Is the TunnelBear "Vigilant" feature like a kill switch? So if the VPN drops out, it doesn't revert to downloading via non-VPN?
Yeah, vigilant is the equivalent of a kill switch. So not connected to VPN = no internet
VPN Report – Reviews of the top VPNs
221–230 of 235 posts
Re: VPN Report – Reviews of the top VPNs
#222Regardless of how you feel about _why_ PIA sponsor the organisations they do, it is surprising to see someone claiming they "perhaps put [their money] to better use" given their record of supporting foss and digital/online rights [1]. Additionally, the characterization as being extremely focused on the tech illiterate I feel isn't really the case either, they have lots of docs about how to use OpenVPN [2]. Thirdly, w…
PIA actually scores as one of the highest on the objective measures. The star count is just a subjective impression and experience with getting it set up. They connect over HTTP on startup instead of HTTPS (which is unacceptable for a privacy company). They then ping almost a hundred servers on startup (no other app does this, at least not to this extent).
I have happily used PIA for years on Ubuntu and macOS and Android, but I never, ever use their clients. Just download the ovpn files[1] and set them up with the native support built into your OS (or use something like Viscosity for more functionality). On an unrelated note, I'm happy to know that my (reasonable) annual subscription allows them to support FOSS projects, they should really publicize that more!
1: https://www.privateinternetaccess.com/openvpn/openvpn.zip 2: https://www.sparklabs.com/viscosity/
Re: VPN Report – Reviews of the top VPNs
#223TunnelBear claims to be secure but all they offer is an opaque app. Uhh, no thanks. I prefer to run my own VPN client that doesn't have potential spyware in it. I am surprised this was so highly rated by someone reviewing VPNs. edit: I know you can't make everyone happy, but there are a LOT of VPN options out there and only the very best should be making it through.
https://www.tunnelbear.com/blog/tunnelbear_public_security_a... They just got audited
That is nice of them to release a sanitized version of the audit report. I would still prefer openvpn or some other open source client that has been more battle tested for something I intend to use as a privacy tool. I don't think it changes my basic position on a closed source client. Audits are always point in time.
Re: VPN Report – Reviews of the top VPNs
#224This guy has been reviewing VPN services for a while and has put together an incredibly comprehensive table as well as a selection of more detailed reviews, selected from the list at random so as to remain impartial. Recommended. https://thatoneprivacysite.net/vpn-section/ For example, TunnelBear scores highly on security, but poorly on ethics.
I suspect that, for less savvy potential customers (read: the vast majority of them), "That One Privacy Site" can do more harm than good. I wrote a bit about choosing VPNs, and about my concerns with TOPS, here: https://davepeck.org/2017/04/16/why-its-hard-to-choose-a-vpn... PS: Since this is HN, I just want to say that if you can, you should run your own VPN. Use Algo, full stop -- it's put together by some of the b…
So much wrong about this blog post - first, written by the creator of a VPN company, someone obviously biased, with a stake in the industry:
Many of the items you claim are not addressed by TOPG absolutely are. Questionable/sketchy product marketing & SEO, ethical business practices, etc are all covered in the detailed comparisons Ethics section. Other items you claim he SHOULD look at go against his methodology and are impossible to indepdently verify - such as technical architecture and sustainability.
The main purpose of jurisdiction is to see which countries are more likely to illegally spy on its citizens and which have a track record of being an "enemy of the internet". You claim a VPN located in the US (like the one you made and have a stake in) are subject to government agencies such as the FTC, but many if not most of these companies are regularly allowed to flout FTC rules on native advertising and bad SEO and such which is why the industry is largely in the misinformation mess that it is - and we all know about Five Eyes and why that matters - any laws claiming to protect its citizens are kind of negated by programs such as PRISM, XKeyScore, and every other one we've learned about from Snowden.
You claim you get suspicious of TOPS reliability is because the data is wrong on Cloak - "TOPS claims that Cloak’s native apps leak IPv6 and DNS traffic." The detailed comparison actually shows whether the service officially tunnels or actively blocks IPv6 and runs its own first party DNS server. This is worded plainly in the header and further explained in the glossary. Lastly, if these are actually not the case for yours or any service, all he requires is a link to the official site where the data can be validated. I'm wondering if the point of the article was a lead up to the end in an attempt to turn people away from TOPS so your joke of a service (which surprise surprise, didn't score so well on the chart) isn't seen for what it is.
Re: VPN Report – Reviews of the top VPNs
#225This guy has been reviewing VPN services for a while and has put together an incredibly comprehensive table as well as a selection of more detailed reviews, selected from the list at random so as to remain impartial. Recommended. https://thatoneprivacysite.net/vpn-section/ For example, TunnelBear scores highly on security, but poorly on ethics.
I checked the VPN I use, and I think the analysis presented does not correspond to the privacy policy and FAQ of the service.
Just email TOPG, he'll change the chart to match the site. You just have to point out what doesn't match and give a link to where it can be verified.
Re: VPN Report – Reviews of the top VPNs
#226This seems like a good thread to ask this. I'm about to move to China. What vpn set up is best? I use and android phone and Mac laptop. Thanks..
You'll find this extensively discussed in a number of other HN threads: https://hn.algolia.com/?query=china%20vpn&sort=byPopularity&... Hope that helps!
Thanks, it didn't occur to me that I could search the archives.
Re: VPN Report – Reviews of the top VPNs
#227Earlier quoted context omitted.
The intended audience is whoever will click the affiliate links. Garbage like this is why I wish there was no affiliate business on the internet. You can never assume good faith if someone tries to earn money from you.
But none of the links are affiliate links? I mean, I agree that this is far from the best, most comprehensive VPN review site, but you can't just make things up like this.
Build links first, monetize later.
Re: VPN Report – Reviews of the top VPNs
#228Earlier quoted context omitted.
PIA actually scores as one of the highest on the objective measures. The star count is just a subjective impression and experience with getting it set up. They connect over HTTP on startup instead of HTTPS (which is unacceptable for a privacy company). They then ping almost a hundred servers on startup (no other app does this, at least not to this extent).
Don't use their app then. In fact, I can't think of a reason why I'd install any vpns app if they support openvpn.
Their app has all of their various points of presence pre-populated. If you use your favorite OpenVPN program to connect you would need to get a couple dozen configs imported.
It also tries to find the fastest connection for you, which is useful when traveling.
Re: VPN Report – Reviews of the top VPNs
#229Earlier quoted context omitted.
> Money prevents it. Of course datacenter could toggle logging for particular server, but logging everything is very expensive. They'll absolutely log a particular server if a law enforcement agency requires that they do so, and they'll bill the agency for it, so money isn't a factor.
I have no doubt about that, but I totally sure nobody logging every running server at all times. On other side commercial VPN services...
Wouldn't it still be prohibitively expensive for a commercial VPN service to log all traffic at all times? The traffic going through should be proportional to their scale, just like a generic VPS company. Why does logging get more expensive just because a server is general-use rather than solely a VPN server?
Re: VPN Report – Reviews of the top VPNs
#230Earlier quoted context omitted.
I have no doubt about that, but I totally sure nobody logging every running server at all times. On other side commercial VPN services...
Wouldn't it still be prohibitively expensive for a commercial VPN service to log all traffic at all times? The traffic going through should be proportional to their scale, just like a generic VPS company. Why does logging get more expensive just because a server is general-use rather than solely a VPN server?
It could easily be still prohibitively expensive, but I totally sure that percent of DMCA and law enforcement incidents per customer will be way higher for commercial VPN service. Especially if this VPN service marketing is targeting at selling "anonimity", "no logs" and acceptance of cryptocurrencies.
At least they can for sure have turn full logging for anyone who paid with bitcoin (even if it's through coinbase).