Live data from Hacker News

VPN⁰: A Privacy-Preserving Distributed VPN

brave.com

41–50 of 142 posts

Re: VPN⁰: A Privacy-Preserving Distributed VPN

#41
post #26
post #24

This is not a new idea. Hola has been around for years. Trying to protect users through access control is foolish. It's like running a Tor exit from home.

I guess it's a bit different for two reasons: 1) Here users are using the bandwidth and it's not resold to companies like Hola does is with https://luminati.io . At least for now. 2) They whitelist domains, so they could only whitelist example.com and you know it's not like Tor where everything goes or Hola where someone is web scraping things through your IP.

True, nothing like Luminati, I gather.

But the very idea of sharing my uplink is anathema. Maybe if everyone curated their own whitelists. But once people rely on whitelists from "trusted" peers, all bets are off.

A safer alternative would have users sharing access to each others VPN service connections. That would at least insulate users somewhat from malicious/illegal traffic routed through them.

Indeed, I routinely route traffic through nested chains of 3-5 VPN services. A common criticism is the cost of multiple accounts. And I typically have even more accounts at any given time, for variety.

But if a bunch of people pooled access to their VPN services, or to VPNs that they ran privately on anonymously leased VPS, each one could have a much larger variety of VPN paths and exit IPs. And you could multiplex and split traffic through the VPN network, to increase anonymity. Or aggregate links, using MPTCP, to increase throughput. And you could even implement something like Tor's process of switching circuits every 10 minutes.

I bet that I could implement a simple version of that with routing tables and iptables rules. And some shell scripts. Perhaps with network namespaces, for a little more security. Even Docker, maybe.

But not just sharing ISP uplinks. That will end in tears.

Re: VPN⁰: A Privacy-Preserving Distributed VPN

#42

Earlier quoted context omitted.

Cant recommend not running a TOR exit node from home enough. When i was running mine for the ~6 months it was online, cox would shut my internet off for various reasons on a weekly basis.

My IP got blacklisted from various sites for simply running a non-exit relay. People say it's totally safe to run a relay/bridge; it is not.

Maybe they used to. Tor Project does not recommend running even middle relays from home.

Re: VPN⁰: A Privacy-Preserving Distributed VPN

#44

Earlier quoted context omitted.

Cant recommend not running a TOR exit node from home enough. When i was running mine for the ~6 months it was online, cox would shut my internet off for various reasons on a weekly basis.

My IP got blacklisted from various sites for simply running a non-exit relay. People say it's totally safe to run a relay/bridge; it is not.

Hosting a bridge from home is safe. They're not in the global relay list so nobody knows which IP to block. Middle relays should be safe to host from home but unfortunately some overzealous 3rd party lists of "evil IPs" include them.

Re: VPN⁰: A Privacy-Preserving Distributed VPN

#45
post #10

Great idea. Was thinking of doing something like this for a while, but obviously the drawback is that you're suspect to being the exit node for someone who's doing something illegal, which is a risk I'm not willing to take for the sake of privacy. Obviously you can start a whitelist, but as some other comment said, it's pretty limited... and I don't want the hassle to add in every domain I go to (given the number of…

But would you be more OK sharing your AlgoVPN exit? With the same sort of blacklist/whitelisr approach?

Re: VPN⁰: A Privacy-Preserving Distributed VPN

#46

Earlier quoted context omitted.

Cant recommend not running a TOR exit node from home enough. When i was running mine for the ~6 months it was online, cox would shut my internet off for various reasons on a weekly basis.

My IP got blacklisted from various sites for simply running a non-exit relay. People say it's totally safe to run a relay/bridge; it is not.

Perhaps Tor should become an integral part of the TCP/IP stack. That way, exit nodes would simply be the destination nodes for every connection. (?)

Re: VPN⁰: A Privacy-Preserving Distributed VPN

#47
post #45
post #10

Great idea. Was thinking of doing something like this for a while, but obviously the drawback is that you're suspect to being the exit node for someone who's doing something illegal, which is a risk I'm not willing to take for the sake of privacy. Obviously you can start a whitelist, but as some other comment said, it's pretty limited... and I don't want the hassle to add in every domain I go to (given the number of…

But would you be more OK sharing your AlgoVPN exit? With the same sort of blacklist/whitelisr approach?

Probably. Given that AWS/GCP can't trace back to me then maybe. But at the same time I'm afraid government surveillance is government surveillance and petty tactics around hiding your identity to AWS/GCP won't cut it.

Re: VPN⁰: A Privacy-Preserving Distributed VPN

#48
post #47
post #45

Earlier quoted context omitted.

But would you be more OK sharing your AlgoVPN exit? With the same sort of blacklist/whitelisr approach?

Probably. Given that AWS/GCP can't trace back to me then maybe. But at the same time I'm afraid government surveillance is government surveillance and petty tactics around hiding your identity to AWS/GCP won't cut it.

Me too, think.

What about sharing it as an internal non-exit VPN in a nested chain?

Re: VPN⁰: A Privacy-Preserving Distributed VPN

#49
post #24

This is not a new idea. Hola has been around for years. Trying to protect users through access control is foolish. It's like running a Tor exit from home.

Cant recommend not running a TOR exit node from home enough. When i was running mine for the ~6 months it was online, cox would shut my internet off for various reasons on a weekly basis.

Also, depending on the country, you can be hold responsible if someone use your exit node to do something illegal.

As far as I remember, in France, you can get the same status as an ISP (don't remember the name though) to be able to run an exit node without being held responsible. But you will have to respect certain rules.

Re: VPN⁰: A Privacy-Preserving Distributed VPN

#50
post #40

Earlier quoted context omitted.

My IP got blacklisted from various sites for simply running a non-exit relay. People say it's totally safe to run a relay/bridge; it is not.

Which sites?

Not op, but it's my understanding that they can blacklist pretty much the same sites as for exit relays. So your email client may stop working, Also search sites, social media, etc.
Post reply on HN