Live data from Hacker News

ProtonVPN

protonvpn.com

81–90 of 205 posts

Re: ProtonVPN

#81
post #79

ProtonMail is doing what I expected Mozilla would do. I expected Mozilla to promote online privacy with their browser and Tor nodes and more...

Mozilla's made a couple of bet-the-company decisions in the last couple years, including Firefox OS and the phone. Given the results of those, it's a miracle of luck and effective management that they're still in business.

But that would be another bet-the-company prospect, and I don't see them likely to try that for a couple years.

Re: ProtonVPN

#83
post #25

How does this compare to TunnelBear [1]? - TunnelBear is a bit more expensive (4.99$/mo, paid annually vs 4$/mo). - TunnelBear supports up to 5 connections per account vs 2. I use TunnelBear regularly for my browser and phone. Both works great. My subscription is going to expire soon and I'll be open to try other VPN providers, not that there is anything wrong with TunnelBear. Any recommendations? This site [2] has f…

HN gets regular "what VPN should I use?" questions and my answer is always the same: Algo [1]. It is designed to be simple to set up, simple to tear down, and usable with numerous cloud providers or your own Linux server. [1] https://github.com/trailofbits/algo

I'm really interested in trying this but nervous with how much a cloud service will cost. Is there a free option for a cloud hosting service that I can start with?

Re: ProtonVPN

#84

Earlier quoted context omitted.

Wait. Do you mean they actually inspect traffic and tear down the connection if they see an SSH handshake on any port other than tcp/22?

They whitelist ports, I believe. That's the reason torrents don't work, for example.

Seriously? Wow, well fuck that. If I buy a VPN, I expect data_in = data_out , not sanitized(data_out)

Re: ProtonVPN

#86

Free VPN? Not a single reference to their log retention policy in this release.

In their pricing page

"ProtonVPN is a no logs VPN service. We do not track or record your internet activity, and therefore, we are unable to disclose this information to third parties."

https://protonvpn.com/pricing

Re: ProtonVPN

#87
post #72
post #56

Using public commercial VPN providers for serious security/privacy is a very bad idea. Get someone to set up Trail of Bits "Algo" for you (or do it yourself, if you're comfortable with Ansible).

Looking at Algo ( https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-th... ), it seems like it provides an easy way to setup a (secure) VPN on a piece of hardware you own or one of the supported public clouds. In that respect, I'm not sure if it gives a lot of privacy. As you're the only one using that VPN, the traffic may not be too hard to trace back to you.

It sounds like you're attempting to gain anonymity, not privacy. Any VPN only offers limited anonymity, since that is not their purpose. If you want robust anonymity, you need to use something like Tor.

Re: ProtonVPN

#88
What are security features of their VPN or email that are not in other VPNs or emails, that I can measure? I.e. I don't care how military grade is their server side encryption or I don't care that they decrypt in my JS, as long as threat model remains the same.

What they changed in the model? Is it trustless?

Re: ProtonVPN

#89
post #26

Earlier quoted context omitted.

I found malware in the PIA installer. Not sure if it was planted by PIA themselves or I was subjected to a MITM attack, and so I would never use any bespoke VPN software again. Best just downloading the OpenVPN config files and plug them into something like Viscosity[0] (which I trust over the more bespoke VPN clients made by the VPN providers themselves). [0]: https://www.sparklabs.com/viscosity/

> Best just downloading the OpenVPN config files and plug them into something like Viscosity… On macOS, I just created a new "PIA" service in Network. Is there any reason to use Viscosity instead of the macOS VPN client?

If I am not wrong PIA doesn't support IKEv2. The only choice is then L2TP/IPSec.

IPSec is typically considered secure, but it's allegedly compromised in some implementations and/or weakened during the standardisation process.

Re: ProtonVPN

#90

How does this compare to TunnelBear [1]? - TunnelBear is a bit more expensive (4.99$/mo, paid annually vs 4$/mo). - TunnelBear supports up to 5 connections per account vs 2. I use TunnelBear regularly for my browser and phone. Both works great. My subscription is going to expire soon and I'll be open to try other VPN providers, not that there is anything wrong with TunnelBear. Any recommendations? This site [2] has f…

the irony of a site with "privacy" in its name that uses a bunch of google services (that track you out the wazoo).

edit: with that said, i really appreciate the compilation of information here, so it's no knock on the site owner.

Post reply on HN