Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

ProtonVPN

protonvpn.com

Post reply on HN
Print view View original

171–180 of 205 posts

Re: ProtonVPN

#171

Post by Johnny_Brahms »

kakarot wrote: post #74
saintfiends wrote: post #6

How does this compare to TunnelBear [1]? - TunnelBear is a bit more expensive (4.99$/mo, paid annually vs 4$/mo). - TunnelBear supports up to 5 connections per account vs 2. I use TunnelBear regularly for my browser and phone. Both works great. My subscription is going to expire soon and I'll be open to try other VPN providers, not that there is anything wrong with TunnelBear. Any recommendations? This site [2] has f…

Check out Mullvad. I haven't yet found a service that I think is slicker, more convenient, and more serious about privacy. You can generate unlimited free trials until you're confident you want to spend the paltry $5 a month on them. https://mullvad.net

I second this. I can't make any claims about the security of the client, but the way they handle things is confidence-inspiring.

I have been in touch with them over some issues I have had,and the support is fantastic. I had an issue with mosh over my local network (SSH worked,mosh did not) and got a very detailed reply about why they treated LAN UDP packets that way, and why I was probably not affected since I ran a modern Linux distro and of course the setting that turned that safety feature off.

And, if you do t trust them to make such decisions for you (or you run an unsupported OS) they have regular openVPN files

Re: ProtonVPN

#172

Post by teknologist »

bartbutler wrote: post #169
teknologist wrote: post #168

Does anyone know why they require existing ProtonMail users to enter their account's password AND the decryption password? Fair enough, they're linking my account, they require the account password. But the key that encrypts the email data too?

Your access token to the service is encrypted with your primary public key as an extra security measure, thus your client needs to decrypt it to use it.

OK, makes sense. Thanks!

It might be a good idea to mention that on the page as (I'd guess) many tech literate people use the service.

Re: ProtonVPN

#173

Post by teknologist »

sr2 wrote: post #80
msh wrote: post #66

Earlier quoted context omitted.

Yes but then they give you a tunnel with a static IP you can host things on, so it's not really comparable to proton VPN.

There's also iPredator[0] run by Peter Sunde. PRQ is the work of Gottfrid Svartholm. Your traffic goes through Sweden, so you're safe! [0] https://www.ipredator.se

Unfortunate choice of name...

Re: ProtonVPN

#174

Post by jwfxpr »

tptacek wrote: post #160
jwfxpr wrote: post #150

Earlier quoted context omitted.

Could you unpack your statement about the careful code writing, or link to an explanation? We would usually expect a formal third-party audit to substantiate such a claim, but if there is other good evidence for their code's secure implementation I'd love to see it.

First, I'm going to try not to go into this in detail right now, but HN has very weird ideas about the potency of third-party code audits, particularly for things involving cryptography. A short summary: most third-party audits of cryptographic software written in systems languages don't accomplish anything. Most crypto software you depend on has never had a full-coverage audit from third-party auditors qualified to…

That's an excellent brief answer, thank you for your perspective and time!

Re: ProtonVPN

#176

Post by gtf21 »

yalooze wrote: post #111
gtf21 wrote: post #20

Earlier quoted context omitted.

I use VyprVPN [1] which I've found to be good and fast. It's a bit of a tough area to research well. I might give TunnelBear a try. [1]: https://www.goldenfrog.com/vyprvpn

VyprVPN do store logs. I used to use them and wasn't aware of it. Just to let you know.

Really? I know the client stores connection logs (configurable) but I asked them directly and they said they didn't log anything if it's turned off. Their privacy policy says the same [1].

If that's the case then I'm switching immediately.

[1]: https://www.goldenfrog.com/privacy

Re: ProtonVPN

#177

Post by zeratax »

KingMob wrote: post #143
tptacek wrote: post #138

Earlier quoted context omitted.

That's essentially what Algo does.

Oh, I know; I wrote a blog post on using Algo. To be clear, I was thinking about the less-technically-sophisticated-than-HN crowd. E.g., is there a market for the people who would typically purchase VPN services, don't want to trust a VPN company, but don't know how to setup a cloud server?

Is there a reason to trust a cloud server over a VPN company?

Re: ProtonVPN

#178

Post by johnp_ »

zeta0134 wrote: post #157
earenndil wrote: post #156

Earlier quoted context omitted.

See now, this is the part I don't get. Assuming that you don't encrypt your email with pgp (reasonable, if you're emailing someone who isn't very techy) and aren't emailing someone else who also uses protonmail, there's nothing stopping them from making an unencrypted copy of every email they receive.

I was trying to do some research to refute this claim, and my ignorance of email standards has once again reared its ugly head. I thought DKIM was for encryption, but it's apparently just for verification? Email is still primarily sent in the clear ? I'm at a loss. What a mess.

DKIM solves authenticity and integrity, but not privacy.

Re: ProtonVPN

#179

Post by ionised »

gtirloni wrote: post #16
hedora wrote: post #9

I have mixed feelings about protonmail. On the one hand, they tend to be on the right side of political / legal issues, and this transparency report is nice: https://protonmail.com/blog/transparency-report/ On the other hand, they recently reduced the level of detail in the transparency report. There is also the fact that they are Swiss, and their privacy laws were severely weakened by a recent referendum. In particu…

What would be a good jurisdiction for them?

Iceland maybe?

Re: ProtonVPN

#180

Post by yjftsjthsd-h »

axiomdata316 wrote: post #83
tyoma wrote: post #25

Earlier quoted context omitted.

HN gets regular "what VPN should I use?" questions and my answer is always the same: Algo [1]. It is designed to be simple to set up, simple to tear down, and usable with numerous cloud providers or your own Linux server. [1] https://github.com/trailofbits/algo

I'm really interested in trying this but nervous with how much a cloud service will cost. Is there a free option for a cloud hosting service that I can start with?

Google has a lifetime free tier, AWS has a 1-year free tier, and Digital Ocean referral links for $10 (2 months on the cheapest server) are easy to find.
Post reply on HN