Live data from Hacker News

ExpressVPN employees complain about ex-spy's top role at company

reuters.com

91–100 of 175 posts

Re: ExpressVPN employees complain about ex-spy's top role at company

#92
post #82

Earlier quoted context omitted.

> you replace trusting your ISP with trusting a different group of unknown people with similar motivations I've always seen this argument but it's never made sense to me. For starters I absolutely don't trust my ISP. I know they are collecting, storing, likely selling my data and that they are 100% going to comply with any government requests from my government (I don't even trust that they would only respond to lega…

Plus, you can chain through a couple VPNs. Both VPNs have to be compromised for you to lose privacy.

The first one would still know everything though.

Re: ExpressVPN employees complain about ex-spy's top role at company

#93
post #2

It's been clear for a long time that every single commercial VPN service is a waste of money. At best, you replace trusting your ISP with trusting a different group of unknown people with similar motivations. At worst, it's a government agency honeypot or someone like Facebook. If you think you want a VPN for "privacy", use Tor Browser. If you want a VPN for any other reason that "normal people" think they want a VPN…

> you replace trusting your ISP with trusting a different group of unknown people with similar motivations I've always seen this argument but it's never made sense to me. For starters I absolutely don't trust my ISP. I know they are collecting, storing, likely selling my data and that they are 100% going to comply with any government requests from my government (I don't even trust that they would only respond to lega…

Use an alternative DNS server, Firefox/Brave/Ungoogled Chromium, uBlock Origin, and disable JavaScript everywhere you can possibly help it. As far as reclaiming some privacy from routine surveillance, this is probably better advice than "Pay Unknown Company X $9/mo to maybe be slightly better than your ISP in terms of privacy".

Re: ExpressVPN employees complain about ex-spy's top role at company

#95
post #2

It's been clear for a long time that every single commercial VPN service is a waste of money. At best, you replace trusting your ISP with trusting a different group of unknown people with similar motivations. At worst, it's a government agency honeypot or someone like Facebook. If you think you want a VPN for "privacy", use Tor Browser. If you want a VPN for any other reason that "normal people" think they want a VPN…

> you replace trusting your ISP with trusting a different group of unknown people with similar motivations I've always seen this argument but it's never made sense to me. For starters I absolutely don't trust my ISP. I know they are collecting, storing, likely selling my data and that they are 100% going to comply with any government requests from my government (I don't even trust that they would only respond to lega…

>*are collecting, storing, likely selling my data and that they are 100% going to comply with any government requests from my government (I don't even trust that they would only respond to legal requests).*

https://en.wikipedia.org/wiki/Carnivore_(software)

And this was the very very crude version, what is happening today is obviously light years ahead of what Carnivore was...

We really need a "*Moore's Law For Surveillance Capabilities Multiplying by X Every N Period*"

Re: ExpressVPN employees complain about ex-spy's top role at company

#96

Earlier quoted context omitted.

It's far from a waste of money. They help with things such as skipping geoblocking, able to deceive ISPs that send mail warning users about pirated content, can in some cases help with gaming ping, allow users to trick sites that rely on IP logging and many other applications besides cybersecurity and privacy. The main issue is that they all seem to advertise themselves as these privacy and cybersecurity services fir…

Totally agree. The geoblocking is the most common reason a lot of people use VPNs, even if that isn’t always how they are directly marketed. A friend’s mom asked me a few weeks ago for VPN recommendations so she could watch British TV easier. She’s 70. Her concern isn’t about safer browsing stuff but watching GBB more easily. *Disclosure: ExpressVPN has sponsored my podcast in the past (tho I don’t handle ad sales fw…

It’s funny express has you advertise as being able to watch X service considering when I used express I couldn’t watch Netflix because they throw an error saying they know I’m using a VPN. Same with Amazon prime. I’ve switched to nordvpn but they are no different I can’t even use fast.com to check the speed when the vpn is on.

False advertising I’d say

Re: ExpressVPN employees complain about ex-spy's top role at company

#97
post #92
post #82

Earlier quoted context omitted.

Plus, you can chain through a couple VPNs. Both VPNs have to be compromised for you to lose privacy.

The first one would still know everything though.

The first one would know that you are talking to the second VPN. The second VPN would know that VPN1 User is talking to facebook.com. In principle, neither of them has the full picture. In practice, you may leak enough information that both of them could get the full picture.

Re: ExpressVPN employees complain about ex-spy's top role at company

#98
post #34

For any company, ask why they'd actually care about doing the right thing. Is it reputation? Integrity? Is the reasoning purely financial? Then ask whether the company operates in a way that suggests they'd do the profitable thing over the right thing if they think they might get away with it. Does that picture look realistic? As an example, look at Apple. Leaving the tangential discussion about scanning iCloud photo…

Just look at Proton Mail removing the "We don't log IPs" claim from their website last week after it emerged they are forced to log IPs .

this is a bad faith argument.

Proton logged IPs in response to Swiss court order and handed over that data after the order was received. They do not log IPs otherwise. And bear in mind, the specific request in question here had the involvement of the French state as well.

Re: ExpressVPN employees complain about ex-spy's top role at company

#99
post #34

Earlier quoted context omitted.

Just look at Proton Mail removing the "We don't log IPs" claim from their website last week after it emerged they are forced to log IPs .

this is a bad faith argument. Proton logged IPs in response to Swiss court order and handed over that data after the order was received. They do not log IPs otherwise. And bear in mind, the specific request in question here had the involvement of the French state as well.

How is this a bad faith argument? Proton's claim was they didn't log IPs and then it turns out that in certain cases they do – regardless of the reason, they reneged on their claim.

Re: ExpressVPN employees complain about ex-spy's top role at company

#100
post #2

It's been clear for a long time that every single commercial VPN service is a waste of money. At best, you replace trusting your ISP with trusting a different group of unknown people with similar motivations. At worst, it's a government agency honeypot or someone like Facebook. If you think you want a VPN for "privacy", use Tor Browser. If you want a VPN for any other reason that "normal people" think they want a VPN…

The utility in a VPN is in travelling, not at home. I’m not sure if I trust ProtonVPN more than I trust my ISP, but I sure as hell trust them more than I trust the little hotel I stayed at in Brooklyn.

Long term I’ll probably just solve this by setting up a VPN server at home, so I can tunnel through to my local services and protect myself from wifi endpoints I use on the go.

Post reply on HN