Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Detailed VPN Comparison Chart

thatoneprivacysite.net

Post reply on HN
Print view View original

41–50 of 71 posts

Re: Detailed VPN Comparison Chart

#41

Post by brotherjerky »

inertial wrote: post #39

And a few DIY VPN options (open source ansible etc. scripts) that have been features on HN recently (in order of popularity) https://github.com/jlund/streisand (6000+ stars) https://github.com/sovereign/sovereign (6000+ stars) https://github.com/Nyr/openvpn-install (3000+ stars) https://github.com/ttlequals0/autovpn (1400+ stars) https://github.com/trailofbits/algo (1100+ stars) https://github.com/robbintt/popup-open…

Has anyone setup OpenVPN via Docker? I've seen some of the images, just wondering if anyone has actually got it working.

Re: Detailed VPN Comparison Chart

#42

Post by DylanFuery »

ggregoire wrote: post #12

I use ExpressVPN mainly for Netflix, but most of their servers are banned and it's quite expensive. What VPN do you use for this purpose?

NordVPN allows access to Netflix (American) if you want, even connecting to say a Canadian server gives you access automatically. Hasn't been blocked In the year I've used it, works great, fast and always get 1080P streams.

Torrents on the other hand, I've been having connection issues to other peers. Not sure what's up there.

Re: Detailed VPN Comparison Chart

#43

Post by [deleted] »

michaelt wrote: post #18

If I was the NSA, I'd certainly be looking to launch a VPN company or two - maybe even subsidising their offerings, to get them to the top of the performance and value for money charts. After all, getting users to voluntarily direct their traffic through your network would be much easier than installing snooping hardware at every ISP, backdooring hardware in transit or snooping on undersea cables.

[deleted]

Re: Detailed VPN Comparison Chart

#44

Post by jessaustin »

jlgaddis wrote: post #28
vpnspeedtest wrote: post #4

http://vpnspeedtest.org/ tests over 20 VPN services to find the maximum speed of each VPN from 8 locations around the world. ThatOnePrivacyGuy should use their open source speed test tool instead as the tests are verifiable (unlike his tests from a single location which nobody can reproduce).

I don't see a "disclaimer/disclosure" (kinda standard practice around here) so I assume your username is entirely coincidental?

The 'name and the link are less than a centimeter apart on one's screen. That seems enough to clue in most readers?

Re: Detailed VPN Comparison Chart

#45

Post by spookyuser »

Freak_NL wrote: post #22
ggregoire wrote: post #12

I use ExpressVPN mainly for Netflix, but most of their servers are banned and it's quite expensive. What VPN do you use for this purpose?

That's pointless. Netflix bans each and every VPN IP address they can get their hands on — they are quite thorough. You might as well get a cheaper VPN subscription with a VPN provider who condones torrenting and access the shows you are missing that way.

Well then they haven't got every vpn ip because expressvpn has been working with netflix for almost 6 months straight in my experience.

Re: Detailed VPN Comparison Chart

#46

Post by sarsaparilla »

JorgeGT wrote: post #33
Tinyyy wrote: post #16

How much profit does a VPN operator make? Since running my own box on DigitalOcean costs as much as a VPN ($5), at <10% traffic utilisation.

I also run my VPN on a cheap VPS. Dedicated VPN companies can easily come under attack/scrutiny, or could have temptations of selling user data if subscribers fall, but I doubt anyone is monitoring individual, ephemeral DO droplets/AWS instances.

If you're the only user of your VPN, doesn't that make it pretty easy to trace your usage back to you? I would have thought that using a VPN Provider would assist privacy by making it hard to figure out which client initiated the any request coming out of the VPN node...

Re: Detailed VPN Comparison Chart

#47

Post by PTRFRLL »

Johnny555 wrote: post #37

I've seen lots of VPN comparisons that rate VPN providers on what they do and do not log. But who really verifies this? What's to stop VPN provider X from claiming "We don't log anything", while simultaneously streaming a real-time log to any government agency that asks for it?

Definitely a valid point. A recent court case involving VPN provider Private Internet Access seemed to back up their 'no logs' policy.

>“A subpoena was sent to London Trust Media and the only information they could provide is that the cluster of IP addresses being used was from the east coast of the United States,” the FBI’s complaint reads.[1]

Unfortunately, waiting for a court case involving your VPN provider isn't a great way to determine what they log.

[1] https://torrentfreak.com/vpn-providers-no-logging-claims-tes...

Re: Detailed VPN Comparison Chart

#48

Post by subliminalpanda »

Freak_NL wrote: post #21
pedro2 wrote: post #10

That site should have a top 3 pick, tailored for paranoia, torrenting and normal unsecured wifi hotspot hardening. Personally: I use AirVPN because to me it matters the client is open source. For all others, I guess PIA (Private Internet Access) is fine.

> I use AirVPN because to me it matters the client is open source. Don't most VPN providers offer OpenVPN as an option? Private Internet Access does. I always assumed that the client offered is to have an easy setup method for users who don't know how to configure a normal VPN client safely.

It's been a while but the last time I used PIA I noticed that their configurations were woefully insecure (BF-CBC Ciphers, no tls-auth, pre-shared keys instead of certificates). This was maybe a couple of years ago.

Has that changed recently?

Re: Detailed VPN Comparison Chart

#50

Post by PTRFRLL »

subliminalpanda wrote: post #48
Freak_NL wrote: post #21

Earlier quoted context omitted.

> I use AirVPN because to me it matters the client is open source. Don't most VPN providers offer OpenVPN as an option? Private Internet Access does. I always assumed that the client offered is to have an easy setup method for users who don't know how to configure a normal VPN client safely.

It's been a while but the last time I used PIA I noticed that their configurations were woefully insecure (BF-CBC Ciphers, no tls-auth, pre-shared keys instead of certificates). This was maybe a couple of years ago. Has that changed recently?

Yes, they recently updated their OpenVPN configuration and now have a 'strong' OpenVPN config option.

>All our servers are now running OpenVPN on UDP port 1197 with our 4096bit RSA server certificate, 4096bit Diffie-Helman key exchange, AES-256-CBC, SHA256 and TLS v1.0-1.2 support.

https://www.privateinternetaccess.com/forum/discussion/20093...

Post reply on HN