Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FreePN: Open-source peer-to-peer VPN service

freepn.org

Post reply on HN
Print view View original

121–130 of 136 posts

Re: FreePN: Open-source peer-to-peer VPN service

#121

Post by q3k »

chii wrote: post #51
detaro wrote: post #7

Earlier quoted context omitted.

"Should", yes. (Details obviously depend on jurisdiction) For that, they get a warrant to search your home and for your computers to be confiscated to do the forensic analysis on them. You might get them back after a few years if nothing can be proven. They also might tie you into it for knowingly supporting it by installing such a VPN, some places make you responsible for everything happening through your connection…

Why can't anyone who join be incorporated as a utilities provider, and shed the responsibility of monitoring the traffic (and the legality of it) to the initiator of said traffic? I mean, ISPs do this don't they? Telephone networks do this don't they?

ISPs generally are able to pinpoint the originator of the traffic, ie. for a given connection 3-/5-tuple provide information on the originating customer, their physical address, contract data, etc.

This is the tradeoff when registering an ISP in the jurisdictions I'm familiar with: you are immune to legal action concerning the data that is carried over your network (ie. you won't get raided for a customer sending death threats), but in return you must cooperate with the authorities and provide data on your offending customers. You must do whatever is necessary to be able to provide this data upon a subpoena: from assigning static IP addresses / CGNAT port ranges to customers, to logging every NAT translation from your roaming mobile network.

Source/background: operating an ISP in Poland.

Re: FreePN: Open-source peer-to-peer VPN service

#122

Post by ian-bateman »

dhaavi wrote: post #83
ian-bateman wrote: post #81

Earlier quoted context omitted.

We are still evaluating the best way to go about this, but yes, we've been looking at the way Brave approaches it as well (though of course, we'd like to do it in such a way that everyone's incentives align / we don't compromise user privacy in any way whatsoever). Short term, I'm self-funding the company (day job + previous exit of an entirely unrelated company).

Self-funding! This is great, did not expect something like this coming from VC-land SF. We at https://safing.io/ are also self-funded, but also receive a lot of public funding. Interestingly our visions are very similar, but our technical views seem to differ a lot. I think monetizing a privacy product without having the user pay is extremely hard. There will need to be an extremely high amount of transparency everyw…

Thanks! Yeah it's definitely been a challenge, but I think it's worth the effort to try to make sure we're keeping incentives properly aligned and really get things right before we try to scale up!

> I think monetizing a privacy product without having the user pay is extremely hard. There will need to be an extremely high amount of transparency everywhere.

I would agree with this wholeheartedly -- we're still very early stages, but trying to keep things as open as possible in terms of our tech & intentions with everything.

> but also receive a lot of public funding.

Curious what sources you receive public funding from?

Re: FreePN: Open-source peer-to-peer VPN service

#123

Post by [deleted] »

column wrote: post #70
woodruffw wrote: post #17

Earlier quoted context omitted.

Some other sketchy bits, from a very quick perusal: * Shelling out[1] to some tool that may be responsible for all of the heavy networking bits[2] * Falling back on a non-monotonic clock but calling it monotonic[3] * Another sketchy shellout[4] that calls a bunch of scripts with trivial interpolation/injection bugs[5]. It's not clear if the arguments passed to those scripts are remotely controllable, but it's sketchy…

Hi! Link [4] is missing.

[deleted]

Re: FreePN: Open-source peer-to-peer VPN service

#124

Post by anderspitman »

lwn wrote: post #99
anderspitman wrote: post #33

Earlier quoted context omitted.

I actually don't think I would need to make a ridiculous amount of requests. The project is a pinning service where people submit a video URL so they can do things like manage lists of the videos they watch (think goodreads for web videos). I need to scrape the video description and tags for each submitted URL. It would be nice to just do it from the user's browser, but the same origin policy won't allow that. A brow…

This sounds like your would be better of using Youtube's API https://developers.google.com/youtube/v3/getting-started

Yeah it would probably be the easiest way to get started. Their ToS[0] just seems so convoluted it's hard to know if you're following it or not, so I don't want to tie myself to it with no recourse.

[0]: https://developers.google.com/youtube/terms/api-services-ter...

Re: FreePN: Open-source peer-to-peer VPN service

#125

Post by anderspitman »

rafaelm wrote: post #108
lwn wrote: post #99

Earlier quoted context omitted.

This sounds like your would be better of using Youtube's API https://developers.google.com/youtube/v3/getting-started

Yes, I was going to mention this. I worked for a small company that had a YouTube product that retrieved video descriptions, duration, thumbnail, etc, using the API. We started with 100k daily API calls and that got later increased to 1 million after requesting it.

Looks like the limit is 10k/day now. What did the process look like to get an increase?

Re: FreePN: Open-source peer-to-peer VPN service

#126

Post by acdha »

nashashmi wrote: post #114
dessant wrote: post #48

Earlier quoted context omitted.

I was approached by Luminati on Twitter to turn my browser extensions into exit nodes, they are enticing developers to exploit users. https://i.imgur.com/EbT96an.png

Auto-update of extensions and apps should be set to off by default. There would be less reason for extensions to be bought by other developers for their installed user base. Secondly, how come there is no regulation about selling chrome extensions and apps?

If you turn auto-updates off, you're just reinventing early 2000s desktop security and attackers everywhere will thank you. Updates need to be automatic but there needs to be stricter rules about notifications to users about changes in ownership or functionality. A huge fraction of this would go away if corporate liability didn't allow hiding all of this in terms of service.

Re: FreePN: Open-source peer-to-peer VPN service

#127

Post by dylz »

anderspitman wrote: post #125
rafaelm wrote: post #108

Earlier quoted context omitted.

Yes, I was going to mention this. I worked for a small company that had a YouTube product that retrieved video descriptions, duration, thumbnail, etc, using the API. We started with 100k daily API calls and that got later increased to 1 million after requesting it.

Looks like the limit is 10k/day now. What did the process look like to get an increase?

automated form for me.

Re: FreePN: Open-source peer-to-peer VPN service

#128

Post by p1mrx »

core-questions wrote: post #120
Fnoord wrote: post #101

Earlier quoted context omitted.

How does it wotk out for IPv6?

IPv6 is just not widely used, so when you do use it, you stick out like a sore thumb. Think like a bayesian: for Google, it's easy to just block whole /32s of IPv6 space.

At what point would you consider IPv6 "widely used"? It's currently 30% of traffic:

https://www.google.com/intl/en/ipv6/statistics.html

Re: FreePN: Open-source peer-to-peer VPN service

#129

Post by core-questions »

p1mrx wrote: post #128
core-questions wrote: post #120

Earlier quoted context omitted.

IPv6 is just not widely used, so when you do use it, you stick out like a sore thumb. Think like a bayesian: for Google, it's easy to just block whole /32s of IPv6 space.

At what point would you consider IPv6 "widely used"? It's currently 30% of traffic: https://www.google.com/intl/en/ipv6/statistics.html

I bet you half of that is scrapers!
Post reply on HN