Slashdot Mirror
VPN Providers Report Huge Increase In Downloads, Usage Since Privacy Rules Were Repealed (ibtimes.com)
An anonymous reader writes: A number of major VPN providers reported a significant increase in subscriptions, downloads, and traffic from Americans since the U.S. Congress voted to repeal the Broadband Consumer Privacy Rules that would have mandated internet service providers get user permission before collecting information. The International Business Times reports that "several popular VPN providers reported a more than 50 percent increase in downloads." VPN provider ExpressVPN said they "experienced a 105 percent increase in traffic from the U.S. and a 97 percent spike in sales" since the repeal. Additionally, "KeepSolid, the New York-based company behind VPNUnlimited, noted a 32 percent increase in purchases and growth of 49 percent in total downloads," reports IBT. "The company also reports having a considerable amount of increased engagement via social media regarding user privacy." Have you taken any privacy measures since Congress voted to repeal ISP privacy rules? If you use a VPN, which provider do you recommend and why?
The privacy rules WERE NEVER IN EFFECT so this is fucking retarded. Literally nothing has changed about your internet privacy today from a month ago. Or six months ago. Or a year ago. THE RULES THAT WERE REPEALED WERE NEVER ACTIVE. Further, what was really repealed was the FCC having any control over the internet. Yes, you should have privacy. NO THE FCC SHOULD HAVE NO INVOLVEMENT. Not for good or bad. They should have no ability to regulate anything on the internet. Fuck them and fuck them trying to reach over into the internet as a way to justify their continued funding and existence as radio and television over the air dies.
And fuck all these tech-pundit-dipshits who have been misreporting all of this and fucking scaremongering people. You fucking twats.
With all this talk about using VPN for privacy, I've been wondering if there are any solutions that are designed to provide that kind of privacy across an entire LAN. If, for example, you wanted to make sure your company's web traffic was private, is anyone offering some kind of service that allows you to configure a common SMB firewall to route all outgoing traffic through a secure VPN/proxy?
I've had some clients request this, but I can't find anything that looks remotely reputable. Most of the services getting attention right now are designed to have software installed on every device.
How many of those fools will start using free VPN providers that make their privacy and security even worse: Proxy Services Are Not Safe. Try These Alternatives
I've used OperaVPN on a jailbroken phone and then used tcpdump to monitor the traffic to be sure. OperaVPN lies, or stopped providing updates to my iOS version, leaving it broke. Matter of fact, they haven't had an update in months. Using Netherlands, it connects somewhere between the U.S. Midwest to California servers. Using Germany, I've caught it using Swiss and Russian servers. I would never use a U.S. or U.K. server. You can check by using: "tcpdump -D" to get your internet device name (usually wlan0 or eth0) and then "tcpdump -xx -i eth0 tcp" to monitor your web browsing connections. The "-xx" part will allow you to see if the information coming and going is encrypted or not; you shouldn't be able to understand any of it. You can leave off the "tcp" part at the end, but you'll get UDP and other info too. The connections should all have the same IP address. Then, use that IP address via "geoiplookup #.#.#.#" in another terminal to find the country. I only knew my cities because the bottom of a Google search said the location on my phone and wasn't asking to translate to English for me. Both "tcpdump" and "geoip" packages are available for Linux, Cydia, and source code; I'm not sure about Window$.
Here it is again: https://theouterlinux.com/priv... Feel free to look around at the other stuff too. I'm always trying to figure out what to add or change to make better so if you got a suggestion, let me know. Just remember to keep the suggestion free or open source if possible. https://theouterlinux.com/rese...ðY"--/ for other categories.
Yes it can they will still be able to tell you are using a VPN and how much data your using but not the content.
Then you just have to trust your VPNs ISP more than your own ISP.
Minimum threshold fixed. Thanks!
It looks to me that the simplest one-stop shopping privacy aware vpn tunneled browser is Epic. However I never heard of them so I'm not sure I trust them. Anyone know about this browser. looks like the best one to me if it's all legit.
Some drink at the fountain of knowledge. Others just gargle.
ThatOnePrivacyGuy on /r/privacy manages That One Privacy Site, including a handy VPN section:
https://thatoneprivacysite.net...
Unlike most other VPN reviews, this one encourages community discussion and appears to be impartial.
...as I will explain: http://www.linuxjournal.com/co...
...as I will explain. http://www.linuxjournal.com/co...
Could be a ploy to thin the herd. Only smart, interesting people will invest time and more funds in a VPN.
Given the lack of VPN payment bans/comments on the use of VPN products in the US, UK and Australia, law enforcement at a national level does not care about VPN use.
If a user is found on an interesting site using a VPN, police will get a court order in that VPN's nation and log the next log in of that site by the same VPN.
Most people set their VPN, expect to enjoy a working VPN daily and connect the same site with the same details?
Their isp ip is hidden, a big pool of new random VPN ip's get offered?
The VPN product would just connect the next day and have the origin ip, isp logged by the local police in the VPN servers nation.
Habit would allow the police to just connect the normal ip and VPN ip after a court order in any nation that hosts the VPN company.
A user would have to totally change their VPN use every session to stay away from simple court ordered police logging efforts waiting days and hours later.
Extra sentencing guidelines could then be in place as the user made it so difficult to be found? International cooperation, other courts, the sorting of accounts by another nations police, finally finding the users own ip and isp. Did the interesting person pay for the VPN every year out of a main bank account and CC? No funds for a good lawyer with all accounts frozen given the wider international connections.
Domestic spying is now "Benign Information Gathering"
Haux: some crazy mofo - that is you, I assume?
Ezekiel 23:20
AC governments have a lot to say about quality crypto and new apps as they cant get in. Governments don't seem very interested in most VPN use.
Domestic spying is now "Benign Information Gathering"
With IPSec you can set up all kinds of policies as to what can communicate with what and you can, if you wish, encrypt all traffic, even over the local LAN. Be warned: It can get complex and you are going to need PKI set up if you want to have any realistic hope of managing it in an enterprise. However you can set things up so that all traffic is encrypted on the wires for all communications, and so that devices can only communicate with other devices of your choosing.
So for a simple setup you could have a firewall (PFSense if you want a cheap one) that talks to whatever your VPN/Proxy is. Then set IPSec policies so that all your computers talk only to it. All traffic will pass only through the PFSense (even internal traffic) and it'll all be encrypted (if you specify that). You set the firewall/routing rules on the PFSense and you can force all outbound traffic over the VPN, and decide what can talk to what inside.
That's a simplistic setup, and the firewall will be a bottleneck, but that's a simple startup. You then can do things like have system to system IPSec communication, more firewall, additional routing controls (on systems or the network) etc etc.
> Deep packet inspection doesn't break encryption
No, and they can't really get your search information as a result. HOWEVER, they do get to see every IP address you contact, when you contact, how long you contact for, how much data is passed, and in what direction. VPN reduces this fine tuned envelope information to "when your LAN is passing data, and how much", leaving out the very relevant "...and to whom" part.
Also note that DNS queries are almost always in plaintext as well, though that seems to be slowly changing, so A.B.C.D will also be understood to be whatever.com.
Given the lack of VPN payment bans/comments on the use of VPN products in the US, UK and Australia, law enforcement at a national level does not care about VPN use.
They do not care *yet*. They will if VPN use becomes ubiquitous.
The NSA spent considerable effort to make sure IPSEC did not become ubiquitous.
If a user is found on an interesting site using a VPN, police will get a court order in that VPN's nation and log the next log in of that site by the same VPN.
The VPN product would just connect the next day and have the origin ip, isp logged by the local police in the VPN servers nation.
There are ways for the VPN provider to make this more difficult starting with not including the capability to log this data. With some effort, I think it could be made impossible.
A user would have to totally change their VPN use every session to stay away from simple court ordered police logging efforts waiting days and hours later.
Oddly enough, if a user routinely uses a VPN, then this is possible to do by accessing the VPN anonymously like through a public hot spot.
Did the interesting person pay for the VPN every year out of a main bank account and CC? No funds for a good lawyer with all accounts frozen given the wider international connections.
This will create a demand for anonymous payment methods. Won't that be fun for the authorities.
This is a half truth. You can get the spoken words from an compressed VoIP stream, just by the traffic pattern how good the compression works on different words. There are a lot of pitfalls, some of them are for example why SSLv3 is now fully deprecated, others only affect certain ciphers.
Its very complicated to keep up with which encryption really works. On the other hand most isp probably do not try to crack your vpn connection, yet.
> VPN reduces this fine tuned envelope information to "when your LAN is passing data, and how much", leaving out the very relevant "...and to whom" part.
This is wrong. They see only traffic to the vpn gateway and a properly configured vpn doesn't leak dns queries, either.