Live data from Hacker News

Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

windscribe.com

121–130 of 456 posts

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#123
post #56
post #19

Are we allowed to discuss (edit: if it's not too political?) if Kape Technologies has any connections to Israeli security services, given the nature of VPNs and given the amount of data that can be trivially collected, and: "Being from Israel, Teddy Sagi had connections with the Israeli military intelligence sphere and was able to procure himself a real-life cyber spy [his co-founder] from the famed Unit 8200 (kinda…

>Teddy Sagi had connections with the Israeli military intelligence sphere Does this mean much given that israel has mandatory military service? Unlike in the US where you have to make a conscious choice (eg. patriotism or desperation) to join the CIA/NSA/military, that's not really the case in israel. "has ties to unit 8200" might as well mean "has ties to stanford/MIT/caltech" or "has ties to big tech".

If I was running an intelligence agency and was given my choice of conscripts,

I wouldn't hand my intelligence secrets to people who resented being forced to be there; or to mouthy people I thought might blab about it after the end of their service; or to people with an anti-authority streak or at risk of a Snowden-style attack of conscience about civil liberties.

I would select for people with a deep love of their country; and a sense of loyalty that would extend well beyond the end of their service. The rest I'd send elsewhere - plenty of other units need tech folks, that drone/radio/printer isn't going to fix itself.

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#125
post #6

Been saying it for YEARS: 95% of VPNs sell your data. It's where they make their money. It's absolutely insane the push-back I get when I say this online. I get downvoted to hell and back. Source: I bought this data from VPN companies... Hell, you can inject ads and surveys if you want!

> 95% of VPNs sell your data

This is believable.

> It's where they make their money.

I'm much more skeptical of this. I know linus tech tips is not exactly an expert organization, but I believe the discussions they've had about almost starting a VPN and backing out for ethical reasons, and they made it clear that the core VPN product would have huge profit margins. You can always do greedy things to make more money, but for a paid VPN I'd need some solid evidence to believe that data sales are a huge line item or especially that they're the main source of money.

If you're including the swaths of free VPNs then that makes your number a lot harder to use.

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#126

Earlier quoted context omitted.

Don't forget ProtonVPN links to Tesonet, which they're trying hard to "debunk" (though no clue why, I have nothing against Tesonet). They only shared employees and accidentally signed apps with the same certificates, but are "totally unrelated". Their PR people are already on this thread. If they didn't try so hard to fight it, people might care less.

Back when I was running PIA, they threatened me a significant amount just for pointing these facts out. Now that I launched a verifiable VPN, they are once again sending legal threats [1]. [1] https://vp.net/l/en-US/blog/Verified-Privacy-vs-Trust

So did you sell pia? Why won’t you sell your next venture ?

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#127

Earlier quoted context omitted.

> Hell, you can inject ads and surveys if you want! So am I right in saying that the data that's encrypted by VPNS is only in transit? It then sits on a server in plain text, ready to be queried by third parties for money.

Yes, VPNs add encryption only between you and the VPN servers.

How were they able to convince anyone that that matters?

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#128

We should really be moving towards a world of Multi-Party Relays rather than Single-Party VPN operators: https://www.privacyguides.org/articles/2024/11/17/where-are-... With Multi-Party Relays you no longer have a trust a single entity not being malicious or compromised. Disclaimer: I run obscura.net, which does exactly this with Mullvad (our partner) as the Exit Hop.

Can you control the geography of the exit node? I really like Private Relay but it doesn't get around geo restrictions because the IP is still in the same country you are.

Yes, you can with Obscura. That limitation of Private Relay is just an arbitrary limitation made by Apple.

Re: Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)

#129

Earlier quoted context omitted.

Those two are pretty big already to be honest. I guess a third one would be avoiding eavesdropping on public wi-fis.

With TLS being everywhere, and just few clicks away from having DNS over TLS, I really don't get eavesdropping on public wifi prop value.

1. example.com is not on the HSTS preload list

2. Because you normally visit example.com using an incognito window, your browser hasn't cached the redirect to SSL, or the address bar suggestion, and you haven't bookmarked the site.

3. You key in example.com, the browser connects over http, and the evil wifi MITMs your unencrypted connection - removing the redirect to SSL and messing with the page however the evildoer wants.

Obviously a VPN provider can also do this, but you might hope they're less likely to.

Post reply on HN