Live data from Hacker News

Detailed VPN Comparison Chart

thatoneprivacysite.net

31–40 of 71 posts

Re: Detailed VPN Comparison Chart

#32

If I was the NSA, I'd certainly be looking to launch a VPN company or two - maybe even subsidising their offerings, to get them to the top of the performance and value for money charts. After all, getting users to voluntarily direct their traffic through your network would be much easier than installing snooping hardware at every ISP, backdooring hardware in transit or snooping on undersea cables.

If you were the NSA you could hack any VPN company on demand.

Hell, most of them host in super cheap DCs too so guess how good the physical security is?

Re: Detailed VPN Comparison Chart

#33
post #16

How much profit does a VPN operator make? Since running my own box on DigitalOcean costs as much as a VPN ($5), at <10% traffic utilisation.

I also run my VPN on a cheap VPS. Dedicated VPN companies can easily come under attack/scrutiny, or could have temptations of selling user data if subscribers fall, but I doubt anyone is monitoring individual, ephemeral DO droplets/AWS instances.

Re: Detailed VPN Comparison Chart

#34
post #17

Earlier quoted context omitted.

>Sure, but for day to day browsing, Tor is shit. Sure, but for privacy, VPNs are shit. You can't recommend VPNs for privacy. If this was branded differently, I'm sure it could be a great resource. >This is more to prevent dragnet bullshit like the UK RIPA which requires ISPs to keep a list of sites visited. The site doesn't really read like that, it has several suggestions that don't seem to apply to those seeking on…

> Sure, but for privacy, VPNs are shit. You can't recommend VPNs for privacy. Why not? Doesn't it depend on your purpose and threat level? If you have state level actors chasing you than VPNs will only be part of your opsec toolchest — preferring TOR where possible and being very strict about where you access the internet (certainly not at home). But if you are just downloading the latest episode of Sherlock from you…

>But if you are just downloading the latest episode of Sherlock from your local hive of wretched scum and villainy, a VPN will surely help.

Then you should recommend VPNs for that specific purpose, never for generic "privacy".

>VPNs are only part of the solution of course (not using any social media, not connecting to any of your normal accounts, limiting VPN use to whatever it is you want to keep private), but you seem adamant that even this is not a valid use of VPNs, or am I misreading your posts?

This is reasonable, I use VPNs for similar purposes too. But recommending VPNs for "privacy" needs to come with a big disclaimer. "If it's something that actually matters, they won't help you."

If you do something illegal using a VPN in very many cases your local police department will be able to use mutual legal assistance treaties to search and/or wiretap your VPN providers.

Re: Detailed VPN Comparison Chart

#35

If I was the NSA, I'd certainly be looking to launch a VPN company or two - maybe even subsidising their offerings, to get them to the top of the performance and value for money charts. After all, getting users to voluntarily direct their traffic through your network would be much easier than installing snooping hardware at every ISP, backdooring hardware in transit or snooping on undersea cables.

Meh, just get vendors to mess up the implementation of their VPN protocol stack. This one was likely far from intentional but demonstrates quite clearly what can happen when implementations go south:

https://www.kb.cert.org/vuls/id/905344

Re: Detailed VPN Comparison Chart

#36
post #5

Earlier quoted context omitted.

If privacy is the concern? Tor.

It really depends on your values and threat model. With a few thousand dollars and few weeks it wouldn't be that hard to flood the Tor network with enough of your own nodes to capture the routes of an appreciable fraction of traffic. It would be extraordinary to me if the NSA hadn't already done this.

And it's still easier to trust Tor than any VPN provider :)

Re: Detailed VPN Comparison Chart

#37
I've seen lots of VPN comparisons that rate VPN providers on what they do and do not log. But who really verifies this? What's to stop VPN provider X from claiming "We don't log anything", while simultaneously streaming a real-time log to any government agency that asks for it?

Re: Detailed VPN Comparison Chart

#38

http://vpnspeedtest.org/ tests over 20 VPN services to find the maximum speed of each VPN from 8 locations around the world. ThatOnePrivacyGuy should use their open source speed test tool instead as the tests are verifiable (unlike his tests from a single location which nobody can reproduce).

I don't see a "disclaimer/disclosure" (kinda standard practice around here) so I assume your username is entirely coincidental?

His post history points to the contrary eh

Re: Detailed VPN Comparison Chart

#39
And a few DIY VPN options (open source ansible etc. scripts) that have been features on HN recently (in order of popularity)

https://github.com/jlund/streisand (6000+ stars)

https://github.com/sovereign/sovereign (6000+ stars)

https://github.com/Nyr/openvpn-install (3000+ stars)

https://github.com/ttlequals0/autovpn (1400+ stars)

https://github.com/trailofbits/algo (1100+ stars)

https://github.com/robbintt/popup-openvpn (700+ stars)

Re: Detailed VPN Comparison Chart

#40

If I was the NSA, I'd certainly be looking to launch a VPN company or two - maybe even subsidising their offerings, to get them to the top of the performance and value for money charts. After all, getting users to voluntarily direct their traffic through your network would be much easier than installing snooping hardware at every ISP, backdooring hardware in transit or snooping on undersea cables.

It is easier and cheaper to send GAG order to most popular companies. Check Lavabit case.

PS: I have checked lababit website, seems like they are reopening in 2 days.

Post reply on HN