Slashdot Mirror
Cloudflare Says Its New VPN Service Won't Slow You Down (wired.com)
Cloudflare has announced that it's adding a VPN service to its 1.1.1.1 DNS resolver app. The 1.1.1.1 service, which first came to mobile back in November, currently attempts to speed up mobile data speeds by using Cloudflare's network to resolve DNS queries faster than your existing mobile network. From a report: "We wanted to build a VPN service that my dad would install on his phone," says Cloudflare CEO Matthew Prince. "If you tell him that it will make his connection more private and secure, he'd never do it. But if you tell him it will make his connection faster, make his phone's battery last longer, and make his connections more private, then it would be something he'd install."
Mobile phone users can begin signing up for the service, dubbed Warp, through Cloudflare's mobile app 1.1.1.1 on Monday; Cloudflare says it hopes the service is working Monday, but it might take a few days. Regardless, Warp is a sign of things to come for the rest of the internet. The technology that Cloudflare is betting will make Warp fast is a protocol invented by Google called QUIC, and it could one day make the rest of the internet faster and more reliable. QUIC is essentially a substitute for TCP, the venerable protocol now used for most internet connections. TCP, introduced in 1981, made reliable internet connections possible, says Jana Iyengar, who worked on QUIC for Google; Iyengar is now a distinguished engineer at the cloud computing company Fastly working to help finalize QUIC with the Internet Engineering Task Force standards body.
Mobile phone users can begin signing up for the service, dubbed Warp, through Cloudflare's mobile app 1.1.1.1 on Monday; Cloudflare says it hopes the service is working Monday, but it might take a few days. Regardless, Warp is a sign of things to come for the rest of the internet. The technology that Cloudflare is betting will make Warp fast is a protocol invented by Google called QUIC, and it could one day make the rest of the internet faster and more reliable. QUIC is essentially a substitute for TCP, the venerable protocol now used for most internet connections. TCP, introduced in 1981, made reliable internet connections possible, says Jana Iyengar, who worked on QUIC for Google; Iyengar is now a distinguished engineer at the cloud computing company Fastly working to help finalize QUIC with the Internet Engineering Task Force standards body.
Do not want, on principle.
1990s: internet is decentralized and resilient against attack
Today: nearly all traffic goes through one company
Can we use this VPN service on our desktops too? Currently I use PIA as my VPN so if this is better, I'll switch.
> "If you tell him that it will make his connection more private and secure, he'd never do it. But if you tell him it will make his connection faster"
So they see no value in security or privacy. Also, they are one of the silicon valley pro-censorship stalwarts.
This is a VN, with no P.
No thanks.
NordVPN for the win (which uses OpenVPN and can be used completely without the NordVPN apps)....
But you have to get the adblocking version on Nord's website. Google, in their infinite wisdom, doesn't allow adblocking apps to be hosted on their app store.
If Google is behind anything, you can bet it will have a way to serve you ads no matter what else it does. And that is a security risk. They will always chose profits over customer safety.
It is a gigantic honeypot.
GENERATION 26: The first time you see this, copy it into your sig on any forum and add 1 to the generation.
No thanks
A VPN that doesn't slow you down? What are they getting out of it?
captcha - struck
"more private and secure" by running all of your traffic through Cloudflare!
I just shot water out of my nose. Funniest thing I read all day.
I don't respond to AC's.
I run a VPN on my phone already and I notice that there is substantially more battery usage with it than without. It makes sense: You're taking all that data and encrypting it. I don't know how you could encrypt the data and use LESS battery?
Anyone have an idea?
Slashdot's rate-of-post filter: Preventing you from posting too many great ideas at once.
Running all cellphone & internet traffic thru any private company's servers???
Protecting all criminals' cellphone & internet communication from law enforcement???
(Because, IMHO, the people who are always really obsessed w/ "privacy" are criminals & NOT general public (who, on the contrary, want/like to help law enforcement)!!!)
THANX BUT NO THANX!!!
A company spokesman elaborated on their promises by affirm the company would “Never gonna give you up. Never gonna let you down. Never gonna run around and desert you.”
Well, there's spam egg sausage and spam, that's not got much spam in it.
Would you mind explaining exactly how this isn't a VPN? How is it not private?
...then why lie to him and tell him it makes them more private?
A guy who, by his own admission, woke up one morning and decided he didn't like what some people were saying on the Internet and decided to use his company to wipe them off the Web now wants us to trust his company with our privacy. Are you fucking kidding me you utter moron?
All the finely-tuned network stacks out there are basically being thrown out the window... congestion management, buffering/resend, parsing, etc. are all being re-written into the QUIC protocol. The spec is so large that they had split it up into several smaller specs -- to start, things are going to be buggy, incompatible, and perform poorly. QUIC makes me nervous.
And Google's QUIC, which was very HTTP focused, is almost unrecognizable now that it's gone through IETF, where it was split into the two protocols HTTP/3, and the generic multi-stream transport QUIC.
I used a free DNS server for a while until I got a lot of certificate errors in the browser,
indicating that they were trying to intercept my HTTPS traffic. Dropped them in about
30 seconds. Something to watch out for.
Plus don't forget even if all your browsing is HTTPS, and they don't try to
intercept it, DNS providers will have a record of all the dns (a.b.c.com) addresses
you visit.
they're ignoring the source ip/port information in every packet so they're
going to have the same nightmare through firewalls that VOIP has.
Wonderful.
Duh. Cloudflare logs every site you access via name lookup.
Privacy, much?
Already googles accelerated server pages don't work on all browsers. Even sites like Reddit are using this. THe other day a Reddit site would not work on safari for me. Needed to install chrome.
hyperlinks that only work when you are logged into facebook and have facebook user permissions to view the page are becoming the norm.
the world wide web is getting stove piped into cable companies. Not a web anymore.
Now we get a transport protocol that requires specialized drivers or browsers to use.
Some drink at the fountain of knowledge. Others just gargle.
never to cum in your mouth.
The technology that Cloudflare is betting will make Warp fast is a protocol invented by Google called QUIC, and it could one day make the rest of the internet faster and more reliable.
Most operators I know are blocking QUIC because it's way too aggressive.
When a single QUIC session intentionally consumes twice the bandwidth of the sum total of 20 TCP sessions over a bandwidth constrained link Huston we have a problem. Not a small problem but a massive unsustainable one.
Their VPN service is encrypted.
So again, how is this not private?
If you consider private to mean between you and the site you wanted to reach, then no. It's not private. If you want to welcome Cloudflare to have access to this data, you can have that - but you can't call it private.
You're going to have to do better than that. How is it not private? The VPN connection is encrypted. All Cloudflare would be able to see is that you connected to their VPN, but nothing beyond that.
Do you have proof to show otherwise? It sounds more to me like your opinion is hatred fueled rather than fact fueled.
On the other hand, QUIC was carefully designed with all the past experience of network protocol failures. So it tries very hard to avoid even the possibility of ossification.
TCP is bad because it's basically set in stone. It's not possible to change a single bit in the TCP/IP spec without breaking untold millions of badly designed middleboxes.
Anyone tested this on the dark side of the planet yet?
See subject: Via APK Hosts File Engine 2.0++ 64-bit for Linux/BSD h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p
Yields more security/speed/reliability/anonymity vs. any 1 solution (99% of threats use hostnames vs. IP address most firewalls use) more efficiently/FASTER/NATIVELY 4 less!!
Vs. "Bolt on 'MoAr' illogic-logic" slowing u hosts speed u up 2 ways: Adblocks + Hardcode fav. sites u spend most time @ vs. competition w/ security bugs (DNS/AntiVir) + overheads slowing u (messagepass 'souled-out' to advertisers easily detected & blocked addons + firewall filtering drivers) & complexity leads to exploit!
* 1 of a kind in GUI 4 Linux/BSD!
BEST PART: U CONTROL IT! Want to do a job RIGHT? Do it urself.
APK
P.S.=> Protects vs. scripts/trackers (kernelmode faster vs. usermode slower NoScript vs. 3rd party script)/ads/DNS request tracking + redirect poisoned or downed DNS/botnets/malware download/malcript/email malpayload
See subject: APK Hosts File Engine 1.0++ 64-bit for MacOS h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r M a c O S . z i p
Yields more security/speed/reliability/anonymity vs. any 1 solution (99% of threats use hostnames vs. IP address most firewalls use) more efficiently/FASTER + NATIVELY 4 less!
Vs. "Bolt on 'MoAr' illogic-logic" slowing u hosts speed u up 2 ways: Adblocks + Hardcode fav. sites u spend most time @ vs. competition loaded w/ security bugs (DNS/AntiVir) + overheads slowing u (messagepass 'souled-out' to advertisers easily detected & blocked addons + firewall filtering drivers) & their complexity leads to exploitation!
* ONLY 1 of its kind in GUI 4 MacOS!
STOPS JEWGLE & all other kike advertisers!
APK
P.S.=> Protects against ALL known & unknown vulnerabilities. Now supports port filters in hosts. My work is world-class & China copied it because they can't do better. I am God's gift to Slashdot... apk
See subject: APK Hosts File Engine 1.0++ 64-bit for MacOS h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r M a c O S . z i p
Yields more security/speed/reliability/anonymity vs. any 1 solution (99% of threats use hostnames vs. IP address most firewalls use) more efficiently/FASTER + NATIVELY 4 less!
Vs. "Bolt on 'MoAr' illogic-logic" slowing u hosts speed u up 2 ways: Adblocks + Hardcode fav. sites u spend most time @ vs. competition loaded w/ security bugs (DNS/AntiVir) + overheads slowing u (messagepass 'souled-out' to advertisers easily detected & blocked addons + firewall filtering drivers) & their complexity leads to exploitation!
* ONLY 1 of its kind in GUI 4 MacOS!
STOPS JEWGLE & all other kike advertisers!
APK
P.S.=> Protects against ALL known & unknown vulnerabilities. Now supports port filters in hosts. My work is world-class & China copied it because they can't do better. I am God's gift to Slashdot... apk
See subject: APK Hosts File Engine 1.0++ 64-bit for MacOS h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r M a c O S . z i p
Yields more security/speed/reliability/anonymity vs. any 1 solution (99% of threats use hostnames vs. IP address most firewalls use) more efficiently/FASTER + NATIVELY 4 less!
Vs. "Bolt on 'MoAr' illogic-logic" slowing u hosts speed u up 2 ways: Adblocks + Hardcode fav. sites u spend most time @ vs. competition loaded w/ security bugs (DNS/AntiVir) + overheads slowing u (messagepass 'souled-out' to advertisers easily detected & blocked addons + firewall filtering drivers) & their complexity leads to exploitation!
* ONLY 1 of its kind in GUI 4 MacOS!
STOPS JEWGLE & all other kike advertisers!
APK
P.S.=> Protects against ALL known & unknown vulnerabilities. Now supports port filters in hosts. My work is world-class & China copied it because they can't do better. I am God's gift to Slashdot... apk
Actually, you're encrypted from your network to the VPN server. Owned by CloudFlare. Then it decrypts and exits kind of like ToR which is why the US government runs tons of exit nodes. You do know how a VPN and tunneling works right?
"In response to nuclear warhead placed in sub-orbit United States today launching SUB-ORBITAL platform https://tech.slashdot.org/comm... w/ MULTI-WARHEAD capacity: Purpose - To maintain balance of power"....
* StarTrek TOS "Assignment URTH"...
APK
P.S.=> I'll be honest w/ you all & tell you I've had the BEST April 1 I've ever had today - wish you ALL the same, even trolls... apk
Wrong, it's end to end encrypted. Cloudflare would would obviously know when you connect to their network but they don't have access to anything you transmit or receive over that network.
"Warp respects end-to-end encryption and doesn’t require you to install a root certificate or give Cloudflare any way to see any encrypted Internet traffic. It will also add encryption from your device to the edge of Cloudflare's network for traffic that is not fully encrypted."
Go read a book on networking, because you have no clue what you are talking about, junior.
Everyone who've read https://notabug.org/themusicgo... know this!
It will also add encryption from your device to the edge of Cloudflare's network for traffic that is not fully encrypted.
It is literally talking about https and non https web shit. Anything else done and all of your DNS queries can be recorded. You are not reading through the legalese. You must not understand how the data transfer works, and are their prime target. GLHF. Just don't tell others their wrong.
HTTPS is an encrypting protocol and I don't know why you pretend that it's not.
You handwave information that contradicts you.
You move goalposts from "Cloudflare can see everything you do" to "Cloudflare can see where you connect".
You still haven't provided a single shred of proof to back up your ridiculous, emotionally-driven claims.
I'll accept your post as tacit admission that you don't know what you are talking about.
I never claimed they could see everything you do. I was simply stating you were wrong about it being private and then went on to show the flaws in your theory.
With Cloudflare's past as a CIA honeypot, who the hell wouldn't want to use their VPN? Thank you for the offer, but I will stay with the European alternatives.