are already on this thread. If they didn't try so hard to fight it, people might care less.

Back when I was running PIA, they threatened me a significant amount just for pointing these facts out.

Now that I launched a verifiable VPN, they are once again sending legal threats [1].

[1] https://vp.net/l/en-US/blog/Verified-Privacy-vs-Trust

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#119

Is there any other real world usecases for VPN nowadays other than: 1. Getting access to geolocked data 2. Torrenting "Linux ISOs" ?

I mean the EU has completely given up on free speech so if you want to say anything you better be hiding who you are.

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#120

Is there any other real world usecases for VPN nowadays other than: 1. Getting access to geolocked data 2. Torrenting "Linux ISOs" ?

Sharing corporate info with your employees and not everyone else. You know, the "go to work" thing some people do.

Just because something is called with the same name, doesn't mean it's the same thing. Especially if the naming is done on a product by a company that wants to sell the product, and especially if the name is not a protected trademark.

Express VPN, NordVPN and Surfshark belong to another category of software than the VPNs used by companies.

Some differences are:

1- One is used by consumers, the other is used by businesses.

2- One protects communications to a client-controlled Local area network. The other protects communications with third party services.

3- One provides encryption, the other provides anonymization.

Post reply on HN