Live data from Hacker News

NordVPN library and client code open-sourced

github.com

131–140 of 276 posts

Re: NordVPN library and client code open-sourced

#131

Earlier quoted context omitted.

Nothing shady about fleecing your customers ;) The fact they're in Panama suggests some kind of money laundering scheme to me at the very least.

Every VPN worth its salt is located in a similar country, as it's critical for a VPN to operate out of a jurisdiction that does not require log retention for a certain period of time nor cooperates with Five Eyes law enforcement.

Panama may be where they're incorporated, but they have operations all around the globe.

Re: NordVPN library and client code open-sourced

#132
post #115

The fact that NordVPN needs its own library should already be seen as a red flag. If you need a VPN at all (which you usually don't) then you should use something that works with widely used and tested protocols. That was historically ipsec or openvpn (both not ideal), these days wireguard is probably a better choice. That's all apart from the fact that most reasons advertised by companies like NordVPN why you need a…

They need their own client for the litany of value-adds they offer. If you just want an openvpn config from them they'll give you one. Would you give MS this same hassle if i told you they rolled their own vpn libraries?

Re: NordVPN library and client code open-sourced

#133

NordVPN are far too aggressive about youtube marketing to not be sketchy imo. Open source client doesn't really help because whatever sketchy shit they're up to is probably mostly on the server side anyway. I wonder what their total youtube sponsor spot expenditure has been. It must be a ridiculous amount of money.

I agree. And the worst thing is, outside of tech communities people seem to completely disagree, probably because they know through Ads what a VPN is.

Re: NordVPN library and client code open-sourced

#134
post #105

Earlier quoted context omitted.

That is an exceptionally broad statement. I think it's probable that Netflix doesn't work with large-scale VPN providers because it's broadly easy to identify the traffic source. However, using a wireguard tunnel from my ipad back to my house, netflix works fine.

He obviously didn't mean to include people who are just tunneling back to their residential IP.

There’s many ways Netflix could detect VPN use, especially on mobile devices.

It’s not obvious at all. Netflix could be doing something as simple as checking the IPs or could be actually checking the use of VPN at a system level. Both are equally valid readings of the GP comment.

Re: NordVPN library and client code open-sourced

#136
post #118

Earlier quoted context omitted.

They have a ridiculously high ad spend, ridiculously high prices, located in a tax haven, their advertising routinely makes false, exaggerated claims, they've been exposed as having logs even though they claim otherwise, and may or may not be running a botnet. Everything about this company screams money laundering scheme to me. EDIT: I've realised my claims about logging were overblown. But I'm not so insecure as to…

To my knowledge, nordvpn is independently audited on its no log claims. Can you provide a source for what you said regarding logs?

I don't trust audits. Too many ways to trick auditors, or auditors could be corrupt. And it only proves what was the case during the audit, assuming the auditors didn't miss anything, not before or after.

I'll admit I misread another comment on this post as them definitely being exposed for logging though, my mistake. I've been unable to corroborate it. I did find that the company openly admits it cooperates with law enforcement and does log on behalf of law enforcement.

Additionally there are so many other red flags I'm not inclined to believe anything they say.

Re: NordVPN library and client code open-sourced

#138

Earlier quoted context omitted.

No that is why they are nitpicking about recently open sourced code that is "undocumented"

I don't see it as a nitpick. The review can be valuable to people working on the code and users wondering how competent the Nord team is.

Oh come on. Review? Give me a break.

Yeah this review will really give potential Nord users something to really think about before they purchase!

Re: NordVPN library and client code open-sourced

#139
post #7

Reminder that it looks like NordVPN does shady stuff: https://news.ycombinator.com/item?id=29285988 Allegedly, they are using their customers as botnets to resell traffic from residential IPs, mostly for scraping, through their other business "Oxylabs".

They still offer OpenVPN connections ...

Is offering a service somehow a problem? Especially the most prominent method of VPN connections for a long time?

Most routers and other clients that aren’t updated very frequently still only support OVPN.

They also offer WG connections if OVPN bothers you so much.

Re: NordVPN library and client code open-sourced

#140
post #115

The fact that NordVPN needs its own library should already be seen as a red flag. If you need a VPN at all (which you usually don't) then you should use something that works with widely used and tested protocols. That was historically ipsec or openvpn (both not ideal), these days wireguard is probably a better choice. That's all apart from the fact that most reasons advertised by companies like NordVPN why you need a…

Having your own client gives the user a good UX. You can't provide a seamless login, server switching experience, and whatever else they offer with a widely used open source client (without forking at least).

But you don't have to use their client. Most VPN providers (looks like Nord included) allow you to connect with any client that's compatible with one of their protocols. I use a different VPN provider with the official WireGuard client, even though they have their own company-made client.

Post reply on HN