Live data from Hacker News

Mozilla VPN

blog.mozilla.org

371–380 of 531 posts

Re: Mozilla VPN

#371
post #292

Earlier quoted context omitted.

Do you understand the words you're using?

I thought I did? The condescending attitude is unnecessary. Happy to clarify my point if my initial comment was confusing: Websites such as http://panopticlick.eff.org/ showcase how fingerprinting works. They tell you how many bits of information they can extract from various datapoints they get out of you when visiting their site, such as User-Agent. Panopticlick does not use your IP address as a datapoint, but actu…

I think the negative reaction to your earlier comment comes from your mis-use of the term entropy. A static ip, for purposes of tracking you as an individual, has very, very little entropy (in fact, none) . High entropy would be a dynamic IP that is refreshed from a large pool very often.

Additionally, very few ISPs assign static IPs anymore, not unless you pay 5x the price for a business account. Trackers, by and large, don't really pay much attention to IP, since much more reliable metrics have been implemented. Sure, it probably is used to a small extent, but there are much more effective steps that can be taken.

https://en.wikipedia.org/wiki/Entropy_%28computing%29?wprov=...

Re: Mozilla VPN

#372
post #147

Earlier quoted context omitted.

Only Mozilla can make me pay for Google services like Email/Calendar etc. I think I subconsciously trust the brand more than most internet companies out there.

How about FastMail? They have a stellar email service. They also offer contacts and calendars, though I don't personally use those (I use iCloud for that).

I’ve been a happy Fastmail user for years, but in a recent thread Announcing Hey, it was alleged that fastmail will recycle your email address after you stop paying them, and that it’s a common attack to try to register old fastmail addresses and try to use them to access services.

This contrasts with Hey which will forward your old hey.com address to another address after you stop paying, and not make it available to future customers.

Re: Mozilla VPN

#373

Earlier quoted context omitted.

How about FastMail? They have a stellar email service. They also offer contacts and calendars, though I don't personally use those (I use iCloud for that).

Fastmail's domain feature is the killer app for me. I have my @firstandlast.com secured for $7/year or something, and I can make anything@firstandlast.com and if someone starts spamming me I can just block it.

I could probably find an address you don't want to just block once I know your firstandlast.com domain. Why not use @fastmail.com (or any of Fastmail's other domains) for throwaway aliases?

Re: Mozilla VPN

#374
post #372

Earlier quoted context omitted.

How about FastMail? They have a stellar email service. They also offer contacts and calendars, though I don't personally use those (I use iCloud for that).

I’ve been a happy Fastmail user for years, but in a recent thread Announcing Hey, it was alleged that fastmail will recycle your email address after you stop paying them, and that it’s a common attack to try to register old fastmail addresses and try to use them to access services. This contrasts with Hey which will forward your old hey.com address to another address after you stop paying, and not make it available t…

It's probably worth using your own domain even when using third party email providers, so you are in control of your email address.

Re: Mozilla VPN

#375
post #141

Come on Mozilla, hurry up! I want to give you money for goods and services (I also donate monthly [1]), but I'm not that interested in a VPN (I can and do also pay Mullvad). Give me that real internet stuff - email, calendar, file sync, chat(?) - give me Firefox Premium. Bundle in the Lockwise password manager. I'd pay good money to see a company fill the void of paid, privacy first essential internet services and I…

VPN should be number one feature to be implemented, for the private tabs, at least.

Re: Mozilla VPN

#376

Earlier quoted context omitted.

If I were a government trying to gather metadata about web usage, the first thing I'd do is set up or acquire my own VPN company (and make it look convincing, of course).

I wouldn't. What percent of the public do you think uses a VPN? And do you think VPN users are a representative sample of the general public?

VPN (and tor) users are the ones you'd be most interested in as a government. So it doesn't matter how much of the general population uses your VPN as long as you convince the ones you're interested in to use one.

And for all of those not using a VPN, just ask the ISPs.

Re: Mozilla VPN

#377
post #372

Earlier quoted context omitted.

How about FastMail? They have a stellar email service. They also offer contacts and calendars, though I don't personally use those (I use iCloud for that).

I’ve been a happy Fastmail user for years, but in a recent thread Announcing Hey, it was alleged that fastmail will recycle your email address after you stop paying them, and that it’s a common attack to try to register old fastmail addresses and try to use them to access services. This contrasts with Hey which will forward your old hey.com address to another address after you stop paying, and not make it available t…

Buy your own domain for your email and set it up with Fastmail. You should trust anyone, even if they say they'll always forward.

Re: Mozilla VPN

#378

Earlier quoted context omitted.

I’ve used Fastmail for years now on a work account. It’s best feature is that it’s not Google. First, no phone support. Hardly acceptable when even Google has this. Second, no collaboration suite like Drive/Docs. Third, no addons I’m accustomed to having in my daily driver email suite. Things I miss include schedule to send later, default reply all, and no priority inbox. Im stuck using Google for email and maps. I h…

« First, no phone support. Hardly acceptable when even Google has this. » ...you can reach Google over the phone?

Gsuite has ways, I think.

Re: Mozilla VPN

#379
post #309

Earlier quoted context omitted.

I think you are correct that VPNs are a sort of half-solution. There are a lot of people that think anything less than 100% isn't worth your time, so they suggest TOR - but TOR has all sorts of annoying limitations that preclude daily usage. Absolute solutions are seldom worth the 10x extra effort they frequently require. Another set of half-solutions can be seen here which will make you more secure... https://www.cl…

Encrypted SNI is a solution in search of a problem. Unencryptable metadata (destination IP) makes it pretty worthless. Even on shared services like Cloudflare, things that are of interest for collection are probably paying enough that they get stuck on dedicated IPs. The 4chans of the world that might not be paying still make sense from a provider perspective to move to isolated IPs for DDoS mitigation. Censoring pro…

And what happens when the IP address returned by Cloudflare is a random draw from one of several million addresses?

Re: Mozilla VPN

#380
post #83
post #75

Earlier quoted context omitted.

And then it's a shitty trade, because your ISP still can track you without much difficulty.

Not just track you, some ISPs will simply redirect all UDP port 53 DNS packets to their own DNS anyway.

Which ISP?

People arguing against DNS over HTTPS claim stuff the doesn't happen so it'd be good to have definite examples.

Post reply on HN