Live data from Hacker News

Can't trust any VPN these days

blog.orhun.dev

81–85 of 85 posts

Re: Can't trust any VPN these days

#83

Earlier quoted context omitted.

The mouse is the hard way. OP could have solved their problem by rtfming... It is literally the first paragraph on DNS. We're talking about "turn it off and on again" style issues. Before you reach for GPT, check the man pages and check the Arch wiki, you'll save a lot of time and get more information. https://wiki.archlinux.org/title/OpenVPN#DNS

We probably have different ideas about what constitutes the hard way; but that's not the point in this thread. Anyway, NetworkManager can be managed using cli for those that insist, so all that was needed was: nmcli connection import type openvpn file Even Arch wiki says: > By default networkmanager-openvpn plugin appends DNS servers provided by OpenVPN to /etc/resolv.conf. (which is not really true. Yes, it does the…

I saw the cli is the easy way because it lets you do more. The barrier to entry is higher, yes, but if you're willing to get through that, things become easier. And by easier I mean take less time and get better results as well as easier to find solutions[0].

  > Arch wiki
It looks like their solution was following the config in 9.3. So this is why I made a snipe at reaching for GPT when the Wiki is there.

[0] The analogy I'll give is that often a novice works harder than an expert when doing the same task, even if the task is simple. This is often because the expert is doing very minute things that they might not even notice that they can leverage. I know coders rock climb, so I'll use that as an example: this may be something like a subtle finger placement or how center of gravity is placed. The practiced person has more strength, but they will literally use less energy to get up a wall than a novice (and then it can be easy to overestimate what a novice can do because they judge what energy they use)

Re: Can't trust any VPN these days

#84

Earlier quoted context omitted.

media.peerconnection.enabled = false also, this sounds like fud.

TFA is about forgetting to configure something and the VPN doesn't work while informing your ISP and probably your state of what you did. Therefore I don't think this is fud for the wider privacy case.

Calm down. If you're down the road about privacy, and you didn't already know about the webRTC thing, I don't know what to tell you. Do you want me to hold your hand and pretend you're my grandma, or are you a smart HN commenter? Seven proxies won't hide your IP if it's leaked by design implementation, and you have it enabled in a layer above the session layer. Hence why I prefer to assume a system is compromised and ONLY trust the apps I have verified and validated... If I'm doing something that needs that. "Whole-system" vpns are naieve. You're just looking to blame people.

When you get down from your horse, go and learn the Greenhills kernel and why everything from the nsa to the f35 uses it.

Re: Can't trust any VPN these days

#85

Earlier quoted context omitted.

TFA is about forgetting to configure something and the VPN doesn't work while informing your ISP and probably your state of what you did. Therefore I don't think this is fud for the wider privacy case.

Calm down. If you're down the road about privacy, and you didn't already know about the webRTC thing, I don't know what to tell you. Do you want me to hold your hand and pretend you're my grandma, or are you a smart HN commenter? Seven proxies won't hide your IP if it's leaked by design implementation, and you have it enabled in a layer above the session layer. Hence why I prefer to assume a system is compromised and…

calm down! I'm about to go on tirade!

jfc dude it was just pointed out that the ssh+socks thing you provided has issues and there are simpler solutions. Ofc it depends on your goals but yeah if you care about privacy its a terrible solution because its incredibly brittle and there are much easier ways like using that ssh connection to setup a wireguard tunnel with a one-liner or any number of other more comprehensive solutions. Don't take it so personally, if it works for you it works for you.

Post reply on HN