Live data from Hacker News

NordVPN library and client code open-sourced

github.com

181–190 of 276 posts

Re: NordVPN library and client code open-sourced

#181
post #7

Reminder that it looks like NordVPN does shady stuff: https://news.ycombinator.com/item?id=29285988 Allegedly, they are using their customers as botnets to resell traffic from residential IPs, mostly for scraping, through their other business "Oxylabs".

Digging into this on oxylabs site i found this document: https://oxylabs.io/Oxylabs_Residential_Proxy_Acquisition_Han... "Consenting and fully aware individuals become a part of a residential proxy network in return for a financial reward or some other benefit. When they choose to participate in our suppliers’ pools, they consent that a part of their internet traffic and a small amount of the device’s hardware resour…

This sounds like HoneyGain

https://www.honeygain.com/

Re: NordVPN library and client code open-sourced

#182
NordVPN, eh? I'll never forget there was a reddit thread on /r/vpn where a NordVPN customer complained about a billing issue or something.

NordVPN's official response was to get defensive; they proceeded to actually publicly post a screenshot which included the customer's email address. I couldn't believe it.

That tells you all you need to know about NordVPN's terrible attitude towards privacy.

Re: NordVPN library and client code open-sourced

#183

Earlier quoted context omitted.

This has been brought up before, Netflix does not work with a VPN on. It knows you’re using a VPN and blocks you (asks you to disable it.) Yes this is true even with NordVPN, which I bought specifically to be able to watch Netflix on when expressVPN didn’t work.

Netflix definitely works with NordVPN. My partner and I regularly use it to enable us to stream content which isn’t available in the UK but is elsewhere in the world. Specifically to watch The Walking Dead if I am honest.

Netflix can be a bit sneaky - there's some content that it won't even show you if you're on VPN, even if the source and destination regions can see it; I use a VPN regularly for other streamers, but netflix I sometimes end up having to turn off my VPN to even find particular shows.

Re: NordVPN library and client code open-sourced

#184
post #52

Well, the client code certainly isn't great. Reading through it random, I see a lot of undocumented code, functions with 20 positional arguments (who wants to bet some call sites silently swap two of them?), a file called constants.go where random strings are defined far away from where they're used, etc. There are also random, mostly undocumented, interfaces lying around /everywhere/, in all kinds of places not conn…

> a file called constants.go where random strings are defined far away from where they're use

Wouldn't that be the purpose of such a file? One central location to adjust what some magic number is - then reference it (via eg lsp autocompletion) were used?

Re: NordVPN library and client code open-sourced

#185
post #125

Earlier quoted context omitted.

Correct me if I'm wrong, but origin and destination are still visible to your ISP and any snoopers on your network. The content is encrypted, but not the origin and destination of the request. I use Mullvad because they seem to be a company with insanely good ethics and it's only $5/month. Mozilla VPN uses the under the hood I think.

With a VPN your origin and destination are visible to your VPN provider. You're just moving the point where your metadata can be grabbed. I don't particularly trust my ISP, but I don't see a reason to trust any VPN provider any more.

I mean, I generally trust Mozilla + Mullvad a lot more than Spectrum. The only reason Spectrum wouldn't be selling or otherwise mishandling every bit of data about me they can is if they're too incompetent to realize they have the data. Mozilla has a good track record; they could always become compromised or make other mistakes, but Spectrum fucking sucks.

Re: NordVPN library and client code open-sourced

#186
post #52

Well, the client code certainly isn't great. Reading through it random, I see a lot of undocumented code, functions with 20 positional arguments (who wants to bet some call sites silently swap two of them?), a file called constants.go where random strings are defined far away from where they're used, etc. There are also random, mostly undocumented, interfaces lying around /everywhere/, in all kinds of places not conn…

I honestly think answers like this one are the reason more software aren't open-sourced

Re: NordVPN library and client code open-sourced

#187

I am taking a look at this. Now do Grammarly next, if we want to go by annoying Youtube ads. Someone should tell Grammarly that they are being excessive and too much advertising actually turns people off your product.

Turns off 1% of potential users, attracts 10%. Net win.

Re: NordVPN library and client code open-sourced

#188

Earlier quoted context omitted.

There’s many ways Netflix could detect VPN use, especially on mobile devices. It’s not obvious at all. Netflix could be doing something as simple as checking the IPs or could be actually checking the use of VPN at a system level. Both are equally valid readings of the GP comment.

seems like torrenting is still easier (and safer) than using netflix and co

I was suspended by Disney+ for accidentally turning on my VPN to a location they didn't like...I instantly cancelled my subscription. I couldn't believe the suspension message, banned a paying user... Never again.

Re: NordVPN library and client code open-sourced

#189
post #7

Reminder that it looks like NordVPN does shady stuff: https://news.ycombinator.com/item?id=29285988 Allegedly, they are using their customers as botnets to resell traffic from residential IPs, mostly for scraping, through their other business "Oxylabs".

Digging into this on oxylabs site i found this document: https://oxylabs.io/Oxylabs_Residential_Proxy_Acquisition_Han... "Consenting and fully aware individuals become a part of a residential proxy network in return for a financial reward or some other benefit. When they choose to participate in our suppliers’ pools, they consent that a part of their internet traffic and a small amount of the device’s hardware resour…

I have NordVPN on one device.

Nothing in their license agreement and no settings for this at all.

Doesn't appear they are recruiting devices into this residential proxy service.

Re: NordVPN library and client code open-sourced

#190
post #180

Earlier quoted context omitted.

>You’d almost certainly see that traffic going across your network, right? This is why their marketing campaigns are so aggressive. They completely rely on the unsophisticated masses, to whom a computer is a magical box of fairy dust that plays Netflix shows.

> completely rely on the unsophisticated masses, to whom a computer is a magical box of fairy dust that plays Netflix shows And that’s perfectly fine - computers are a tool, enabling valuable usecases for everyone.

>And that’s perfectly fine - computers are a tool, enabling valuable usecases for everyone.

Of course. But the arbitrage of that knowledge leaves open all kinds of profitable businesses, including shady VPNs.

Post reply on HN